2 Commits

Author	SHA1	Message	Date
CIAgent	26b4a5be60	feat(P02): telemetry-wired sandbox spawn (Wave 3) ... Task 2-3-01: create(learner_id, task_id) — telemetry sandboxes run a persistent helper/inner namespace topology (offline inner ns; agent joins mount ns only and stays online to reach the loopback ingest). Capture agent copied into the workspace (visible in-ns at the bind), launched via sh -c with in-ns absolute paths (host cwd invalid after the nsenter mount swap), stdin=DEVNULL daemonizes the agent (lifecycle tied to sandbox: destroy reaps agent -> inner -> helper). Wire contract: frames strip URL-owned identity (ingest extra=forbid anti-spoofing); spool keeps full events. E2E test (real uvicorn on ephemeral port): exec in a live namespace sandbox -> events arrive at WS ingest -> SQLite, ordered, sandbox-scoped. Pure-shell path (task_id=None) asserts no capture agent. Full suite 216 green; ruff clean. ---ci--- phase: 2 milestone: v0.3 status: execute requirements: {covered: [REQ-3-003], partial: []} ---/ci---	2026-09-12 00:47:45 +00:00
CIAgent	2d9f3201b3	feat(P01): sandbox backend + workdir + deps + config (Wave 1) ... Task 1-1-01: SandboxBackend protocol + UnshareBackend (unshare user/mount/pid/net) + workdir layout (workspace/ + snapshots/). Isolation probe real on this box: in-ns uid=0, network isolated (fresh net ns, lo only), writes contained to per-sandbox bind dir; proc-remount not permitted (documented, not required). Deviations (documented): util-linux 2.38.1 lacks --bind flag -> bind moved into namespace via sh -c mount shim; rlimits moved into shim (preexec would kill the pytest interpreter); userns != DAC barrier (host-uid-owned targets), documented for hardening under D-025. Task 1-1-02: add sqlmodel, sqlalchemy, websockets, aiofiles (PyPI-verified); config keys SANDBOX_DIR/MAX_CONCURRENT=5/TIMEOUT_S=900/MAX_WORKDIR_MB=512/DB_PATH (D-024/027/032/G-2). Task 1-1-03: README sandbox isolation section with real probe transcript + locked resource-limit mechanism (G-1/G-2); ruff config already correct (no change). 139/139 tests pass; ruff clean. .gitignore: ignore all ai-service sandboxes dirs (runtime+tests). ---ci--- phase: 1 milestone: v0.3 status: execute requirements: {covered: [REQ-3-001, REQ-3-002], partial: []} ---/ci---	2026-09-12 00:47:45 +00:00