2 Commits

Author	SHA1	Message	Date
CIAgent	26b4a5be60	feat(P02): telemetry-wired sandbox spawn (Wave 3) ... Task 2-3-01: create(learner_id, task_id) — telemetry sandboxes run a persistent helper/inner namespace topology (offline inner ns; agent joins mount ns only and stays online to reach the loopback ingest). Capture agent copied into the workspace (visible in-ns at the bind), launched via sh -c with in-ns absolute paths (host cwd invalid after the nsenter mount swap), stdin=DEVNULL daemonizes the agent (lifecycle tied to sandbox: destroy reaps agent -> inner -> helper). Wire contract: frames strip URL-owned identity (ingest extra=forbid anti-spoofing); spool keeps full events. E2E test (real uvicorn on ephemeral port): exec in a live namespace sandbox -> events arrive at WS ingest -> SQLite, ordered, sandbox-scoped. Pure-shell path (task_id=None) asserts no capture agent. Full suite 216 green; ruff clean. ---ci--- phase: 2 milestone: v0.3 status: execute requirements: {covered: [REQ-3-003], partial: []} ---/ci---	2026-09-12 00:47:45 +00:00
CIAgent	b6850fc036	feat(P02): in-sandbox capture agent + websocket ingest (Wave 2) ... Task 2-2-01: sandbox-agent.py stdlib-only (D-031) — shell capture (command/file_diff/ run_result/test_result/stdin/stdout), per-task monotonic seq, JSONL fsync spool (at-least-once, D-026), raw-socket RFC6455 client (no websockets in-namespace), exponential-backoff reconnect, SIGKILL-safe. Loopback tests: ordered emission, spool-on-disconnect, reconnect flush order, stdlib-only AST scan. Task 2-2-02: WS /v1/telemetry/ingest (D-026) — query-param identity (extra=forbid frames), server-side dedup on (learner,task,seq), gap detection + warnings, ping keepalive. G-3 flood control: overflow or >50000 events/task -> 1008 close + trace marked INCOMPLETE_FLOODED (terminal, Proctor signal); no silent drop. GET traces + gaps endpoints. TraceIntegrityMap (process-local, D-019 precedent) exposes is_incomplete for the Phase 3 grader gate (G-4). 214/214 + ruff clean. ---ci--- phase: 2 milestone: v0.3 status: execute requirements: {covered: [REQ-3-003], partial: []} ---/ci---	2026-09-12 00:47:45 +00:00