fix(sync): add trusted Playwright verification adapter#1995

Open

gltanaka wants to merge 449 commits into

mainfrom

codex/issue-1932-playwright-adapter

This pull request is big! We're only showing the most recent 250 commits

Commits on Jul 15, 2026

Commits on Jul 16, 2026

test(sync): reproduce unheld descriptor lifecycle
gltanaka
committed
fix(sync): hold authenticated descriptor lifecycle
gltanaka
committed
test(sync): reproduce sparse holder termination race
gltanaka
committed
fix(sync): bind external cleanup to pidfd identity
gltanaka
committed
fix(sync): enter held namespace root for cleanup

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): pin fd holder root identity

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): normalize fdinfo mount IDs

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): require positive root mount ID

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): diagnose held namespace cleanup

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): correct held namespace diagnostics

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): require sealed diagnostic transport

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): model sealed held namespace scan frame

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): fix sealed transport fixture execution

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): bound held namespace Linux smoke

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): harden held namespace smoke contract

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): tolerate transient fd directory closure

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): classify held namespace scan failures

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): tighten held namespace failure checks

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): classify held namespace child failures

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): use concrete scanner paths

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): accept empty authenticated held inventory

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): preserve stacked held mounts

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): canonicalize external holder termination payload

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce proc descriptor reuse race

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): tolerate reused proc descriptor entries

Greg Tanaka
authored and
Greg Tanaka
committed
fix(ci): quiet xdist full-suite reporting

Greg Tanaka
authored and
Greg Tanaka
committed
Merge remote-tracking branch 'origin/main' into codex/issue-1932-fd-holder-cleanup

Greg Tanaka
authored and
Greg Tanaka
committed
fix(ci): anchor workflow contract path

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): classify sandbox failure phases

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): expose trusted sandbox failure phases

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): prioritize trusted Vitest sandbox errors

Greg Tanaka
authored and
Greg Tanaka
committed
Merge remote-tracking branch 'origin/main' into codex/issue-1932-fd-holder-cleanup

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): preserve coordinator cleanup handoff
gltanaka
committed
test(sync): reproduce coordinator path teardown race
gltanaka
committed
fix(sync): unmount before coordinator path teardown
gltanaka
committed
test(sync): reproduce scope action path teardown race
gltanaka
committed
fix(sync): unmount before destructive scope teardown
gltanaka
committed
test(sync): reproduce post-scope dead holder reuse
gltanaka
committed
fix(sync): switch to FD holder after scope teardown
gltanaka
committed
fix(sync): reselect any exact captured FD holder
gltanaka
committed
test(sync): reproduce authenticated ambiguous unmount absence
gltanaka
committed
fix(sync): prove ambiguous unmount absence
gltanaka
committed
test(sync): bind ambiguous unmount proof before truncation
gltanaka
committed
fix(sync): retain structured ambiguous unmount proof
gltanaka
committed
test(sync): prefer captured fd namespace holder
gltanaka
committed
fix(sync): use captured fd holder throughout cleanup
gltanaka
committed
test(sync): reject forged Playwright product evidence
gltanaka
committed
test(sync): probe Playwright reporter isolation safely
gltanaka
committed
test(sync): reproduce disappearing cgroup scan
gltanaka
committed
fix(sync): accept confirmed cgroup removal in scanner
gltanaka
committed
test(sync): reproduce trusted runtime proof collision
gltanaka
committed
test(sync): constrain trusted runtime proof reuse
gltanaka
committed
fix(sync): reuse consumed runtime proof in trusted closure
gltanaka
committed
test(sync): reject Playwright product imports
gltanaka
committed
fix(sync): reject Playwright product imports
gltanaka
committed
test(sync): preserve Playwright browser product changes
gltanaka
committed
fix(sync): keep browser product resources mutable
gltanaka
committed
test(sync): reject Playwright import-equals products
gltanaka
committed
fix(sync): bind TypeScript import-equals edges
gltanaka
committed
test(sync): prove trusted construction attribution

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): attribute sandbox construction failures

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover construction attribution invariants

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): harden construction attribution

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): preserve nested os error attribution

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): retain nested os error classification

Greg Tanaka
authored and
Greg Tanaka
committed
Merge remote-tracking branch 'origin/main' into codex/issue-1932-fd-holder-cleanup

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce disappearing cgroup membership files
gltanaka
committed
fix(sync): accept vanished cgroup controls in scanner
gltanaka
committed
test(sync): attribute protected sandbox plan validation

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): attribute protected sandbox plan validation

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): close sandbox plan attribution

Greg Tanaka
authored and
Greg Tanaka
committed
chore(sync): integrate observation lifecycle base
gltanaka
committed
test(sync): preserve proof filesystem errors

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): preserve proof filesystem errors

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover proof correction boundaries

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover proof transport formatting

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): harden proof error boundaries

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): avoid ambiguous close retry

Greg Tanaka
authored and
Greg Tanaka
committed
Merge remote-tracking branch 'origin/main' into codex/issue-1932-vitest-plan-reason

Greg Tanaka
authored and
Greg Tanaka
committed
Merge remote-tracking branch 'origin/main' into codex/issue-1932-vitest-plan-reason

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): bound Vitest Node pool launch

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): bound protected Vitest Node pools

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover Vitest control ownership

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): enforce Vitest control ownership

Greg Tanaka
authored and
Greg Tanaka
committed
Merge remote-tracking branch 'origin/main' into codex/issue-1932-vitest-plan-reason

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): make sandbox platform diagnostic portable

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover inherited Vitest worker V8 bound

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): inherit Vitest worker V8 bound

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover shared Vitest runtime binding

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): preserve supervisor runtime bindings

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): raise Vitest address-space ceiling (#2121)
gltanaka
authored

Commits on Jul 17, 2026

fix(sync): revert unsupported Vitest address-space exception (#2126)
gltanaka
authored
test(sync): reproduce inherited Vitest result descriptor
gltanaka
committed
fix(sync): isolate Vitest reporter descriptor from workers
gltanaka
committed
Merge remote-tracking branch 'origin/main' into codex/issue-1932-vitest-plan-reason

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce Vitest observation transport escapes
gltanaka
committed
test(sync): cover anonymous Vitest observation authority
gltanaka
committed
fix(sync): make Vitest observation transport anonymous
gltanaka
committed
test(sync): reproduce protected runtime closure gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): bind protected runtime closure paths

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): revert unsupported Vitest address-space exception (#2126)

gltanaka
authored and
Greg Tanaka
committed
test(sync): preserve lifecycle child timeout status

gltanaka
authored and
Greg Tanaka
committed
fix(sync): preserve lifecycle child timeouts

gltanaka
authored and
Greg Tanaka
committed
fix(sync): accept vanished cgroup controls in scanner

gltanaka
authored and
Greg Tanaka
committed
fix(sync): confirm vanished cgroup after ENODEV

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce cross-process Vitest descriptor access
gltanaka
committed
fix(sync): seal Vitest coordinator proc descriptors
gltanaka
committed
style(test): wrap protected navigation parameters

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce lifecycle and URL boundary gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): bind lifecycle and navigation boundaries

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover lifecycle supervisor deadline grace

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): reserve lifecycle supervisor deadline margin

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce proc task and pidfd authority escapes
gltanaka
committed
fix(sync): enforce exec-stable ptrace denial
gltanaka
committed
test(sync): reproduce lifecycle and toolchain closure gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): close lifecycle and toolchain boundaries

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover documented Yama ptrace modes
gltanaka
committed
fix(sync): accept restrictive Yama ptrace modes
gltanaka
committed
test(sync): reproduce private-namespace observation loss
gltanaka
committed
Merge remote-tracking branch 'origin/fix/2124-vitest-worker-result-fd' into fix/2124-vitest-worker-result-fd
gltanaka
committed
fix(sync): frame standard anonymous observation results
gltanaka
committed
test(sync): reject legacy authority replay over descriptors
gltanaka
committed
test(sync): isolate Playwright from Vitest proc sealing
gltanaka
committed
test(ci): cover workflow-owned playwright manifest helper

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): move playwright manifest to workflow plumbing

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): keep Playwright off Vitest proc seal
gltanaka
committed
test(ci): protect playwright workflow coverage

Greg Tanaka
authored and
Greg Tanaka
committed
fix(ci): remove legacy playwright ownership exclusion

Greg Tanaka
authored and
Greg Tanaka
committed
test(ci): invoke manifest helper by workflow path

Greg Tanaka
authored and
Greg Tanaka
committed
test(ci): cover static ELF manifest closure handling

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce sealed Vitest scope rejection
gltanaka
committed
fix(ci): skip ldd for verified static ELF binaries

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): authenticate sealed Vitest drop argv
gltanaka
committed
test(sync): require Noble-compatible ptrace denial
gltanaka
committed
fix(sync): apply ptrace denial in checker wrapper
gltanaka
committed
test(ci): harden ELF manifest structural contracts

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce concurrent Vitest scope setup failures
gltanaka
committed
fix(ci): validate bounded ELF runtime closure inputs

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): expose bounded scope setup subreasons
gltanaka
committed
fix(sync): retain typed setup telemetry
gltanaka
committed
Merge Noble-compatible ptrace correction
gltanaka
committed
test(ci): cover exact extended ELF table semantics

Greg Tanaka
authored and
Greg Tanaka
committed
fix(ci): validate extended ELF section tables

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): release concurrency barrier once per process
gltanaka
committed
test(ci): cover ELF section count encodings

Greg Tanaka
authored and
Greg Tanaka
committed
fix(ci): enforce ELF section count threshold

Greg Tanaka
authored and
Greg Tanaka
committed
test(ci): cover ELF section table boundaries

Greg Tanaka
authored and
Greg Tanaka
committed
test(ci): reproduce Playwright loader alias staging gap
gltanaka
committed
fix(ci): retain Playwright loader alias destinations
gltanaka
committed
fix(sync): preserve Vitest coordinator proc access
gltanaka
committed
Revert "fix(sync): preserve Vitest coordinator proc access"
gltanaka
committed
merge: reconcile main before PR 1995 validation

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): stabilize lifecycle deadline status coverage

Greg Tanaka
authored and
Greg Tanaka
committed
fix(ci): reconcile merged workflow contracts

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover Playwright alias trust topology

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): authenticate Playwright native aliases

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): localize Vitest post-ready noncompletion
gltanaka
committed
fix(sync): expose bounded Vitest progress telemetry
gltanaka
committed
test(sync): cover Playwright alias correction gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): close Playwright alias trust gaps

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): preserve typed Vitest order evidence
gltanaka
committed
test(ci): bound cold Vitest sandbox gate

Greg Tanaka
authored and
Greg Tanaka
committed
fix(ci): allow cold Vitest closure verification

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): retain safe Vitest order evidence
gltanaka
committed
test(sync): model concurrent Vitest progress paths
gltanaka
committed
test(sync): reject regressive Vitest progress
gltanaka
committed
fix(sync): validate concurrent Vitest progress paths
gltanaka
committed
fix(sync): retain completed Vitest module results (#2150)
gltanaka
authored
merge: validate Playwright adapter on protected main
gltanaka
committed
merge: validate retained observation lifecycle scenarios
gltanaka
committed
merge: validate trusted runtime evidence layer
gltanaka
committed
merge: compose canonical Vitest security stack
gltanaka
committed
test(sync): derive Vitest exit from canonical evidence
gltanaka
committed
fix(sync): derive Vitest exit from canonical evidence
gltanaka
committed
test(sync): expect canonical Vitest errors to fail
gltanaka
committed
fix(sync): route standard observations over descriptors
gltanaka
committed
test(sync): bind Vitest preload to owned descriptor

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): bind Vitest preload identity directly

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): derive Vitest worker descriptor identity

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): isolate Playwright topology fixtures

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): require helper-bound Vitest worker identity
gltanaka
committed
fix(sync): authenticate Vitest worker relay identity
gltanaka
committed
fix(sync): retain exact relay identity validation
gltanaka
committed
merge: integrate current main into PR #1995

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): align Vitest command assertion with config shim

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): require Vitest worker wasm guard on Linux
gltanaka
committed
fix(sync): preserve Vitest worker wasm guard
gltanaka
committed
fix(sync): classify authenticated setup failures
gltanaka
committed
test(sync): identify concurrent Vitest child failures
gltanaka
committed

Commits on Jul 18, 2026

merge: integrate protected main into #1995 adapter

Greg Tanaka
authored and
Greg Tanaka
committed
test: mark Linux-only finalizer coverage

Greg Tanaka
authored and
Greg Tanaka
committed
merge: integrate #2183 trusted Vitest temp roots

Greg Tanaka
authored and
Greg Tanaka
committed
test: require package Vitest header role

Greg Tanaka
authored and
Greg Tanaka
committed
fix: provision package Vitest headers

Greg Tanaka
authored and
Greg Tanaka
committed
Merge commit 'cc97ef23a478fa123a7b9ffc5d7450b4d55b70e7' into fix/1995-canonical-integration

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover sealed Vitest worker preload

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): tolerate sealed Vitest worker descriptors

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): specify Vitest termination evidence

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): add Vitest termination evidence

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): correct Vitest diagnostic trust contracts

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): correct Vitest diagnostic trust boundary

Greg Tanaka
authored and
Greg Tanaka
committed
fix(ci): bind Vitest evidence to triggering PR head

Greg Tanaka
authored and
Greg Tanaka
committed
Merge remote-tracking branch 'origin/main' into fix/1995-canonical-integration

Greg Tanaka
authored and
Greg Tanaka
committed
fix(ci): preserve named Vitest preflight failures

Greg Tanaka
authored and
Greg Tanaka
committed
fix(ci): complete Vitest preflight evidence

Greg Tanaka
authored and
Greg Tanaka
committed
Merge remote-tracking branch 'origin/main' into fix/1995-canonical-integration

Greg Tanaka
authored and
Greg Tanaka
committed
chore(ci): rotate Vitest protected base pin

Greg Tanaka
authored and
Greg Tanaka
committed
chore(ci): rotate Vitest producer base pin

Greg Tanaka
authored and
Greg Tanaka
committed
fix(ci): parse hosted provisioner version output

Greg Tanaka
authored and
Greg Tanaka
committed
fix(ci): add installed-wheel Vitest evidence lane

Greg Tanaka
authored and
Greg Tanaka
committed
fix(ci): bind package diagnostic authorities

Greg Tanaka
authored and
Greg Tanaka
committed
Merge remote-tracking branch 'origin/main' into fix/1995-canonical-integration

Greg Tanaka
authored and
Greg Tanaka
committed
chore(ci): rebind Vitest evidence to protected main

Greg Tanaka
authored and
Greg Tanaka
committed
merge: integrate origin/main into PR #1995

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): specify Vitest no-result observation

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): add Vitest no-result observation

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): restore Vitest no-result verifier coverage

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): register Vitest verifier ownership

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): align Vitest Stage A0 workflow contracts

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): specify Stage A0 trust corrections

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): harden Stage A0 observation trust

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): split invalid Stage A0 lane checks

Greg Tanaka
authored and
Greg Tanaka
committed
fix(ci): materialize Vitest review evidence sidecars

Greg Tanaka
authored and
Greg Tanaka
committed
docs: record hosted Stage A0 unblock

Greg Tanaka
authored and
Greg Tanaka
committed
fix(docs): normalize downloaded Stage A0 evidence modes

Greg Tanaka
authored and
Greg Tanaka
committed
fix(docs): replay canonical Stage A0 artifacts

Greg Tanaka
authored and
Greg Tanaka
committed
fix(docs): fail closed Stage A0 replay helper

Greg Tanaka
authored and
Greg Tanaka
committed
docs: record hosted Stage A0 closure

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): add Stage A native seal diagnostics

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): align Vitest protected metadata

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): align Stage A native evidence gate

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover strict production addon build

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): guard test-only Vitest addon helper

Greg Tanaka
authored and
Greg Tanaka
committed