fix(process): preserve partial evidence and verify detached cleanup (#1011)

* test(ci): allow transport delivery in source identity regression

* fix(process): preserve partial evidence and verify detached cleanup

* fix(process): scope Linux token sweeps by stable process identity

* fix(process): retain environment permission failure codes

* fix(process): wait for signaled processes before verifying cleanup

* fix(process): verify sampled detached groups during cleanup

* fix(electron): preserve prelaunch identities through cleanup

* fix(process): retry growing Darwin process table snapshots

* fix(process): retain compatibility with saved v3 capture evidence

* fix(process): migrate saved v3 captures during reconstruction verification

* fix(process): preserve cancellation during Darwin helper compilation

* fix(process): propagate cancellation through ownership baselines

* perf(javascript): cache canonical export comparison sort keys

* fix(process): cancel provider ownership preparation before spawn

* fix(process): isolate native compiler waiter cancellation
This commit is contained in:
morluto authored and GitHub committed 2026-10-08 04:46:46 +08:00
1 parent 63ba7424c0
commit 63cf28fd8f
51 files changed
+5506 -316

No files matched your search

+17 -2
View File
@@ -26,8 +26,23 @@ const validateCommitments = (
require: RequireInvariant,
): void => {
const { manifest } = capture;
require(manifest.scenario.executable_sha256 ===
manifest.executable_sha256, "manifest.executable_sha256", "executable commitment does not match the scenario projection");
if (manifest.legacy_executable_sha256 !== undefined) {
require(manifest.selected_executable_sha256 === null &&
manifest.executable_sha256 === null &&
manifest.executable_identity.state === "unknown" &&
manifest.executable_identity.reason !== null &&
manifest.scenario.executable_sha256 ===
manifest.legacy_executable_sha256, "manifest.legacy_executable_sha256", "legacy executable digest must remain distinct from unknown selected and launch digests");
} else {
require(manifest.scenario.executable_sha256 ===
manifest.selected_executable_sha256, "manifest.selected_executable_sha256", "selected executable commitment does not match the scenario projection");
}
require(manifest.executable_identity.state === "path_metadata_unchanged"
? manifest.executable_sha256 === manifest.selected_executable_sha256 &&
manifest.executable_identity.reason === null
: manifest.executable_sha256 === null &&
manifest.executable_identity.reason !==
null, "manifest.executable_identity", "launch identity and executable digest do not agree");
for (const [field, value] of [
["full_scenario_sha256", manifest.scenario],
["comparison_contract_sha256", manifest.comparison_contract],