Repository navigation
Retain governing policy adoption and enforce current run admission at dispatch #147
Description
Track Runner responsibilities from Judgment-Pack/judgment-pack-spec#211 / draft PR #212. Immutable release pins preserve what ran; current policy governance additionally requires an authoritative start gate at dispatch.
Retain the reviewed exact consumer/adoption/dependency closure on a governed release. Resolve that closure from registered release state, not a caller-selected dependency list. Existing jobs stay pinned and upgrades remain explicit. Legacy ungoverned jobs must remain explicitly classified rather than silently treated as protected.
Before each new queued/retried/recovered attempt starts, bind resource revision, exact release/input payload, attempt, executor and fencing epoch to current authority admission. Withdrawal committed before start blocks it; already-admitted evaluation may finish. Later external actions need their own gate. Unavailable/stale required authority holds new governed work. Recovered receipts reconcile history, never dispatch again; restored old backups cannot resurrect authority.
Acceptance: omitted-dependency substitution, withdrawal/enqueue/dispatch races, lost admission response, worker restart/fencing, identity revocation and pre-withdrawal restore tests. Respect current single-pack Runner support; this does not invent graph-job semantics. Depends on reviewed contract and Desk authority API; no second evaluator or team-management service belongs here.
Activity
kikashy commentedon Oct 18, 2026
The private execution-payload foundation is merged in #158 as
5bf101a71822cec3df86875a0455b5fcd713aa19. All required Linux/macOS, archive and DCO checks passed at the reviewed head; the merged tree matches it exactly. Focused ordinary and race tests also passed.The codec commits exact facts/evidence bytes, the existing release identity, retained Preparation/SourceInput and operational signing identity. It has no execution callers or permission effect. Fixed synthetic vectors are included for the future Desk consumer.
This issue remains open. Remaining work is authoritative resource registration, machine/executor ownership and recovery fences, stable logical-operation barriers, authenticated current admission and the real operational dispatch gate. A restored old queue must not create a new attempt to bypass an earlier start. Full Desk authority plus Runner process fixtures are required before withdrawal enforcement is advertised. Desk's inactive anchor foundation is PR Judgment-Pack/judgment-pack-desk#490; the integration design explicitly separates immutable adoption from current lifecycle eligibility. No release was published.
kikashy commentedon Oct 19, 2026
Runner #159 is merged into main as
dc9cbc8356c274247eb7ef4da245be2cc559eabe. The merged tree exactly matches reviewed sourcef341af1296c3ac4e91868c79e69ec44ccbe7fd08.Completed foundation:
Validation: focused CLI/built-binary checks; final ownership race suite (11.310s); privileged foreign-owner fixtures; full Linux (8m1s), macOS (6m52s), release-content and DCO checks all passed. Independent GPT-6.1 Sol review found no unresolved P1/P2 under the user's standing different-vendor waiver. Review record: #159 (comment) .
This does not yet enforce governed execution. The host must provision and retain executor identities independently, negotiate the exact binary before boot, preserve the lease through the actual Runner/Runtime launch chain, then integrate exact release/adoption registration, durable logical-operation/attempt barriers and withdrawal/start ordering. Separate Gateway action admission remains required. No live workspace enrollment, installed-component change, Desk restart or release publication occurred; Runtime v0.35.0 remains unpublished.
kikashy commentedon Oct 19, 2026
The real executor-ownership integration is merged:
1cc6b29885b344716a970cd21fefeaca0a4edaeb.ef1110a8ad618506012cca3b367f2b49a9ae3766intointegration/v0.13.Both merged trees exactly match their reviewed source. Explicit offline executor enrollment retains independent external custody. Desk probes and boots the same pinned Runner snapshot, preserves the requirement through signing fallback, and holds uncertain setup or unexpected exits. Runner acquires ownership before recovery/workers and retains it through the actual Runtime invocation chain. Real Linux process-death tests prove a surviving Runtime keeps the lease after owner closure or SIGKILL; the Desk fixture covers enrollment, saved checks, job/audit, copied-store contention and explicit isolated restart.
Validation: Runner's Linux/macOS full checks passed. Final Desk head
e79f1a2has 14 passing checks and one expected conditional skip, including Go, Web, mutation discrimination and the mandatory real ownership integration. Independent GPT-6.1 Sol reviews have no outstanding P1/P2 findings under the user's standing different-vendor waiver. Two CI-only fixture corrections preserve existing mutation and Graph coverage assertions.This completes ownership, not current governed execution. Keep this issue open. Next is exact Pack-release/adoption/dependency registration in the anchored Policy ledger, authenticated executor epochs, durable original-operation/attempt barriers, and the common manual-run start gate serialized with withdrawal. The durable commitment is the logical start: withdrawal first blocks it; an exact already committed attempt may proceed. Unsupported governed trigger/workflow/upgrade paths must refuse. Gateway action admission remains separate under Gateway #295.
No live workspace was enrolled, installed Desk restarted, component pin changed, or release published. Runtime v0.35.0 remains unpublished.
kikashy commentedon Oct 19, 2026
Runner #161 is merged as
d903728fb38368a5f0574990e01bc27acb2a2803; Desk #525 integrates the matching privatelocal-admin-manual-pack/1authority/profile. Native Linux/macOS required CI passed. The actual Desk → Runner → Runtime fixture covers exact registered input, withdrawal-first refusal, commit-first/delayed physical spawn, and lost start/reserve replies followed by restart without replay.The bounded profile retains exact immutable job binding, obtains fresh reserve/start authority over the inherited sequenced channel, and mints a one-use launch only from the original fresh committed reply plus durable local journal. Executor ownership remains held through explicit offline preparation and Runtime execution. Existing stores are never silently migrated by Open; partial registry/fence/ledger states refuse rather than repair/replay.
Keep this parent issue open. This is explicitly opt-in local manual single-Pack admission, not general trigger, acquisition, mapped-input, workflow, upgrade, later-action or portable multi-installation enforcement. Commitment is logical start; an already committed fresh original launch may physically spawn after a later withdrawal. No whole-trust-plane rollback resistance or atomic ledger/OS transaction is claimed. No Runner/Runtime release was published by this change.
Final Desk merge:
c4e6ef5c6170e7d134c8c3960adc7a9c909bc2bb; treead65c7b1921c9edad46c103d00b9e289d1bf9e61equals the reviewed head. Final required CI and all seven actual manual-admission results passed.