P54: in-process isolation — one visibility seam, reference-set load contexts, frozen builtin registry, locked stdlib globals (refs #2250) by antonsynd · Pull Request #2318 · antonsynd/sharpy

fix(cli): the failure exit kind is returned by CompileToBinary, not read from a process global after the fact (refs #2250)

antonsynd

and

claude

committed

1a41b05

test(stdlib): the closed-port socket cells retry a re-taken ephemeral port instead of asserting on it (refs #2250)

antonsynd

and

claude

committed

28235b5

test(server): {no -r, -r, no -r} on one server must answer as three fresh processes; two registries loading same-named assemblies from two paths each see their own (refs #2250)

antonsynd

and

claude

committed

3c1ea0d

test(conformance): every process-wide type-resolution site and every static cache is rostered — 25 resolution sites (31 with the rostered key-pure loads) and 22 caches anchored to literals, drained…

antonsynd

and

claude

committed

3c4c4c1

test(diagnostics): crash bundles under 8 concurrent writers at one clock tick — an internal clock seam on CrashBundleWriter (refs #2250)

antonsynd

and

claude

committed

522a19e

fix(diagnostics): a crash bundle directory is claimed with a create-exclusive marker and named with the process id — two crashes in one millisecond get two bundles (refs #2250)

antonsynd

and

claude

committed

a584522

test(stdlib): module globals are rostered by a written-after-init census and exercised at 1/2/8 threads against CPython's process-wide model (refs #2250)

antonsynd

and

claude

committed

083029b

test(conformance): in-process isolation sweep — compile/analyse × sharing × threads × warmth, ratcheting in-process-isolation-allowlist.txt (refs #2250)

antonsynd

and

claude

committed

97d0b5d

ci: run the in-process isolation sweep as its own GapDiscovery step (refs #2250)

antonsynd

and

claude

committed

385199b

test(registry): the TPA namespace gate and the name-keyed type cache are probed for completion and cross-compile poisoning under 8 threads (refs #2250)

antonsynd

and

claude

committed

e0a2f5f

test(lsp): warm-sequential and warm-concurrent CompilerApi parity against a cold process on the P47 stems, with the master-registry key-set snapshot between steps (refs #2250)

antonsynd

and

claude

committed

e3a987e

test(conformance): static auto-property backing fields are subject to the static-state rules (refs #2250, refs #1036)

antonsynd

and

claude

committed

59a51d5

fix(registry): the master BuiltinRegistry is frozen after construction and a user definition never writes a master symbol — a warm CompilerApi answers as a cold process (refs #2250)

antonsynd

and

claude

committed

cbabbf7

fix(stdlib): random and socket module globals are read and written under one module lock, as CPython's are under the GIL — regenerated (refs #2250)

antonsynd

and

claude

committed

ff61019

fix(stdlib): xml.register_namespace and numpy.random share one process-wide, locked generator/registry — a seed on one thread is seen by every thread, as numpy's global RandomState is (refs #2250)

antonsynd

and

claude

committed

dae06b7

fix(discovery): ONE assembly-visibility seam — every CLR name resolves against {framework} ∪ {this registry's references}, the framework set is a process-constant index, the name-keyed type caches …

antonsynd

and

claude

committed

333de07

test(server): the request-3 KnownRed row reported stale under the visibility seam — drained (refs #2250)

antonsynd

and

claude

committed

535f5a2

fix(registry): each compilation loads its references into a load context keyed by its reference set — a same-named assembly from another path is its own copy, SPY0306 means only "cannot be loaded a…

antonsynd

and

claude

committed

32ea542

fix(stdlib): the random and socket NuGet module projects reference the threading module their module lock comes from (refs #2250)

antonsynd

and

claude

committed

4fe1ca6

test(lsp): the code-action sweep shares one CompilerApi again — pins byte-identical in regular and FULL mode, regular mode 1m29s → 46s (refs #2250, refs #2232)

antonsynd

and

claude

committed

62558b7

docs(design): roster the in-process isolation class — visibility seam, reference-set load context, frozen master registry, stdlib global roster, crash exclusivity (refs #2250)

antonsynd

and

claude

committed

b7ff795

perf(discovery): record the warm-compile cost of the P54 seams — within noise, no fallback needed (refs #2250)

antonsynd

and

claude

committed

effba77

fix(discovery): the framework a compilation sees is the shared framework plus Sharpy.Core, never the host's own application assemblies — sharpyc and the LSP agree (refs #2250)

antonsynd

and

claude

committed

f5fb7f8

fix(semantic): every type definition declares its own symbol and a frozen master symbol refuses writes through its collections too — a class/struct/union/interface/delegate in a block never writes …

antonsynd

and

claude

committed

7ae6ed7

chore(spec-blocks): two wrapped overload examples are refused, not compiled, since each nested def declares its own symbol — allowlisted against #2314; the third reports stale (refs #2250, refs #2314)

antonsynd

and

claude

committed

59ed0a8

test(build-tools): the stdlib-docs type roster and mapping citations read BuiltinRegistry's registrations as cbabbf73a spells them — Register(...), the LoadBuiltins-local helper (refs #2250)

antonsynd

and

claude

committed

045ce6b

Navigation Menu

Repository navigation

P54: in-process isolation — one visibility seam, reference-set load contexts, frozen builtin registry, locked stdlib globals (refs #2250) - #2318

P54: in-process isolation — one visibility seam, reference-set load contexts, frozen builtin registry, locked stdlib globals (refs #2250)#2318
antonsynd merged 26 commits into
mainlinefrom
dev

Commits on Oct 15, 2026

fix(cli): the failure exit kind is returned by CompileToBinary, not read from a process global after the fact (refs #2250)

test(stdlib): the closed-port socket cells retry a re-taken ephemeral port instead of asserting on it (refs #2250)

test(server): {no -r, -r, no -r} on one server must answer as three fresh processes; two registries loading same-named assemblies from two paths each see their own (refs #2250)

test(conformance): every process-wide type-resolution site and every static cache is rostered — 25 resolution sites (31 with the rostered key-pure loads) and 22 caches anchored to literals, drained…

test(diagnostics): crash bundles under 8 concurrent writers at one clock tick — an internal clock seam on CrashBundleWriter (refs #2250)

fix(diagnostics): a crash bundle directory is claimed with a create-exclusive marker and named with the process id — two crashes in one millisecond get two bundles (refs #2250)

test(stdlib): module globals are rostered by a written-after-init census and exercised at 1/2/8 threads against CPython's process-wide model (refs #2250)

test(conformance): in-process isolation sweep — compile/analyse × sharing × threads × warmth, ratcheting in-process-isolation-allowlist.txt (refs #2250)

ci: run the in-process isolation sweep as its own GapDiscovery step (refs #2250)

test(registry): the TPA namespace gate and the name-keyed type cache are probed for completion and cross-compile poisoning under 8 threads (refs #2250)

test(lsp): warm-sequential and warm-concurrent CompilerApi parity against a cold process on the P47 stems, with the master-registry key-set snapshot between steps (refs #2250)

test(conformance): static auto-property backing fields are subject to the static-state rules (refs #2250, refs #1036)

fix(registry): the master BuiltinRegistry is frozen after construction and a user definition never writes a master symbol — a warm CompilerApi answers as a cold process (refs #2250)

fix(stdlib): random and socket module globals are read and written under one module lock, as CPython's are under the GIL — regenerated (refs #2250)

fix(stdlib): xml.register_namespace and numpy.random share one process-wide, locked generator/registry — a seed on one thread is seen by every thread, as numpy's global RandomState is (refs #2250)

fix(discovery): ONE assembly-visibility seam — every CLR name resolves against {framework} ∪ {this registry's references}, the framework set is a process-constant index, the name-keyed type caches …

test(server): the request-3 KnownRed row reported stale under the visibility seam — drained (refs #2250)

fix(registry): each compilation loads its references into a load context keyed by its reference set — a same-named assembly from another path is its own copy, SPY0306 means only "cannot be loaded a…

fix(stdlib): the random and socket NuGet module projects reference the threading module their module lock comes from (refs #2250)

test(lsp): the code-action sweep shares one CompilerApi again — pins byte-identical in regular and FULL mode, regular mode 1m29s → 46s (refs #2250, refs #2232)

docs(design): roster the in-process isolation class — visibility seam, reference-set load context, frozen master registry, stdlib global roster, crash exclusivity (refs #2250)

perf(discovery): record the warm-compile cost of the P54 seams — within noise, no fallback needed (refs #2250)

fix(discovery): the framework a compilation sees is the shared framework plus Sharpy.Core, never the host's own application assemblies — sharpyc and the LSP agree (refs #2250)

fix(semantic): every type definition declares its own symbol and a frozen master symbol refuses writes through its collections too — a class/struct/union/interface/delegate in a block never writes …

chore(spec-blocks): two wrapped overload examples are refused, not compiled, since each nested def declares its own symbol — allowlisted against #2314; the third reports stale (refs #2250, refs #2314)

test(build-tools): the stdlib-docs type roster and mapping citations read BuiltinRegistry's registrations as cbabbf73a spells them — Register(...), the LoadBuiltins-local helper (refs #2250)