harness/core
5
0
Fork 1
Code Issues Pull requests 15 Projects Releases 238 Packages 1 Wiki Activity Actions

fix: distinguish safe host authority guard denials #220

Merged
severus-snape merged 1 commit from fix/safe-host-guard-codes into main 2026-11-02 14:44:30 +00:00
Conversation 0 Commits 1 Files changed 11 +70 -19
severus-snape commented 2026-11-02 14:42:11 +00:00
Collaborator
Copy link

Scope

Expose fixed host-created deadline_expired, execution_cancelled, ownership_lost and parent_mandate_missing codes at wait, worker/subagent and result guard sites. Keep authority_revoked for unclassified revocations and invalid wait deadline metadata. No arbitrary error messages forwarded; WeakMap provenance and fixed rendering remain.

Authority predicates, status exemptions, persisted receipts and storage schema remain unchanged. No deadline extension, automatic approval, task reopening or global build/deployment ban. Builds do not activate this change.

Verification

  • npm run typecheck: PASS
  • npm run build: PASS
  • npm test: 1218/1218 PASS
  • PI runToolCall rendering: every new code blocks approval and execution; arbitrary errors remain sanitized
  • wait post-persistence reasons, invalid deadline, storage failure, worker/subagent and result distinctions covered
  • git diff --check: PASS

Independent dedicated review via the normal persistent ReviewService, exact fingerprint ca2aa568d7c79bf7f50d62acdbf8ce7d0679a71e7e2d9c09b5b4b03fe9f78e52: passed in round 1, no findings. Existing budgets preserved.

Existing PR #156 supplies receipts only and #85 supplies generic safe rendering; neither supplies these distinctions. No duplicate receipt solution. Foreign dirty core checkout untouched.

Integration

Source PR only. No merge/image/deployment/GitOps changes. External maintainer integration and authorized image rollout/restart are required for activation.

## Scope Expose fixed host-created deadline_expired, execution_cancelled, ownership_lost and parent_mandate_missing codes at wait, worker/subagent and result guard sites. Keep authority_revoked for unclassified revocations and invalid wait deadline metadata. No arbitrary error messages forwarded; WeakMap provenance and fixed rendering remain. Authority predicates, status exemptions, persisted receipts and storage schema remain unchanged. No deadline extension, automatic approval, task reopening or global build/deployment ban. Builds do not activate this change. ## Verification - npm run typecheck: PASS - npm run build: PASS - npm test: 1218/1218 PASS - PI runToolCall rendering: every new code blocks approval and execution; arbitrary errors remain sanitized - wait post-persistence reasons, invalid deadline, storage failure, worker/subagent and result distinctions covered - git diff --check: PASS Independent dedicated review via the normal persistent ReviewService, exact fingerprint ca2aa568d7c79bf7f50d62acdbf8ce7d0679a71e7e2d9c09b5b4b03fe9f78e52: passed in round 1, no findings. Existing budgets preserved. Existing PR #156 supplies receipts only and #85 supplies generic safe rendering; neither supplies these distinctions. No duplicate receipt solution. Foreign dirty core checkout untouched. ## Integration Source PR only. No merge/image/deployment/GitOps changes. External maintainer integration and authorized image rollout/restart are required for activation.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
harness/core!220
No description provided.