Desk door: the second peer-checked unix-socket door (Answer and catalog; reads interim)

eureka commented

2026-11-10 23:38:34 +00:00

Owner

Spec cut-desk-answer-door.r9; reports h1, h2; Soul verdicts s1 (Mediums fixed in h2) and s2 (holds, three Lows). Peer uid checked before a byte is read, one deadline per connection, per-call deciders 1..64 unique, Answer through Mind::desk_answer, Forks/Fork answer a named interim Unavailable until desk-door-reads-r2. No deploy: desk-door-ops-r2 owns it; the peer uid must be a dedicated uid.

🤖 Generated with Claude Code

Spec cut-desk-answer-door.r9; reports h1, h2; Soul verdicts s1 (Mediums fixed in h2) and s2 (holds, three Lows). Peer uid checked before a byte is read, one deadline per connection, per-call deciders 1..64 unique, Answer through Mind::desk_answer, Forks/Fork answer a named interim Unavailable until desk-door-reads-r2. No deploy: desk-door-ops-r2 owns it; the peer uid must be a dedicated uid. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

eureka added 9 commits

2026-11-10 23:38:34 +00:00

Desk door part A: failing tests first (peer check before a byte, bounds, answers over the socket, per-call deciders, interim reads refusal, startup gates) 88ca0a0867

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Desk door part A: the unix-socket door, peer uid checked before a byte is read, joined to the one serve loop e35181b296

desk_door.rs owns who may speak, the socket's life and the frame bounds; Daemon::handle_desk owns which Mind method answers (Answer via desk_answer, the replay flag gating index.committed; Forks and Fork refused Unavailable until desk-door-reads). startup returns Started; run takes the door; its five callers pass it or None. desk_wire::answer_ref is the one spelling of a stored answer's ref.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Desk door part A: mutation survivors pinned (header-only oversize refusal, four accepts per pass, unprobeable and unreadable socket paths) eca3f53c98

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Desk door part A: the oversize-header test fails fast instead of waiting when the bound is gone 035a3eaa62

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Desk door part B: the binary end-to-end (both doors, restart replay, leftover socket, other uid refused and logged, namespace root seen as the real uid) 4437afbc26

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Desk door fix batch: failing tests first (one deadline per connection, the exact bounds, the catalog under the response limit; Soul's survivor probes committed) 2b6e15de4c

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Desk door fix batch: one deadline per connection (reads and writes spend what is left), the catalog reply bounded by the response limit, the dead index call and answer_ref deleted 4e43e43a26

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Desk door fix batch: the binary tests run one at a time and the accept-error probe fails every new descriptor ba9b1013ca

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Desk door tests: the one-second lower edge allows jiffy granularity (950 ms still kills a 500 ms bound) 173f28b886

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

eureka merged commit 03a045de02 into main

2026-11-10 23:38:38 +00:00

eureka referenced this pull request from a commit

2026-11-10 23:38:40 +00:00

Merge pull request 'Desk door: the second peer-checked unix-socket door (Answer and catalog; reads interim)' (#36) from eureka-substrate/desk-answer-door into main

Rows
Columns

Desk door: the second peer-checked unix-socket door (Answer and catalog; reads interim) #36