fn-4 hardening: the 18-defect backlog, three gated rounds - #461

Open

acebytes wants to merge 48 commits into

mainfrom

Commits on Aug 27, 2026

fix(safety): bind the leaf where expecting: is nil — contents mode and the no-revalidator item arm (fn-4.21)
acebytes
committed
c50cde3
fix(safety): a drain that died on a hard read error no longer ends like EOF (fn-4.24)
acebytes
committed
28eb583
fix(safety): the gate answers before realpath — pointer chase and predicate both dereferenced deferred paths (fn-4.26)
acebytes
committed
7f2ac6e
fix(docs): repoint the mount-arm anchor the fn-4.26 insertion shifted (fn-4.26)
acebytes
committed
820a0a7
fix(docs): repoint the two CacheCleaner anchors fn-4.21's growth shifted (fn-4 r1 gate)
acebytes
committed
6bb24c0
test(safety): evidence the non-ENOENT bind-failure branch of the pipeline capture (fn-4 r1 gate)
acebytes
committed
a8de2a2
fix(safety): bound the container-identity capture off the calling thread (fn-4.19)
acebytes
committed
3c98463
fix(safety): bound dockerPrune's whole child interaction; retire the last bare waitUntilExit calls (fn-4.20)
acebytes
committed
2e21091
fix(docs): repoint the 11 anchors fn-4.19's growth shifted (fn-4.19)
acebytes
committed
80e5d61
fix(safety): the sizing walk answers cancellation and bounds its entries (fn-4.15)
acebytes
committed
9ce6b1d
fix(safety): sweep sync fs-tree recursion on actor-reached paths; clamp the walker's depth budget (fn-4.13)
acebytes
committed
a4670b0
fix(docs): repoint the walker anchor fn-4.13's ceiling shifted (fn-4.13)
acebytes
committed
a4cd9ce
fix(safety): no realpath of a symlink root's destination at construction — policy, dev-root resolution and union answer from the link's own content (fn-4.11)
acebytes
committed
fbb1840
fix(docs): the rotting CacheCleaner anchors were invisible to the gate — respell, repoint the population, and pin (fn-4 r2 gate)
acebytes
committed
5c36346
fix(tests): frame the socket reply read; fence as!/fatalError/preconditionFailure out of test sources (fn-4.14)
acebytes
committed
2335a54
fix(tests): the climb census cell measured a process-wide count and asserted a per-walk property (fn-4.16)
acebytes
committed
62336c1
test(safety): pin every performer refusal tag to its arm — full per-tag gate, decision recorded (fn-4.23)
acebytes
committed
e7560fd
fix(safety): every issue-kind label states its producer's true condition; bare EPERM is never TCC (fn-4.12)
acebytes
committed
f8aa99f
test(safety): evidence the sweep root's non-directory arm at scan level (fn-4.12)
acebytes
committed
5a497ea
test(safety): evidence the walker's open-failure EPERM arm — it had no red cell (fn-4.12 mutation gate)
acebytes
committed
8f02d35
fix(safety): the git child's process group is established AT SPAWN, never discovered from a live leader (fn-4.27)
acebytes
committed
d6a5bd7
fix(safety): the containment descent's own raw-errno classifier joins the bare-EPERM rule; repoint the two anchors the fn-4.12/4.27 growth shifted (fn-4.12)
acebytes
committed
66c8e71
fix(scanner): discover the bare repository whose checkouts are all gone — the prune tier's own case (fn-4.28)
acebytes
committed
3d64136
test(scanner): fn-4.18 measured — the dev-root double walk is 2% duplication, not doubling; fan-in recorded, not built (fn-4.18)
acebytes
committed
c8efba0
fix(safety): pin the message vocabulary byte-exact — Remedy loses its text, retirement is a production declaration, extension fails closed (fn-4.22)
acebytes
committed
f00229c
test(safety): fn-4.22 attack round recorded — 0 of 11 fresh false wordings pass the pinned fence (fn-4.22)
acebytes
committed
efc2760

Commits on Aug 28, 2026

Commits on Aug 29, 2026