Skip to content

Stage 8: protected profile setup and VM-path reliability - #368

Draft
iteathen wants to merge 288 commits into
cuda-targetfrom
stage8/362-protected-activity-channel
Draft

iteathen wants to merge 288 commits into
cuda-targetfrom
stage8/362-protected-activity-channel

Conversation

@iteathen

@iteathen iteathen commented Aug 28, 2026

Copy link
Copy Markdown
Owner

Purpose

Long-lived draft integration surface for dependency-ordered Stage 8 protected setup/runtime work on the path to real Windows and Linux guest C execution, automatic GitHub task/result delivery, and later NVIDIA/CUDA exposure.

Current accepted software checkpoints

Current gate

Keep this PR in draft. Parent #293 remains open. Follow docs/working-devbridge-plan.md as the current execution order:

  1. Hello World: accept a GitHub task, compile a small C/CMake program and run CTest inside both real Linux and Windows execution-profile VMs, then automatically return bounded results to the originating task.
  2. NVIDIA GPU support for CUDA-JS: only after the VM execution path is real and qualified, expose a supported GPU/driver through that path and run the CUDA qualification; VM/CI evidence alone is not physical CUDA support.
  3. MCP: expose existing DevBridge operations through an adapter without creating a second control plane.

Fresh physical Ubuntu construction, real Windows profile construction, automatic provisioning/originating-task correlation, real guest execution, restart/recovery evidence and final automatic result delivery remain required. No hosted or mocked provider state substitutes for those operational proofs.

Safety and ownership

  • Repository-controlled execution remains VM-only; provider absence fails closed.
  • GitHub credentials, signing keys, authoritative Git and provider-management authority remain host-owned.
  • Coding-model use remains opt-in.
  • GPU/CUDA support remains separately evidence-gated.
  • Provider-specific behavior remains isolated behind replaceable adapters; orchestration consumes neutral contracts only.
  • No Python tooling is introduced.

This parent PR is an integration/tracking surface, not evidence that Stage 8, physical VM execution, GPU support or Hello World acceptance is complete.

* fix(status): recover durable task failure delivery without rerunning work

* fix(status): preserve redaction and publisher identity across recovery boundaries
…ss (#499)

Reviewed the readiness classifier and regression coverage: an absent implementation generation cannot report healthy and existing specific failure precedence is preserved. Acceptance/spec/roadmap changes retain VM-only authority and Hello World, NVIDIA GPU, then MCP ordering. Four exact-head Windows/Ubuntu full/smoke jobs passed. Native Hello World remains unproved.

Reviewed head: a16d393
Reviewed integration base: ca433fc
Owner explicitly authorized portfolio PR review and merges. Owner integration resolves the same-account approval restriction; protection settings and substantive checks are unchanged. This is maintainer/agent review, not independent security or native qualification.
Signed-off-by: iteathen <josh.oshiro@gmail.com>

@iteathen iteathen left a comment

Copy link
Copy Markdown
Owner Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Portfolio integration-readiness review — retain draft.

#499 is merged. The current Stage 8 head a82cc90d6ee87e178335f312a365c198c5cfe70f also merges the actual cuda-target@5283e1fc1426606737bee7de7ba7140835bf9d6e, including the reviewed #421 repair. The sole merge conflict was the GPU roadmap heading: retain the target's current host-retained architecture and Stage 8's explicit Hello World → real NVIDIA CUDA-JS support → MCP sequence. Against the target version of that document, the resolution adds only that sequencing/qualification paragraph. Existing target modules are incorporated as the integration base, not newly certified by this review.

Fresh CI34018332156 completed with both smoke jobs and Windows full passing, but Ubuntu full failed at test/repository-preflight-diagnostics.test.js:59: the reporter fixture returned empty stdout instead of compact .X progress. Ubuntu totals: 2548 pass, one failure, 46 skips. The isolated Windows Node22 reporter test passes; root cause remains unestablished. No retry or assertion weakening conceals this failure. Fix and qualify this exact integration before merge; earlier ca433fc checks do not qualify it. The larger Stage 8 draft has not undergone a new complete independent source/security audit in this portfolio review.

The acceptance blocker remains real GitHub-initiated create/compile/test Hello World in both Windows and Linux profile VMs, with useful automatic failure/success reporting and required restart/recovery evidence. The retained Linux subject still has the previously observed APT failure; installer evidence work in draft #501 does not substitute for operational acceptance. Keep the draft and these gates open even if portable CI succeeds.

No installed runtime, retained VM, recipe admission, service registration, deadline or hardware state changed. The owner's gaming pause remains in force. The owner approved merges; incomplete integration/native evidence is the reason this PR is not merged.

Signed-off-by: iteathen <josh.oshiro@gmail.com>
Signed-off-by: iteathen <josh.oshiro@gmail.com>
@iteathen

iteathen commented Sep 6, 2026

Copy link
Copy Markdown
Owner Author

The CI failure reported in the portfolio review is repaired and both current heads are qualified. The bounded child evidence captured EAGAIN: resource temporarily unavailable, write from the test fixture's synchronous observer while mocked prerequisites emitted a burst into the POSIX pipe. The fixture now emits only the targeted operation events this case qualifies; the real failing child, progress/TAP assertions, diagnostic evidence and deadlines are unchanged. No production code changed.

Stage8 5bc5958cfe6e11a461d96a8c358528cdb60bfeb9 passed all four jobs in https://github.com/iteathen/DevBridge/actions/runs/34019469996 . Reconciled PR501 64a92b2b5dd509104a7d0293d136a359f3cbabef passed all four in https://github.com/iteathen/DevBridge/actions/runs/34019589425 . The documentation merge preserves current GPU architecture and one complete copy of the DB-009 diagnostics requirements. Seventeen reporter/options tests also pass locally.

Both drafts still require their actual native acceptance gates. The desktop pause has ended; ordinary read-only inspection confirms the retained failed VM identity and running state. No installation, service registration, elevation, VM lifecycle change or new construction occurred. Hosted qualification is not GitHub-originated Linux/Windows Hello World proof.

* docs(roadmap): prioritize Hello World, CUDA-JS GPU testing, then MCP

* docs: define Hello World qualification and default early diagnostics

* docs: audit all open issues against Hello World dependencies

* fix: require observed environment generation for readiness

* Record completed issue audit actions

* Record the project prohibition on Python

* Preserve installer failures through diagnostic recovery

* Define bounded Hyper-V installer evidence reader

* Compose bounded live-installer evidence hooks in Ubuntu seeds

* Require owned installer transport before Ubuntu image construction

* Preserve bounded expanded failure evidence in originating status comments

* fix: remove host-client installer socket registry gate

Signed-off-by: iteathen <josh.oshiro@gmail.com>

---------

Signed-off-by: iteathen <josh.oshiro@gmail.com>
* fix: invoke installer evidence hooks through the shell

Signed-off-by: iteathen <josh.oshiro@gmail.com>

* fix: verify installer seed with portable native hashing

Signed-off-by: iteathen <josh.oshiro@gmail.com>

* docs: record successful native installer evidence exchange

Signed-off-by: iteathen <josh.oshiro@gmail.com>

---------

Signed-off-by: iteathen <josh.oshiro@gmail.com>
* Pin installer APT sources to the accepted package snapshot

* Check APT snapshot candidate selection with a newer live fixture
* Allow Windows image construction storage on a selected local volume

* Check setup help options without coupling their display order
#516)

* fix(windows): suppress unattended product key prompt

* docs: record native product key prompt qualification

* fix(windows): configure and clear temporary audit logon

* docs: distinguish qualified Linux image from pending activation

* fix(windows): bound setup commands and hand off installed audit mode

* fix(windows): host guest seed agents as native services

* fix(windows): align guest provisioning invocation budgets

* test(preflight): include native seed service suite in inventory

* fix(windows): import compiler environment through quoted batch call

* fix(windows): complete Sysprep before closing the guest session
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant