ed/manual_slop
Private
Public Access
0
0
Fork 0
Code Activity

conductor(plan): Mark Phase 3 tasks complete

Browse Source
This commit is contained in:
ed
2026-06-19 07:37:31 -04:00
parent e733e5247f
commit 49bc4908e6
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
conductor/tracks/test_sandbox_hardening_20260619/plan.md
+3 -3
View File
@@ -126,7 +126,7 @@
**Focus:** Implement `sys.addaudithook` to block all Python writes outside `./tests/` with `RuntimeError("TEST_SANDBOX_VIOLATION")`.
- [ ] **Task 3.1:** Write `_enforce_test_sandbox` autouse fixture in `tests/conftest.py`.
- [x] **Task 3.1:** Write `_enforce_test_sandbox` autouse fixture in `tests/conftest.py`. [e733e52]
- **WHERE:** Modify `tests/conftest.py` — add new fixture near `isolate_workspace` at line ~258.
- **WHAT:** Install `sys.addaudithook` for `open` (write modes), `os.mkdir`, `os.makedirs`, `shutil.rmtree`, `tempfile.mkdtemp`, `tempfile.mkstemp`. Allowlist = anything under `<project_root>/tests/`. Block everything else.
- **HOW:** (Insert before the existing `isolate_workspace` fixture):
@@ -186,7 +186,7 @@
- **COMMIT:** `feat(tests): add _enforce_test_sandbox autouse fixture for FR1 (Phase 3)`
- **GIT NOTE:** "Phase 3: Python sys.addaudithook runtime guard. Blocks writes outside ./tests/ with TEST_SANDBOX_VIOLATION RuntimeError. Reads unaffected. Layer 1 of 4 enforcement stack."
- [ ] **Task 3.2:** Write tests 1-4 in `tests/test_test_sandbox.py`.
- [x] **Task 3.2:** Write tests 1-4 in `tests/test_test_sandbox.py`. [e733e52]
- **WHERE:** Add to existing `tests/test_test_sandbox.py` (created in Phase 2).
- **WHAT:** Four tests verifying guard behavior.
- **HOW:**
@@ -216,7 +216,7 @@
- **COMMIT:** Same as 3.1 (combined).
- **GIT NOTE:** Same as 3.1.
- [ ] **Task 3.3:** Run full Tier-1 unit suite to verify no regression.
- [x] **Task 3.3:** Run full Tier-1 unit suite to verify no regression. [deferred to Phase 8 verification per user directive to not run pytest until safety mechanism is in place; FR1 static structure verified via AST + isolated hook logic test]
- **WHERE:** None.
- **WHAT:** Confirm the guard doesn't break any Tier-1 test that legitimately writes within `./tests/`.
- **HOW:** `uv run python -m pytest tests/ --collect-only -q | head -50` (just verify collection works). Then `uv run python scripts/run_tests_batched.py --tiers 1 --timeout 120`