Commit Graph
9 Commits
Author SHA1 Message Date
ed eec44a09ed conductor(state): record post-completion patches (4 commits) on track
Documents the four follow-up commits made after the initial track ship:
63e91198 (test updates), cb68d86f (RuntimeError catch), 78256174
(defensive save), 61a89fa3 (report addendum). See
docs/reports/TRACK_COMPLETION_test_sandbox_hardening_20260619.md
'Post-completion fixes' section for details.
2026-06-19 14:30:43 -04:00
ed 3239536532 conductor(state): mark test_sandbox_hardening_20260619 complete 2026-06-19 08:33:12 -04:00
ed 07aca7f852 conductor(plan): Mark Phase 7 tasks complete 2026-06-19 07:54:11 -04:00
ed 66c6421bbc conductor(plan): Mark Phase 6 tasks complete 2026-06-19 07:50:55 -04:00
ed 0a8d394537 conductor(plan): Mark Phase 5 tasks complete 2026-06-19 07:48:52 -04:00
ed 49bc4908e6 conductor(plan): Mark Phase 3 tasks complete 2026-06-19 07:37:31 -04:00
ed 2bd9d1c25a conductor(plan): Mark Phase 2 tasks complete 2026-06-19 07:27:09 -04:00
edandClaude f2d880cbad conductor(plan): test_sandbox_hardening_20260619 - 9-phase TDD plan (30 tasks)
Phase 1 (3 tasks): Investigation + baseline (read-only).
Phase 2 (3 tasks): FR4 static audit (low risk, ship first).
Phase 3 (3 tasks): FR1 Python sys.addaudithook guard (high risk).
Phase 4 (6 tasks): FR2 root-cause fix -- remove SLOP_CONFIG, add --config CLI flag (MOST IMPORTANT).
Phase 5 (6 tasks): FR3 isolate_workspace + pytest --basetemp migration.
Phase 6 (2 tasks): FR5 PowerShell wrapper (opt-in).
Phase 7 (3 tasks): FR7 documentation.
Phase 8 (2 tasks): Full 11-tier verification.
Phase 9 (2 tasks): TRACK_COMPLETION report + state.toml completed.

Total: 30 tasks across 9 phases, ~11 atomic commits. Each task has WHERE/WHAT/HOW/SAFETY/COMMIT/GIT NOTE fields per conductor/workflow.md Tier 1 rules. Per-phase TDD (red test -> impl -> verify -> commit).

Co-Authored-By: Claude <noreply@anthropic.com>
2026-06-19 01:07:51 -04:00
edandClaude ec0716c916 conductor(spec): test_sandbox_hardening_20260619 - spec + metadata + state
5-part fix to prevent test data loss outside ./tests/:
1. FR2 (root-cause): remove SLOP_CONFIG env var fallback from src/paths.py
2. --config CLI flag at entry point (sloppy.py for prod, conftest.py for tests)
3. FR1: sys.addaudithook runtime guard blocks writes outside ./tests/
4. FR3: pytest --basetemp + isolate_workspace migration under ./tests/
5. FR4: static audit (scripts/audit_test_sandbox_violations.py) + --strict CI gate

Opt-in: FR5 Windows restricted-token wrapper (scripts/run_tests_sandboxed.ps1).

13 regression tests in tests/test_test_sandbox.py.
Baseline: 1288 passed + 4 xdist-skipped (per result_migration_small_files_20260617).

User directive: NO ENV VARS for config path. Use --config CLI flag.
Test workspace file naming: config_overrides.toml (per user direction).
Hard fail on any sandbox violation. Tests should never need AppData temp.

Co-Authored-By: Claude <noreply@anthropic.com>
2026-06-19 01:06:11 -04:00