2 Commits

Include renames

Author	SHA1	Message	Date
edandClaude	f2d880cbad	conductor(plan): test_sandbox_hardening_20260619 - 9-phase TDD plan (30 tasks) ... Phase 1 (3 tasks): Investigation + baseline (read-only). Phase 2 (3 tasks): FR4 static audit (low risk, ship first). Phase 3 (3 tasks): FR1 Python sys.addaudithook guard (high risk). Phase 4 (6 tasks): FR2 root-cause fix -- remove SLOP_CONFIG, add --config CLI flag (MOST IMPORTANT). Phase 5 (6 tasks): FR3 isolate_workspace + pytest --basetemp migration. Phase 6 (2 tasks): FR5 PowerShell wrapper (opt-in). Phase 7 (3 tasks): FR7 documentation. Phase 8 (2 tasks): Full 11-tier verification. Phase 9 (2 tasks): TRACK_COMPLETION report + state.toml completed. Total: 30 tasks across 9 phases, ~11 atomic commits. Each task has WHERE/WHAT/HOW/SAFETY/COMMIT/GIT NOTE fields per conductor/workflow.md Tier 1 rules. Per-phase TDD (red test -> impl -> verify -> commit). Co-Authored-By: Claude <noreply@anthropic.com>	2026-06-19 01:07:51 -04:00
edandClaude	ec0716c916	conductor(spec): test_sandbox_hardening_20260619 - spec + metadata + state ... 5-part fix to prevent test data loss outside ./tests/: 1. FR2 (root-cause): remove SLOP_CONFIG env var fallback from src/paths.py 2. --config CLI flag at entry point (sloppy.py for prod, conftest.py for tests) 3. FR1: sys.addaudithook runtime guard blocks writes outside ./tests/ 4. FR3: pytest --basetemp + isolate_workspace migration under ./tests/ 5. FR4: static audit (scripts/audit_test_sandbox_violations.py) + --strict CI gate Opt-in: FR5 Windows restricted-token wrapper (scripts/run_tests_sandboxed.ps1). 13 regression tests in tests/test_test_sandbox.py. Baseline: 1288 passed + 4 xdist-skipped (per result_migration_small_files_20260617). User directive: NO ENV VARS for config path. Use --config CLI flag. Test workspace file naming: config_overrides.toml (per user direction). Hard fail on any sandbox violation. Tests should never need AppData temp. Co-Authored-By: Claude <noreply@anthropic.com>	2026-06-19 01:06:11 -04:00