Repository navigation
T82 — Run the Box Egress Proxy legs on the macOS lane #2500
Description
Task
| slice | size | difficulty | model | who | estimated lines |
|---|---|---|---|---|---|
| macOS lane proofs | M | routine | standard | a person | 100 (0 code, 100 tests) |
Every Box Egress Proxy leg that records NOT RUN on Linux records OK on the macOS lane against a live proxy with a sign-in. Its tasks re-cover requirements whose origin tasks merged with an arch condition held on a filed residual; the owner accepted that double coverage on 2026-10-26 so the residuals dispatch as slices. The debug-build key task re-covers the key-custody requirements; the owner accepted that double coverage on 2026-10-31.
Covers:
- BEP-050
- BEP-051
- BEP-015
- BEP-043
- BEP-061
- BEP-070
Layers:
- mac:
- scripts/session-e2e.sh: the full BEP walk on the manual macOS lane against
main, with a GitHub sign-in andE2E_BEP_PRIVATE_REPO, unchanged - scripts/session-e2e.sh:
bep_round_two_conditions_closedon the same lane withE2E_BEP_QUARANTINE=1, for its quarantine leg, on a host whose audit log may be moved aside (widened 2026-10-27: T76's quarantine leg needs a live proxy, which only this lane has) ./scripts/session-e2e.sh bep_live_gate
- scripts/session-e2e.sh: the full BEP walk on the manual macOS lane against
Waits on:
- T77 — Run the real-Keychain proof of min secret on a Mac #2562
- T78 — Run bep_git_credential_helper_sends_header on the macOS lane #2563
- T79 — Run the two revocation e2e legs on the macOS lane #2564
- T80 — Run bep_signing_rotation_keeps_running_box_working on the macOS lane #2565
- T81 — Run bep_box_recreated_under_its_name_redeems on the macOS lane #2587
- T111 — Accept a key the keychain made exportable in a debug build of bep, and scope the custody rule to release builds #2785
Plan block
### T82 — Run the Box Egress Proxy legs on the macOS lane
slice: S11
kind: integration
covers: BEP-050, BEP-051, BEP-015, BEP-043, BEP-061, BEP-070
size: M
est: 0 code, 100 tests
executor: human
difficulty: routine
model: standard
diagnostics: each case prints PASS or NOT RUN with its gate
observability: the walk's output, posted on #2500
layers:
- mac:
- scripts/session-e2e.sh: the full BEP walk on the manual macOS lane against `main`, with a GitHub sign-in and `E2E_BEP_PRIVATE_REPO`, unchanged
- scripts/session-e2e.sh: `bep_round_two_conditions_closed` on the same lane with `E2E_BEP_QUARANTINE=1`, for its quarantine leg, on a host whose audit log may be moved aside (widened 2026-10-27: T76's quarantine leg needs a live proxy, which only this lane has)
test: ./scripts/session-e2e.sh bep_live_gate
produces: none
consumes: none
proof: Every Box Egress Proxy leg that records NOT RUN on Linux records OK on the macOS lane against a live proxy with a sign-in. Its tasks re-cover requirements whose origin tasks merged with an arch condition held on a filed residual; the owner accepted that double coverage on 2026-10-26 so the residuals dispatch as slices. The debug-build key task re-covers the key-custody requirements; the owner accepted that double coverage on 2026-10-31.
depends on:
- blocked by #2562
- blocked by #2563
- blocked by #2564
- blocked by #2565
- blocked by #2587
- blocked by #2785
Generated by Claude Code
Activity
docs(e2e): name the issues that own the BEP-015 residuals
feat(minvmd): start the Box Egress Proxy beside gvproxy so git and gh…
norrietaylor commentedon Oct 24, 2026
Owner's stance (2026-10-24): the live legs are manual-only for now. A maintainer runs them by hand on a Mac with a sign-in and
E2E_BEP_PRIVATE_REPOand records the result here. The lane change (bep in the macOS testbed, a runner sign-in and the repo secret) waits for a later chore; #2320 does not cover it, since it only passes the App client secret to the release.yml build jobs. Until then every leg that gates on the lane records NOT RUN, and arch conditions on those legs are held here.Generated by Claude Code
norrietaylor commentedon Oct 26, 2026
The epic owner added this residual to the plan on 2026-10-26 as
T82(slice S11). Its body is now the rendered task. The residual text it replaces is kept below.Residual text
Residual filed from T18 #2497, arch condition C3, epic #1501. It takes over the residuals that T14 #2490 and T16 #2495 filed on T18 #2275.
Situation
No CI lane runs the Box Egress Proxy e2e legs against a live proxy. The macOS lane's testbed builds
minvmdandminwith directcargo buildcalls (.github/workflows/ci-macos.yml), notjust minvmd-build, so nobepsits besideminvmdthere. The self-hosted macOS runner has no GitHub sign-in and does not setE2E_BEP_PRIVATE_REPO. The Linux lanes have no libkrun VM. So these legs ofscripts/session-e2e.shrecord NOT RUN on every lane:bep_git_and_gh_against_private_repo(T18)bep_second_box_needs_no_sign_in(T14, residual from feat(minimal): mint sealed GitHub sign-in references and register the box with the proxy #2490)bep_root_ca_present_in_box_trust_store, the grant half ofbep_root_ca_absent_from_box_without_credentialed_upstream, andbep_trust_env_points_at_bundle_and_root(T16, residuals from feat(minimald): put the proxy's root certificate in a grant box's trust store #2495)bep_first_slice_end_to_end(T19, #2507, arch C1: the slice walk needs the same lane, sign-in andE2E_BEP_PRIVATE_REPO)bep_logout_refuses_every_reference_at_next_request(T21, #2512, arch C1: the case signs the runner out of GitHub, so it runs only withE2E_BEP_LOGOUT=1and the lane signs in again afterwards)What closes this
bepinto its testbed besideminvmd, signed asjust minvmd-buildsigns it..github/workflows/is frozen and CODEOWNER-gated, so that half needs the workflow owners.min auth loginand setsE2E_BEP_PRIVATE_REPOto a private repository that sign-in can push to.Blocked by #2275: the proxy that lane runs starts there.
Generated by Claude Code
[-]macOS e2e lane: run the Box Egress Proxy legs against a live proxy with a sign-in and E2E_BEP_PRIVATE_REPO[/-][+]T82 — Run the Box Egress Proxy legs on the macOS lane[/+]feat(minimald): ship a git credential helper in grant boxes (T50) (go…
fix(minvmd): stop or reap a bep serve left behind by a minvmd crash (g…
test(e2e): name the manual macOS lane in the key leg NOT RUN
test(e2e): name the manual macOS lane in the key leg NOT RUN
test(e2e): walk the round-two BEP conditions end to end (T76) (gomini…
test(e2e): clean up the pushed branch and print (none) in evidence
T122 — Host-address boxes reach GitHub, end to end (gominimal#3095)