8000 T79 — Run the two revocation e2e legs on the macOS lane · Issue #2564 · gominimal/minimal · GitHub
[go: up one dir, main page]

Skip to content

T79 — Run the two revocation e2e legs on the macOS lane #2564

Closed

Description

@norrietaylor

Task

slice size difficulty model who estimated lines
macOS lane proofs M routine standard a person 100 (0 code, 100 tests)

On the macOS lane, a destroyed box's values are refused within 60 seconds, a destroy completes with the proxy down (bep_destroy_with_proxy_down_refuses_by_attachment), and both cases record OK.

Covers:

  • BEP-043

Layers:

Waits on:

Plan block
### T79 — Run the two revocation e2e legs on the macOS lane
  slice: S11
  kind: task
  covers: BEP-043
  size: M
  est: 0 code, 100 tests
  executor: human
  difficulty: routine
  model: standard
  diagnostics: each case prints PASS or NOT RUN with its gate
  observability: the case output, posted on #2564
  layers:
    - mac:
      - scripts/session-e2e.sh: run on the manual macOS lane of #2500 against `main`, with a GitHub sign-in, unchanged
      test: ./scripts/session-e2e.sh bep_destroyed_box_values_refused_within_60s
  produces: none
  consumes: none
  proof: On the macOS lane, a destroyed box's values are refused within 60 seconds, a destroy completes with the proxy down (`bep_destroy_with_proxy_down_refuses_by_attachment`), and both cases record OK.
  depends on:
    - blocked by #2277
    - blocked by #2785

Generated by Claude Code

Activity

  1. added
    kind:featureA new feature or capability. Applied by the inbox-route classifier.
    on Oct 25, 2026
  2. norrietaylor commented on Oct 26, 2026

    @norrietaylor
    MemberAuthor

    The epic owner added this residual to the plan on 2026-10-26 as T79 (slice S11). Its body is now the rendered task. The residual text it replaces is kept below.

    Residual text

    Residual from T20 #2548, arch C1 and C2 (review threads 4369693955, 4369693958, 4369864379, 4371532849), epic #1501. Filed under the epic owner's 2026-10-25 decision to merge the PR and run its macOS legs later against main, on the manual macOS lane of #2500. Linux runners record these legs NOT RUN because bep serve runs on macOS only (bep_live_gate in scripts/session-e2e.sh).

    What closes this

    • On the macOS lane, ./scripts/session-e2e.sh bep_destroyed_box_values_refused_within_60s and ./scripts/session-e2e.sh bep_destroy_with_proxy_down_refuses_by_attachment both pass, proving the 60 s bound of Gatehouse §6.10 line 823 and the proxy-down leg of BEP-043, and their tails are posted here.

    Generated by Claude Code

  3. changed the title [-]Run the two revocation e2e legs on the macOS lane (BEP-043)[/-] [+]T79 — Run the two revocation e2e legs on the macOS lane[/+] on Oct 26, 2026
  4. added
    kind:taskA task the plan skill rendered; the body carries ## Task
    size:M200 to 500 net lines; one PR
    model:standardA standard model: work that needs care, or routine work that is large
    executor:humanHand-guided; an agent must not pick this up
    and removed
    kind:featureA new feature or capability. Applied by the inbox-route classifier.
    on Oct 26, 2026
  5. norrietaylor commented on Nov 4, 2026

    @norrietaylor
    MemberAuthor

    Both cases pass on the manual macOS lane, against main at 2a59f34e with a GitHub sign-in. Each ran alone, with the script unchanged. Both exited 0, and their proxy and VM were real.

    #2998 made these cases runnable. The earlier failures were bugs in the script, not in the proxy.

    ./scripts/session-e2e.sh bep_destroyed_box_values_refused_within_60s

    ::group::min session destroy: a value copied from the box is refused within 60 s
    web: 'gh api user' answered, and GH_TOKEN holds a sealed value (1604 characters)
    min box audit 01a1a8ce-fae7-7e9a-bfaa-40811d22f457: 1 revocation record within 60 s of the destroy
    copied value in the second box after the destroy: 'gh api user' failed, and min box audit shows 1 refuse record(s) marked cross_box, for api.github.com:443
    Destroy revocation OK (one revocation record within 60 s, and the copied value refused)
    ::endgroup::
    session e2e OK
    

    ./scripts/session-e2e.sh bep_destroy_with_proxy_down_refuses_by_attachment

    ::group::min session destroy with the proxy down: the destroy completes, and the value is refused
    web: 'gh api user' answered, and GH_TOKEN holds a sealed value (1604 characters)
    the proxy is down
    min session destroy of web completed with the proxy down
    minvmd log: the destroy completed without a revocation from the proxy
    copied value in a new box: 'gh api user' failed, and min box audit shows 1 refuse record(s) marked cross_box, for api.github.com:443
    min box audit 01a1a8cf-318b-797e-a549-de3673ab8519: 1 decision records and no revocation record
    Destroy with the proxy down OK (the destroy completed, and the copied value was refused after the proxy came back)
    ::endgroup::
    session e2e OK
    

    Generated by Claude Code

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    executor:humanHand-guided; an agent must not pick this upkind:taskA task the plan skill rendered; the body carries ## Taskmodel:standardA standard model: work that needs care, or routine work that is largesize:M200 to 500 net lines; one PR

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions

      0