Repository navigation
T122 — Host-address boxes reach GitHub, end to end #2858
Description
Task
| slice | size | difficulty | model | who | estimated lines |
|---|---|---|---|---|---|
| Host-address boxes reach GitHub | M | needs care | standard | an agent | 260 (0 code, 260 tests) |
A box started on the default host network clones, pushes and runs gh against a private repository through the proxy under its default dns steering with no proxy variables, and a host-address box with no grant still resolves GitHub's real address.
Covers:
- BEP-087
Layers:
- e2e:
- scripts/session-e2e.sh: three cases on a VM host with a
host_ipgrant box: under the default steering, and understeering = "proxy_env", git clones and pushes and gh api reads a private repository; a secondhost_ipbox with no grant resolves github.com to a real address in the first case; a third case proves T117 on a Mac: a GitHub grant box started with--network host_ipgets a box id frommin box showand reaches the proxy's listener, and after it ends ahost_ipbox with no grant cannot reach the proxy's address ./scripts/session-e2e.sh bep_host_ip_git_and_gh_under_dns_steering./scripts/session-e2e.sh bep_host_ip_git_and_gh_under_proxy_env./scripts/session-e2e.sh bep_host_ip_grant_box_reaches_the_proxy_lane
- scripts/session-e2e.sh: three cases on a VM host with a
Waits on:
- T117 — Give a host-address grant box an id and open the proxy lane to its cohort #2854
- T119 — Deliver cohort connections and redeem them for the named box #2855
- T120 — Treat the proxy lane as in effect for a host-address box on a VM host #2856
- T121 — Steer a host-address grant box's lookups and admit dns on a VM host #2857
- T123 — Revoke a host-address grant box's minted id at the proxy when the box ends #3032
- T124 — Refuse a host-address box with no grant the proxy's address inside the VM #3047
- T125 — Register each fresh host-address grant box under a name of its own creation #3048
- T126 — Keep a host-address grant box's minted id across a VM host daemon restart, so its destroy revokes it #3049
Plan block
### T122 — Host-address boxes reach GitHub, end to end
slice: S17
kind: integration
covers: BEP-087
size: M
est: 0 code, 260 tests
executor: agent
difficulty: needs care
model: standard
diagnostics: each case prints PASS, or NOT RUN with its gate where a GitHub sign-in or `E2E_BEP_PRIVATE_REPO` is missing
observability: on a failure each case prints the box's `min box audit` records and the proxy's debug lines for the box id, so a refused or unsteered request shows where it stopped
layers:
- e2e:
- scripts/session-e2e.sh: three cases on a VM host with a `host_ip` grant box: under the default steering, and under `steering = "proxy_env"`, git clones and pushes and gh api reads a private repository; a second `host_ip` box with no grant resolves github.com to a real address in the first case; a third case proves T117 on a Mac: a GitHub grant box started with `--network host_ip` gets a box id from `min box show` and reaches the proxy's listener, and after it ends a `host_ip` box with no grant cannot reach the proxy's address
test: ./scripts/session-e2e.sh bep_host_ip_git_and_gh_under_dns_steering
test: ./scripts/session-e2e.sh bep_host_ip_git_and_gh_under_proxy_env
test: ./scripts/session-e2e.sh bep_host_ip_grant_box_reaches_the_proxy_lane
produces: none
consumes:
- per-box dns steering for a host-address box
- the in-VM refusal of a host-address box with no grant at the proxy's address
proof: A box started on the default host network clones, pushes and runs gh against a private repository through the proxy under its default dns steering with no proxy variables, and a host-address box with no grant still resolves GitHub's real address.
depends on:
- blocked by #2854
- blocked by #2855
- blocked by #2856
- blocked by #2857
- blocked by #3032
- blocked by #3047
- blocked by #3048
- blocked by #3049
Reacted by minimal-foundry
Activity
minimal-foundry commentedon Nov 6, 2026
Done. #3095 merged.
branch
agent/2858-host-address-boxes-reach-github-end-to-end· epic #1501 · PR #3095e55dbb08738d2c94edfaa0daUpdated 2026-11-06T19:48:00.663Z.