Repository navigation
T123 — Revoke a host-address grant box's minted id at the proxy when the box ends #3032
Description
Task
| slice | size | difficulty | model | who | estimated lines |
|---|---|---|---|---|---|
| Host-address boxes reach GitHub | S | routine | standard | an agent | 180 (60 code, 120 tests) |
After a host-address grant box ends, the proxy refuses a sealed value under its id, and
min box auditshows the revocation.
Layers:
- revoke:
- crates/minvmd/src/box_registry.rs:
retire_host_ip_boxsendsspawn_revocationfor the box's minted id when the retired box declared a credentialed upstream and the id is oneHostIpIdsminted, as the own-address destroy does (BEP-043); the id stays in the id set so it never returns cargo nextest run -p minvmd retiring_a_host_ip_grant_box_revokes_its_minted_idcargo nextest run -p minvmd retiring_a_host_ip_box_with_no_grant_sends_no_revocation
- crates/minvmd/src/box_registry.rs:
Waits on:
Residual record: #2865.
Plan block
### T123 — Revoke a host-address grant box's minted id at the proxy when the box ends
slice: S17
kind: task
covers: BEP-043
size: S
est: 60 code, 120 tests
executor: agent
difficulty: routine
model: standard
diagnostics: `min box audit <box>` for an ended `host_ip` grant box shows the revocation of its id, as it does for an ended own-address box
observability: the existing `bep-revocation` thread's warning names the box id and the step that failed, for a `host_ip` box as for an own-address box
layers:
- revoke:
- crates/minvmd/src/box_registry.rs: `retire_host_ip_box` sends `spawn_revocation` for the box's minted id when the retired box declared a credentialed upstream and the id is one `HostIpIds` minted, as the own-address destroy does (BEP-043); the id stays in the id set so it never returns
test: cargo nextest run -p minvmd retiring_a_host_ip_grant_box_revokes_its_minted_id
test: cargo nextest run -p minvmd retiring_a_host_ip_box_with_no_grant_sends_no_revocation
produces:
- the revocation of an ended host-address grant box
consumes: none
proof: After a host-address grant box ends, the proxy refuses a sealed value under its id, and `min box audit` shows the revocation.
depends on:
- blocked by #2854
Reacted by minimal-foundry
Activity
minimal-foundry commentedon Nov 5, 2026
Done. #3034 merged.
branch
agent/3032-revoke-a-host-address-grant-box-s-minted-id-at-t· epic #1501 · PR #3034f9d19802e3468c8aeba3280ea100ee392b86f13b9484ab0aUpdated 2026-11-05T19:35:21.860Z.