8000 build(deps): bump the cargo group across 1 directory with 11 updates by dependabot[bot] · Pull Request #114 · gominimal/minimal · GitHub
[go: up one dir, main page]

Skip to content

build(deps): bump the cargo group across 1 directory with 11 updates - #114

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-f8c3c77a13
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-f8c3c77a13

Conversation

@dependabot
@dependabot dependabot Bot commented on behalf of github Apr 13, 2026 •
Copy link
Copy Markdown
Contributor

Bumps the cargo group with 10 updates in the / directory:

Package From To
blake3 1.8.3 1.8.4
clap_complete 4.6.0 4.6.2
hakoniwa 941422c 6bd1a53
jaq-all 0.1.0-beta 0.1.0
nickel-lang-core 0.15.3 0.16.1
object 0.38.1 0.39.0
oci-spec 0.8.4 0.9.0
rand 0.10.0 0.10.1
sha2 0.10.9 0.11.0
tokio 1.50.0 1.51.1

Updates blake3 from 1.8.3 to 1.8.4

Release notes

Sourced from blake3's releases.

1.8.4

version 1.8.4

Changes since 1.8.3:

  • Updated the digest dependency from v0.10 to v0.11. THIS IS A POTENTIALLY BREAKING CHANGE for callers using the traits-preview Cargo feature. But this is not considered a breaking change for the blake3 crate itself; see the docs for traits-preview.
  • Performance for WASM SIMD targets is improved by ~20% when the wasm32_simd feature is enabled. Contributed by @​lamb356.
Commits
  • b97a24f version 1.8.4
  • 0ebe469 update to new rustcrypto trait releases
  • d4b005a wasm32_simd: use i8x16_shuffle for rot8 and rot16
  • 6eebbbd fix a struct size mismatch in tests
  • fb1411e c: use SIZE_MAX instead of -1 for size_t sentinels, add <stdint.h>
  • See full diff in compare view

Updates clap_complete from 4.6.0 to 4.6.2

Changelog

Sourced from clap_complete's changelog.

Change Log

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

5.0.0 - TBD

available through unstable-v5 feature flag

Breaking Changes

  • Made ArgPredicate non_exhaustive
  • (help) Change default Command::term_width to "source format"
  • (help) Change default Command::max_term_width to 100
  • (derive) Vec<Vec<T>> types are now assuming to capture occurrences
  • (derive) ValueEnum variants now use the full doc comment, not summary, for PossibleValue::help

Features

  • (derive) Group values by their occurrence with Vec<Vec<T>>

[Unreleased] - ReleaseDate

Commits
  • 0fe0be3 chore: Release
  • 480af9d docs: Update changelog
  • 2b3ddd0 Merge pull request #6340 from liskin/fix-completion-escape
  • 7ffe739 fix(complete): Do not suggest options after "--"
  • d47fc4f test(complete): Options suggested after escape (--)
  • 1420275 chore: Release
  • d2c817d docs: Update changelog
  • f88c94e Merge pull request #6341 from epage/sep
  • acbb822 fix(complete): Reduce risk of conflict with actual subcommands
  • a49fadb refactor(complete): Pull out subcommand separator
  • Additional commits viewable in compare view

Updates hakoniwa from 941422c to 6bd1a53

Commits
  • 6bd1a53 test: Add test_new_from_closure_env
  • 704f46d test: Add test_new_from_closure
  • edd0321 feat: Clear env before execing closure
  • cbe5a60 docs: Add container-command-from-closure example
  • b820b71 feat: Add Container#command_from_closure
  • 9d53600 chore: Bump version to 1.5.0
  • 9b9b020 feat: Support logging rlimit
  • f355890 chore: Update shell completions files
  • 156de31 feat: Fix typo
  • 3bcca5a feat(cli)!: Redesign cgroup cli arg
  • Additional commits viewable in compare view

Updates jaq-all from 0.1.0-beta to 0.1.0

Commits

Updates nickel-lang-core from 0.15.3 to 0.16.1

Commits

Updates object from 0.38.1 to 0.39.0

Changelog

Sourced from object's changelog.

0.39.0

Released 2026/03/29.

Breaking changes

  • Changed read::NativeFile to use NativeEndian instead of Endianness. #851

  • Changed the type of elf::Dyn32/64::d_tag to signed (i32/i64). Changed the type of DT_* constants to i64. Changed write::elf::Writer::write_dynamic parameter to match. #852

  • Changed parsing to always support unaligned data. The unaligned feature now has no effect. #861

  • Changed read::SymbolMapName::new to accept a size parameter. #863

Changed

  • Changed read::MachOFile::entry to handle LC_UNIXTHREAD load commands. #837

  • Reduced the size of read::elf::CrelIterator. #840

  • Improved debug output for read::*File by hiding the raw data bytes. #853

  • Removed DT_SYMBOLIC from the read::elf::Dyn::is_address check. #854

  • Changed read::macho to treat ltmp* symbols as section symbols. #856

  • Changed read::Relocation::encoding for unknown relocations to RelocationEncoding::Unknown. #857

  • Changed read::RelocationMap to handle RelocationKind::None and check for supported RelocationEncoding. #857

  • Changed read::elf to return RelocationKind::GotRelative for elf::R_X86_64_GOTPCRELX and elf::R_X86_64_REX_GOTPCRELX. #859

... (truncated)

Commits
  • c7233dc Release 0.39.0
  • fccf135 Update Cargo.lock
  • 6ce794a Update wasmparser dependency
  • ad68a0a Fix warning
  • d4b370d Switch default branch to main
  • a2ee270 pod: check for divide by zero (#868)
  • 870389f read/elf: include unsized symbols in is_definition() (#866)
  • 7eaeb11 symbol_map: improve symbol size handling for XCOFF
  • e03f26b symbol_map: use section sizes to improve symbol size guesses
  • a566ef1 symbol_map: use symbol size if known
  • Additional commits viewable in compare view

Updates oci-spec from 0.8.4 to 0.9.0

Release notes

Sourced from oci-spec's releases.

v0.9.0

What's Changed

Other Changes

New Contributors

Full Changelog: youki-dev/oci-spec-rs@v0.8.4...v0.9.0

Commits
  • 68e4f11 Bump to 0.9.0
  • 97444ac Added tests for the new changes
  • 9152385 Added SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV
  • 11e3f94 change from function to use as_u32 internal
  • a49335f remove deprecated and update document comment
  • 33312a9 deprecated move to function
  • a4b85eb update comment
  • 145d747 delete unused code
  • 581b125 add deprecated to from function
  • 84d8c13 delete unused code
  • Additional commits viewable in compare view

Updates rand from 0.10.0 to 0.10.1

Changelog

Sourced from rand's changelog.

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

  • Document panic behavior of make_rng and add #[track_caller] (#1761)
  • Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

Commits

Updates sha2 from 0.10.9 to 0.11.0

Commits

Updates tokio from 1.50.0 to 1.51.1

Release notes

Sourced from tokio's releases.

Tokio v1.51.1

1.51.1 (April 8th, 2026)

Fixed

  • sync: fix semaphore reopens after forget (#8021)
  • net: surface errors from SO_ERROR on recv for UDP sockets on Linux (#8001)

Fixed (unstable)

  • metrics: fix worker_local_schedule_count test (#8008)
  • rt: do not leak fd when cancelling io_uring open operation (#7983)

#7983: tokio-rs/tokio#7983 #8001: tokio-rs/tokio#8001 #8008: tokio-rs/tokio#8008 #8021: tokio-rs/tokio#8021

Tokio v1.51.0

1.51.0 (April 3rd, 2026)

Added

  • net: implement get_peer_cred on Hurd (#7989)
  • runtime: add tokio::runtime::worker_index() (#7921)
  • runtime: add runtime name (#7924)
  • runtime: stabilize LocalRuntime (#7557)
  • wasm: add wasm32-wasip2 networking support (#7933)

Changed

  • runtime: steal tasks from the LIFO slot (#7431)

Fixed

  • docs: do not show "Available on non-loom only." doc label (#7977)
  • macros: improve overall macro hygiene (#7997)
  • sync: fix notify_waiters priority in Notify (#7996)
  • sync: fix panic in Chan::recv_many when called with non-empty vector on closed channel (#7991)

#7431: tokio-rs/tokio#7431 #7557: tokio-rs/tokio#7557 #7921: tokio-rs/tokio#7921 #7924: tokio-rs/tokio#7924 #7933: tokio-rs/tokio#7933 #7977: tokio-rs/tokio#7977 #7989: tokio-rs/tokio#7989 #7991: tokio-rs/tokio#7991 #7996: tokio-rs/tokio#7996 #7997: tokio-rs/tokio#7997

Commits
  • 98df02d chore: prepare Tokio v1.51.1 (#8023)
  • 3ea11e2 sync: fix semaphore reopens after forget (#8021)
  • c791213 rt: do not leak fd when cancelling io_uring open operation (#7983)
  • ad8c59a net: surface errors from SO_ERROR on recv for UDP sockets on Linux (#8001)
  • 654d38b metrics: fix worker_local_schedule_count test (#8008)
  • 857ba80 docs: improve contributing docs on how to specify crates dependency versions ...
  • 95b9342 chore: remove path deps for tokio-macros 2.7.0 (#8007)
  • 0af06b7 chore: prepare Tokio v1.51.0 (#8005)
  • 01a7f1d chore: prepare tokio-macros v2.7.0 (#8004)
  • eeb55c7 runtime: steal tasks from the LIFO slot (#7431)
  • Additional commits viewable in compare view

Updates libc from 0.2.183 to 0.2.185

Release notes

Sourced from libc's releases.

0.2.185

Added

  • EspIDF: Add espidf_picolibc cfg for picolibc O_* flag values (#5035)
  • Hexagon: add missing constants and fix types for linux-musl (#5042)
  • Redox: Add semaphore functions (#5051)
  • Windows: Add sprintf, snprintf, and the scanf family (#5024)

Fixed

  • Hexagon: Decouple time64 types from musl symbol redirects (#5040)
  • Horizon: Change POLL constants from c_short to c_int (#5045)

0.2.184

MSRV

This release increases the MSRV of libc to 1.65. With this update, you can now always use the core::ffi::c_* types with libc definitions, since libc has been changed to reexport from core rather than redefining them. (This usually worked before but had edge cases.) (#4972)

Added

  • BSD: Add IP_MINTTL to bsd (#5026)
  • Cygwin: Add TIOCM_DSR (#5031)
  • FreeBSD: Added xfile structe and file descriptor types (#5002)
  • Linux: Add CAN netlink bindings (#5011)
  • Linux: Add struct ethhdr (#4239)
  • Linux: Add struct ifinfomsg (#5012)
  • Linux: Define max_align_t for riscv64 (#5029)
  • NetBSD: Add missing CLOCK_ constants (#5020)
  • NuttX: Add _SC_HOST_NAME_MAX (#5004)
  • VxWorks: Add flock and F_*LCK constants (#4043)
  • WASI: Add all _SC_* sysconf constants (#5023)

Deprecated

The remaining fixed-width integer aliases, __uint128_t, __uint128, __int128_t, and __int128, have been deprecated. Use i128 and u128 instead. (#4343)

Fixed

  • breaking Redox: Fix signal action constant types (#5009)
  • EspIDF: Correct the value of DT_* constants (#5034)
  • Redox: Fix locale values and add RTLD_NOLOAD, some TCP constants (#5025)
  • Various: Use Padding::new(<zeroed>) rather than Padding::uninit() (#5036)

Changed

  • potentially breaking Linux: Add new fields to struct ptrace_syscall_info (#4966)

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.185 - 2026-04-13

Added

  • EspIDF: Add espidf_picolibc cfg for picolibc O_* flag values (#5035)
  • Hexagon: add missing constants and fix types for linux-musl (#5042)
  • Redox: Add semaphore functions (#5051)
  • Windows: Add sprintf, snprintf, and the scanf family (#5024)

Fixed

  • Hexagon: Decouple time64 types from musl symbol redirects (#5040)
  • Horizon: Change POLL constants from c_short to c_int (#5045)

0.2.184 - 2026-04-01

MSRV

This release increases the MSRV of libc to 1.65. With this update, you can now always use the core::ffi::c_* types with libc definitions, since libc has been changed to reexport from core rather than redefining them. (This usually worked before but had edge cases.) (#4972)

Added

  • BSD: Add IP_MINTTL to bsd (#5026)
  • Cygwin: Add TIOCM_DSR (#5031)
  • FreeBSD: Added xfile structe and file descriptor types (#5002)
  • Linux: Add CAN netlink bindings (#5011)
  • Linux: Add struct ethhdr (#4239)
  • Linux: Add struct ifinfomsg (#5012)
  • Linux: Define max_align_t for riscv64 (#5029)
  • NetBSD: Add missing CLOCK_ constants (#5020)
  • NuttX: Add _SC_HOST_NAME_MAX (#5004)
  • VxWorks: Add flock and F_*LCK constants (#4043)
  • WASI: Add all _SC_* sysconf constants (#5023)

Deprecated

The remaining fixed-width integer aliases, __uint128_t, __uint128, __int128_t, and __int128, have been deprecated. Use i128 and u128 instead. (#4343)

Fixed

  • breaking Redox: Fix signal action constant types (#5009)
  • EspIDF: Correct the value of DT_* constants (#5034)
  • Redox: Fix locale values and add RTLD_NOLOAD, some TCP constants (#5025)
  • Various: Use Padding::new(<zeroed>) rather than Padding::uninit() (#5036)

... (truncated)

Commits
  • 71d5bfc libc: Release 0.2.185
  • 1027d1c Revert "ci: Pin nightly to 2026-04-01"
  • 0e9c6e5 redox: Add semaphore functions
  • 24ef457 feat: add back support for gnu windows x86 in ci
  • aa75caf horizon: Change POLL constants from c_short to c_int
  • b7eda5a hexagon: add missing constants and fix types for linux-musl
  • d4613f9 newlib/espidf: Add espidf_picolibc cfg for picolibc O_* flag values
  • c89fd76 Fix typo in Padding comments
  • b3264b2 hexagon: decouple time64 types from musl symbol redirects
  • db1ebee ci: Pin nightly to 2026-04-01
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't 8000 alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the cargo group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [blake3](https://github.com/BLAKE3-team/BLAKE3) | `1.8.3` | `1.8.4` |
| [clap_complete](https://github.com/clap-rs/clap) | `4.6.0` | `4.6.2` |
| [hakoniwa](https://github.com/souk4711/hakoniwa) | ``941422c`` | ``6bd1a53`` |
| [jaq-all](https://github.com/01mf02/jaq) | `0.1.0-beta` | `0.1.0` |
| [nickel-lang-core](https://github.com/tweag/nickel) | `0.15.3` | `0.16.1` |
| [object](https://github.com/gimli-rs/object) | `0.38.1` | `0.39.0` |
| [oci-spec](https://github.com/youki-dev/oci-spec-rs) | `0.8.4` | `0.9.0` |
| [rand](https://github.com/rust-random/rand) | `0.10.0` | `0.10.1` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.50.0` | `1.51.1` |



Updates `blake3` from 1.8.3 to 1.8.4
- [Release notes](https://github.com/BLAKE3-team/BLAKE3/releases)
- [Commits](BLAKE3-team/BLAKE3@1.8.3...1.8.4)

Updates `clap_complete` from 4.6.0 to 4.6.2
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.0...clap_complete-v4.6.2)

Updates `hakoniwa` from `941422c` to `6bd1a53`
- [Release notes](https://github.com/souk4711/hakoniwa/releases)
- [Commits](souk4711/hakoniwa@941422c...6bd1a53)

Updates `jaq-all` from 0.1.0-beta to 0.1.0
- [Release notes](https://github.com/01mf02/jaq/releases)
- [Commits](https://github.com/01mf02/jaq/commits)

Updates `nickel-lang-core` from 0.15.3 to 0.16.1
- [Release notes](https://github.com/tweag/nickel/releases)
- [Changelog](https://github.com/nickel-lang/nickel/blob/master/RELEASES.md)
- [Commits](https://github.com/tweag/nickel/commits)

Updates `object` from 0.38.1 to 0.39.0
- [Changelog](https://github.com/gimli-rs/object/blob/main/CHANGELOG.md)
- [Commits](gimli-rs/object@0.38.1...v0.39.0)

Updates `oci-spec` from 0.8.4 to 0.9.0
- [Release notes](https://github.com/youki-dev/oci-spec-rs/releases)
- [Changelog](https://github.com/youki-dev/oci-spec-rs/blob/main/release.md)
- [Commits](youki-dev/oci-spec-rs@v0.8.4...v0.9.0)

Updates `rand` from 0.10.0 to 0.10.1
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.10.0...0.10.1)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `tokio` from 1.50.0 to 1.51.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.50.0...tokio-1.51.1)

Updates `libc` from 0.2.183 to 0.2.185
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.185/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.183...0.2.185)

---
updated-dependencies:
- dependency-name: blake3
  dependency-version: 1.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: clap_complete
  dependency-version: 4.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: hakoniwa
  dependency-version: 6bd1a53b0645d7cc4bad858b23841ec15a17f7e1
  dependency-type: direct:production
  dependency-group: cargo
- dependency-name: jaq-all
  dependency-version: 0.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: nickel-lang-core
  dependency-version: 0.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: object
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: oci-spec
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: rand
  dependency-version: 0.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: tokio
  dependency-version: 1.51.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: libc
  dependency-version: 0.2.185
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Apr 13, 2026
@dependabot @github
dependabot Bot commented on behalf of github Apr 13, 2026
Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 13, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/cargo-f8c3c77a13 branch April 13, 2026 22:29
mitodrummer added a commit that referenced this pull request Oct 7, 2026
Re-pin the architecture link to gominimal/arch 823f45f, where every
open question citing arch#97, #98, #99, #112, #113, #114 and #123 is
merged, and turn those questions into citations.

- BOX-163: refuse a held name only for a creation that asks for no
  fresh instance; a fresh instance is named <name>-<n> (arch#117).
- BOX-071: project egress.deny_subnets as network.egress_deny_subnets
  (Gatehouse v1.26).
- BOX-002 and the id-mint invariant: scoped to un-enrolled VM hosts;
  the STS mints on enrolled nodes (Gatehouse v1.27).
- BOX-013 states the 10 s default grace; BOX-025's name refusal is
  exit 2 (arch#97 row 2).
- BOX-165: the implicit [sessions.default] entry (arch#124), marked
  implicit by BOX-161 and covered by BOX-145's vectors.

Three open questions remain: the NET/GWI reading (#2041),
[params] delivery (arch#100) and exec_enabled, still proposed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CdRDynXbYoKR6dByN13KsD
yermakoffivan pushed a commit to yermakoffivan/minimal that referenced this pull request Oct 8, 2026
…mal#1697)

* docs(specs): add BOX, the local-first box spec from inbox#731

One record, one spec, one grammar for every session and task on a stock
install: 146 EARS requirements across the box record and lifecycle, the
Box Spec in minimal.toml and its deterministic expansion, the min box
grammar with one-release aliases, memory admission, and the un-enrolled
local provider. T1 property tests on expansion, type constraints and
names; T2 Kani harnesses on the record state machine and admission
arithmetic; the three local Box Provider API requirements wait on
gominimal/arch#45.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): link BOX open questions to gominimal/arch#97–gominimal#100

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): fix box id entropy, rename events, detach stdout, name lookups

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): split BOX into three siblings and apply review cycle 1

BOX keeps the record, the Box Spec and the grammar (122 requirements,
ids stable with gaps). Resources move to 26-spec-box-resources (BRES,
13 requirements, T2 admission harnesses intact) and Box Volumes to
27-spec-box-volumes (BVOL, 8 requirements). The dash goes to an
amendment of 07-spec-min-dash-tui, the local Box Provider API waits on
gominimal/arch#45, and the test-suite meta-requirements are carried by
every tier/verify line.

Review cycle 1: resume hooks, the bare `min stop` alias window, the
projection field set per Gatehouse 6.3.2, `min box spec self` as a
nesting non-goal, the brokered-secret enforcer, the generality claim,
stopped-record exit codes, a `detached` event, `min provider list
--all` (BOX-147), and the first slice.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): review cycle 2 and fold split cases under their parents

Cycle 2 across the three siblings: [machine] and on_oom owned by BRES
alone, BRES limits scoped to enforced hosts, volumes keyed by project
(arch AT21) with an access mode and a hold that survives stop and
resume, the type-noun verb aliases (BOX-148), ram_reserved against a
resolved auto ram (BRES-015), and the BRES/gominimal#698 overlap recorded as an
open question.

BOX: 24 refusal and flag cases that were splits of a parent behaviour
are now indented sub-bullets of that parent, tier and verify lines
kept; references point at the parent. 99 top-level requirements.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): review cycle 3 across BOX, BRES and BVOL

BOX-076 admits BVOL-011's volume items; the min shell ambiguity case
sits under BOX-090; parent tier lines precede their sub-bullets; the
network non-goal range is corrected. BRES-006 covers an omitted ram,
BRES-016 adds the advisory-host creation warning arch requires. BVOL
mounts at /volumes/<name> (open question for arch) and BVOL-012 keeps
prune off held volumes.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): split the min grammar out of BOX into 28-spec-box-cli

BOX now specifies the model only: the record, lifecycle, events, exec
operations, the Box Spec and its expansion, and the un-enrolled path,
with triggers stated as operations rather than verbs (60 requirements).
BCLI carries the min box verb set, type nouns, shortcuts, exec flags,
output schemas, exit codes, the one-release alias window, docs, and the
host and provider commands (52 requirements), each binding to a BOX
operation by id and carrying the BOX id it came from.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): consistency pass across BOX, BCLI, BRES and BVOL

Exec client loss scoped to non-PTY, non-detached execs; a stopped box's
"exists" mapped onto NET-013/015 with an open question for NET and GWI;
min box rename bound (BCLI-058) and the alias table completed, with
session destroy mapping to box rm --force so BEP-043 still fires; the
stop, rm, prune, cp and events verbs bound to their BOX operations
(BCLI-059 to 062); verbs removed from the model's remaining text; task
end keyed on lifetime; a running record on daemon restart becomes
stopped (BOX-154); detached output capture (BOX-155); legacy mode
spellings named; stored exit codes stated; BRES-004's reservation cap
takes arch's overcommit-policy value; BVOL's hold and bare-name
decisions recorded as the owner's.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): review cycle 5: NET "exists" means running, stored signals

NET-013/015 and GWI-005's "exists" now maps to the running state and
"destroyed" to leaving it; a stopped box is neither kept running nor
answers its name. A signal-ended stop stores the signal and min box
wait returns 128 + signal (137 for a record the daemon restart marked
stopped). The restart-to-stopped and host-stop-stops-boxes-first
choices are recorded as the owner's; the bare-volume-name reason
matches the record.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): read NET's destroyed as reaped; stopped names answer NODATA

Per NET-128 and the networking design §7.1 a not-running box keeps its
name in the zone and answers NODATA; NXDOMAIN starts at reap. Resume
and name reuse need NET to register at resume as well as at finalise;
the open question asks NET and GWI to confirm.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): answer NXDOMAIN at reap only for the last holder of a name

A reused name follows its remaining holder (A if running, NODATA if
not); own-address NODATA is put to NET as a question; resume cites
BOX-025 and BOX-030.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): refuse resume while a running box holds the name

NODATA applies while no running box holds a name; BOX-004's property
covers resume; BOX-025 refuses a resume whose name a running box holds
and BCLI reports it with exit 2 and a rename hint.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): consistency pass over the box specs, cycle 10

Accepted keys are arch's box.toml plus the additions this spec names;
legacy mode spellings canonicalise into the spec and expire with the
legacy tables; prune reaps only stopped or exited boxes matching all
selectors; NET-015's stop list gains timeout, on_oom end_box and
entrypoint return; resume applies to any pty_enabled box; the
--network/--ingress overrides are the last expansion layer; provider
aliases expire with the rest; secrets render as references in every
output mode (BCLI-063); issue citations point at the arch#97/gominimal#98
comments that now carry the items.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): min box spec takes the override flags; volume hold ends on exit

min box spec <entry> accepts --network and --ingress through the same
last expansion layer as start, so the pre-flight render is what the
daemon receives. A volume write hold is kept while a box is stopped
and released when it reaches exited or is reaped (owner decision), so
a task re-runs at once; resume from exited while another box holds the
volume is refused with exit 5 (BVOL-013).

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): overrides in the expansion properties; resume after volume removal

The T1 properties for byte-identical and enrolment-invariant expansion
range over command-line overrides too. A resumed box whose volume was
removed while it was exited gets a fresh volume created and reattached
by project and name. The name-conflict check on resume runs before the
volume-hold check, so a resume meeting both exits 2.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): order the resume refusals: PTY check, name check, volume hold

BVOL-013 applies only to pty_enabled boxes and runs after BOX-030 and
BOX-025's name check; BCLI-007 and BCLI-009 cite that order.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): place the unsatisfiable-spec check in the resume refusal order

BOX-025 states the full order once (PTY, name, spec, volume hold);
BVOL-013 and BCLI cite it.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): min session attach aliases the top-level min attach shortcut

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): the volumes first slice includes the single-writer refusal

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): qualify the fresh-volume claim on resume after removal

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): write the roles lines as prose, not a concatenation

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): an address that resolves to no box exits 4

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): close the arch consistency findings on the box specs

Type constraints are checked against the expanded spec and a derived
type may not loosen its parent (BOX-061, BOX-156). The flat egress keys
the arch examples write get one release of hint-and-canonicalise grace
(BOX-157). Rename refuses a held or reserved name (BOX-010) and name
resolution is per host with a cross-host ambiguity refusal (BOX-005).
Volumes drop the read-only mode until object storage lands and the
expanded list is deduplicated by name (BVOL-014). OOM kills end the
box per on_oom (BRES-017, BRES-018). min shell --new takes a suffixed
name (BCLI-065), min session run is a usage error (BCLI-066), the
attached exec id goes to stderr and min box show lists live execs
(BCLI-067). BCLI-041 and BCLI-050 duplicated the alias table and are
removed; BOX-021 drops the no-op stopped selector.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): settle the BRES split with the guest-memory epic

BRES owns admission, the memory limit write, its read-only surface and
exec-join (BRES-004 to BRES-009); inbox#698 keeps the guest size, swap,
the cgroup2 mount and daemon reserve, pressure warnings, the shell
banner and the min ls headroom line. Its S3b clamp rule gives way to
BRES-004/005's refusal with figures. Closes the two clarification
markers that named the overlap.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): move the resources spec to inbox#698

Resources now belong to gominimal/inbox#698, which will get a fresh
BRES spec. BOX and BCLI cite that spec by id without requirement
numbers.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): move BVOL and BCLI to their own PRs

The volumes and CLI specs now land separately (docs/spec-box-volumes and
docs/spec-box-cli) so the BOX model spec is reviewed on its own; both
files are byte-identical on their new branches.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): date the BOX spec to its last revision

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): pin the BOX spec's arch link to a commit

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): align BOX-011 with BOX-154 and split BOX-152's event fields

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): apply the BOX arch-conformance review decisions

Map the projection onto Gatehouse 6.3.2's field names with the defaults
filled before canonicalisation and a base64url digest; scope BOX-001's
host-side minting to the box_id; add the daemon's admission constraint
check (BOX-160), record listing and reading (BOX-158, BOX-159) for the
first slice, and per-value provenance (BOX-161); state the exec
contract, every process in the box, and BOX-040's triggers; raise
BOX-001 and BOX-072 to T1 and justify the T0 security requirements;
name owners for attribute rules, runtime spec change, org types and
the unenforced sections, which now warn at creation.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* docs(specs): limit BOX-160's admission check to the built-in root

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* docs(specs): drop the daily shortcuts from BOX's grammar non-goal

BCLI no longer specifies min shell, min run, min attach or min ls; they
are UX work layered on the grammar, so the non-goal names the long forms
and the type nouns only.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): credit the OOM end to BRES and cite the DNS reading once

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): re-transcribe BOX's resume and task-run stories

The epic now names min session attach, min box resume and min task run
in S3 and S4 instead of the daily shortcuts.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): spell out BOX id ranges that span unused numbers

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): renumber the BOX spec to 29, clear of gominimal#1586 and gominimal#1988

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): settle BOX's first-slice type, parent and event reads

The first slice records the type from the creating verb. A box created
from outside any box has no parent. Events carry box, parent, timestamp
and type, and BOX-162 reads the full retained stream and follows it.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): record BOX's project root and bound exec to running boxes

A box records its project root, which listing and reading return. An
exec into a box not running is refused with exit 2, runs under the
box's ceilings, and a detached exec closes stdin. Open questions cite
gominimal/arch#112 (prune --stopped) and gominimal#113 (override layer).

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): limit BOX expansion to sessions and tasks; log from start

BOX-046 and BOX-063 expand only session and task entries and refuse the
other four built-in types with exit 3 naming gominimal/inbox#678.
BOX-155 logs a box's output from its start, attached or not.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): tabulate BOX-011's end data and tidy BOX's minor findings

BOX-011's end data and BOX-076's added keys become tables. Timeout and
exec client loss end with SIGTERM, a wait, then SIGKILL. The network
non-goal points at Design reasoning, and the VM host is local-minvmd0.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): state BOX-001's type property for both creation paths

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): let a BOX exec carry its own timeout

A BOX-149 sub-bullet ends an exec at its own timeout with BOX-150's
sequence, records exec_exited with reason timeout, and keeps the box
running. Design reasoning and the arch-gap open question record it.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): date BOX to 2026-10-06 and mark O3 as moved to BCLI

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): cite gominimal/arch#114 for BOX's per-exec timeout gap

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): apply msample's five BOX findings

BOX-063 refuses the four excluded types per entry, and BOX-145's vectors
are the arch example's session and task entries. BOX-163 names a box at
creation and refuses a running holder with exit 2 (gominimal/arch#122).
Project file rules are left out like secret-store rules (arch#123).
BOX-164 puts the record and log out of the box's reach. Expansion writes
store references' upstream and inject into the spec for the projection.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): scope BOX-010's property to successful renames

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): cite BOX-151 for exec timeouts; add store rules to parity

The exec-timeout sub-bullet cites BOX-151, which owns the end sequence.
BOX-065 and BOX-142 take the client's [secret-store-rules] set as an
input, since expansion now resolves store references from it.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

* docs(specs): name the boxes crate in BOX's verify commands

The sessions crate is being renamed to boxes before BOX is implemented,
so that the crate holding the box domain types says box. Point BOX's ten
`cargo nextest run -p sessions` checks at `-p boxes`. The test names are
unchanged.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CdRDynXbYoKR6dByN13KsD

* docs(specs): re-pin BOX to arch 823f45f and adopt its rulings

Re-pin the architecture link to gominimal/arch 823f45f, where every
open question citing arch#97, gominimal#98, gominimal#99, gominimal#112, gominimal#113, gominimal#114 and gominimal#123 is
merged, and turn those questions into citations.

- BOX-163: refuse a held name only for a creation that asks for no
  fresh instance; a fresh instance is named <name>-<n> (arch#117).
- BOX-071: project egress.deny_subnets as network.egress_deny_subnets
  (Gatehouse v1.26).
- BOX-002 and the id-mint invariant: scoped to un-enrolled VM hosts;
  the STS mints on enrolled nodes (Gatehouse v1.27).
- BOX-013 states the 10 s default grace; BOX-025's name refusal is
  exit 2 (arch#97 row 2).
- BOX-165: the implicit [sessions.default] entry (arch#124), marked
  implicit by BOX-161 and covered by BOX-145's vectors.

Three open questions remain: the NET/GWI reading (gominimal#2041),
[params] delivery (arch#100) and exec_enabled, still proposed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CdRDynXbYoKR6dByN13KsD

* docs(specs): move NET's sentences back to its Non-goals bullet

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CdRDynXbYoKR6dByN13KsD

---------

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants

0