Repository navigation
Merge remote-tracking branch 'origin/main' into agent/2938-a-native-h…
PASS
Baseline. This re-reviews 353695ae against the PASS on 107a601d (this PR), on the same arch commit 7a86ec7b. I checked these facts. since.diff equals git diff 107a601d 353695ae. pr.diff equals git diff 5ac253db 353695ae, and 5ac253db (#2961) is the merge base. The merges 94b1adea and 353695ae are clean (git diff-tree --cc is empty), so the main hunks in the compare are not ruled here. The compare has one branch commit, 48b72706.
Governs: specs/networking/deployment-and-egress-gateway.md §7.1 Lanes, line 253. A native host_ip box is a box on a native node (minimald on the host OS with no VM). It shares the host's network namespace, the [host-exposures] table is not applied, and min session policy says so rather than listing exposures. The checkout has no arch-map.md.
Ruling. On 107a601d the row keyed on fabric.is_none(), and the agent's own note said a future caller could print it on a VM-backed host. 48b72706 removes that proxy. format_policy_on_host takes an explicit native_host, and cmd_session_policy sets it from daemon_host_kind(global) == paths::HostKind::Minimald. HostKind has two variants, Minimald (native, DM2) and Minvmd (in the microVM, DM1), so the key is exactly the design's native node. format_policy keeps its signature and passes false. rg finds no production caller of format_policy outside tests, so no other surface loses the row. The test now pins the text on a native host and pins its absence on a non-native host with and without a fabric, and on an own-address box. The placement in crates/minimal/src/cmd/boxes/policy.rs and session.rs stays in the CLI layer, as in the baseline. No departure from precedent.
write_policy_json) still carries no field for this fact. Line 253 names only what min session policy says, so that is not a deviation.
Ruled at 353695a against gominimal/arch@7a86ec7bb3c0 by claude-opus-5-5; arch_rulings 857, job 72c4f15b-7a83-4abc-8084-af84f83652a0.