Skip to content

CI only: Windows CI, mutation rows and sandbox docs - #13

Merged
ualtinok merged 4 commits into
integration/windowsfrom
ci/windows-s10
Oct 11, 2026
Merged

ualtinok merged 4 commits into
integration/windowsfrom
ci/windows-s10

Conversation

@basal-alfonso

@basal-alfonso basal-alfonso Bot commented Oct 10, 2026 •

Copy link
Copy Markdown

CI-only draft for native Windows runs of the last Windows slice. Not for merging.


Summary by cubic

Promotes the native Windows CI jobs so Windows mutation controls replay on windows-2022 alongside existing Linux and macOS gates, and fixes Windows-specific mutation targets and fixture isolation for that replay.

  • Expands ~ roots in manifests using the process token's loaded profile instead of environment variables.
  • Moves the Windows confinement wire format into a variant-specific module and upgrades cortexkit-log to 0.3.5.
  • Replaces the obsolete "Windows confinement not provided" sandbox page claim with assertions for the implemented guarantees.
  • Uses the worker harness for confinement unit oracles and the fixed-tag protocol test, captures mklink output, and isolates plain Git positive controls with owned empty config files and temp space, removing the fsmonitor override so the positive-control hook stays reachable.

Written for commit 8317c46. Summary will update on new commits.

View guided diff Turn on auto-fix

Promote both native Windows jobs without dropping existing Linux or macOS gates. Replay Windows controls on windows-2022 and retain indexed mutation witnesses alongside runner reports.

Expand manifest tilde roots using the process token's loaded profile, resolving Userenv dynamically from System32 in the parent. Test hostile USERPROFILE in a subprocess. Upgrade only cortexkit-log to 0.3.5, adding its already-resolved cortexkit-lease edge.

The old sandbox-page test required the obsolete claim that Windows confinement was unavailable. Replace that claim with assertions for the implemented guarantees, residual inventory, non-claims and placement requirements; retain every Linux/macOS limit assertion. Move the Windows wire format into a variant-specific module without changing its portable encoding so the tag control can run on Windows.
@socket-security

socket-security Bot commented Oct 11, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedcortexkit-log@​0.3.3 ⏵ 0.3.598100100100100

View full report

Use the worker library harness for its confinement unit oracles and the existing fixed-tag protocol test. Capture mklink output so native fixture text cannot corrupt mutation runner libtest parsing.

Keep plain Git positive controls free of hardened arguments while giving them owned empty configuration files and isolated environments. This removes the NUL config device rejected by the Windows-2022 Git build without weakening the controls.
Plain Git controls need temp files for external diff and text conversion. Give them the owned fixture directory as TMP/TEMP/TMPDIR without broadening the production environment.

Setting core.fsmonitor=true switches to Git's built-in daemon and still suppresses the repository hook, so it is not a removal of the guard. Remove the -c false override itself so the positive-control hook becomes reachable under the mutant.
@basal-alfonso

basal-alfonso Bot commented Oct 11, 2026

Copy link
Copy Markdown
Author

Closing: its contents are merged on the integration/windows branch.

@ualtinok
ualtinok merged commit ea5adca into integration/windows Oct 11, 2026
14 checks passed
@ualtinok
ualtinok deleted the ci/windows-s10 branch October 11, 2026 06:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant