carlos / platform Public

design-sidecar-isolation

docs/superpowers/plans/2026-10-24-sidecar-isolation.md +488 −0
docs/superpowers/plans/2026-10-24-sidecar-isolation.md

Loading diff…

docs/superpowers/specs/2026-10-24-sidecar-isolation-design.md +1570 −0
docs/superpowers/specs/2026-10-24-sidecar-isolation-design.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-SIDECAR-ISOLATION-R1.md +87 −0
docs/superpowers/specs/CODEX-FINDINGS-SIDECAR-ISOLATION-R1.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-SIDECAR-ISOLATION-R2.md +95 −0
docs/superpowers/specs/CODEX-FINDINGS-SIDECAR-ISOLATION-R2.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-SIDECAR-ISOLATION-R3.md +98 −0
docs/superpowers/specs/CODEX-FINDINGS-SIDECAR-ISOLATION-R3.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-SIDECAR-ISOLATION-R4.md +63 −0
docs/superpowers/specs/CODEX-FINDINGS-SIDECAR-ISOLATION-R4.md

Loading diff…

docs/superpowers/specs/CODEX-REVIEW-BRIEF-SIDECAR-ISOLATION.md +162 −0
docs/superpowers/specs/CODEX-REVIEW-BRIEF-SIDECAR-ISOLATION.md

Loading diff…

implementation/census-claims-sidecar-isolation.txt +36 −0
implementation/census-claims-sidecar-isolation.txt

Loading diff…

internal/activator/activator.go +165 −13
internal/activator/activator.go

Loading diff…

internal/activator/activator_test.go +25 −3
internal/activator/activator_test.go

Loading diff…

internal/activator/backend_exec.go +146 −20
internal/activator/backend_exec.go

Loading diff…

internal/activator/backend_unit.go +34 −7
internal/activator/backend_unit.go

Loading diff…

internal/activator/containment.go +30 −17
internal/activator/containment.go

Loading diff…

internal/activator/control.go +36 −6
internal/activator/control.go

Loading diff…

internal/activator/flatexec.go +101 −0
internal/activator/flatexec.go

Loading diff…

internal/activator/flatexec_copy.go +12 −0
internal/activator/flatexec_copy.go

Loading diff…

internal/activator/flatexec_test.go +302 −0
internal/activator/flatexec_test.go

Loading diff…

internal/activator/layout.go +24 −1
internal/activator/layout.go

Loading diff…

internal/activator/layout_test.go +130 −0
internal/activator/layout_test.go

Loading diff…

internal/activator/maintenance.go +20 −11
internal/activator/maintenance.go

Loading diff…

internal/activator/opset.go +44 −6
internal/activator/opset.go

Loading diff…

internal/activator/prepare.go +123 −19
internal/activator/prepare.go

Loading diff…

internal/activator/prepare_test.go +441 −0
internal/activator/prepare_test.go

Loading diff…

internal/activator/spawn_enumeration_test.go +191 −0
internal/activator/spawn_enumeration_test.go

Loading diff…

internal/activator/swap.go +5 −2
internal/activator/swap.go

Loading diff…

internal/activator/unitproc.go +60 −5
internal/activator/unitproc.go

Loading diff…

internal/activator/unitproc_gen_test.go +2 −2
internal/activator/unitproc_gen_test.go

Loading diff…

internal/activator/unitproc_test.go +19 −1
internal/activator/unitproc_test.go

Loading diff…

internal/activator/worker_fenced_wake_test.go +178 −0
internal/activator/worker_fenced_wake_test.go

Loading diff…

internal/activator/worker_gen_test.go +0 −19
internal/activator/worker_gen_test.go

Loading diff…

internal/activator/worker_nested_test.go +1311 −0
internal/activator/worker_nested_test.go

Loading diff…

internal/activator/worker_stub_test.go +87 −0
internal/activator/worker_stub_test.go

Loading diff…

internal/activator/workerswap.go +36 −0
internal/activator/workerswap.go

Loading diff…

internal/agentsock/agentsock.go +172 −32
internal/agentsock/agentsock.go

Loading diff…

internal/agentsock/agentsock_test.go +331 −0
internal/agentsock/agentsock_test.go

Loading diff…

internal/appconfig/syncexec.go +11 −3
internal/appconfig/syncexec.go

Loading diff…

internal/appconfig/syncexec_test.go +83 −0
internal/appconfig/syncexec_test.go

Loading diff…

internal/console/apistatusinstances_test.go +34 −0
internal/console/apistatusinstances_test.go

Loading diff…

internal/console/apistatuslayout.go +30 −8
internal/console/apistatuslayout.go

Loading diff…

internal/console/apistatuslayout_test.go +68 −0
internal/console/apistatuslayout_test.go

Loading diff…

internal/console/layoutguard.go +54 −12
internal/console/layoutguard.go

Loading diff…

internal/console/layoutguard_copy.go +15 −0
internal/console/layoutguard_copy.go

Loading diff…

internal/console/layoutguard_test.go +90 −1
internal/console/layoutguard_test.go

Loading diff…

internal/host/agent.go +41 −1
internal/host/agent.go

Loading diff…

internal/host/agent_layout_test.go +105 −11
internal/host/agent_layout_test.go

Loading diff…

internal/host/claimunit.go +55 −34
internal/host/claimunit.go

Loading diff…

internal/host/claimunit_test.go +22 −0
internal/host/claimunit_test.go

Loading diff…

internal/host/flatexec.go +345 −0
internal/host/flatexec.go

Loading diff…

internal/host/flatexec_copy.go +9 −0
internal/host/flatexec_copy.go

Loading diff…

internal/host/flatexec_nudge_linux_test.go +159 −0
internal/host/flatexec_nudge_linux_test.go

Loading diff…

internal/host/flatexec_test.go +396 −0
internal/host/flatexec_test.go

Loading diff…

internal/host/host_test.go +1 −0
internal/host/host_test.go

Loading diff…

internal/host/layoutleg.go +53 −28
internal/host/layoutleg.go

Loading diff…

internal/host/systemapply.go +107 −11
internal/host/systemapply.go

Loading diff…

internal/host/systemapply_test.go +249 −5
internal/host/systemapply_test.go

Loading diff…

internal/host/units/carlos-instance-worker@.service +183 −0
internal/host/units/carlos-instance-worker@.service

Loading diff…

internal/host/units_hardening_test.go +2 −1
internal/host/units_hardening_test.go

Loading diff…

internal/host/units_isolation_test.go +86 −2
internal/host/units_isolation_test.go

Loading diff…

internal/host/worker_fenced_wake_test.go +148 −0
internal/host/worker_fenced_wake_test.go

Loading diff…

internal/host/workerguard_copy.go +25 −0
internal/host/workerguard_copy.go

Loading diff…

internal/host/workerready.go +128 −0
internal/host/workerready.go

Loading diff…

internal/host/workerready_test.go +172 −0
internal/host/workerready_test.go

Loading diff…

internal/hostbox/inventoryscope_worker_test.go +51 −0
internal/hostbox/inventoryscope_worker_test.go

Loading diff…

internal/hostenv/hostenv.go +9 −0
internal/hostenv/hostenv.go

Loading diff…

internal/hostenv/hostenv_test.go +39 −0
internal/hostenv/hostenv_test.go

Loading diff…

internal/instancectl/legacystart.go +64 −46
internal/instancectl/legacystart.go

Loading diff…

internal/instancectl/legacystart_live_test.go +28 −10
internal/instancectl/legacystart_live_test.go

Loading diff…

internal/instancectl/legacystart_test.go +89 −8
internal/instancectl/legacystart_test.go

Loading diff…

internal/instancectl/names.go +16 −7
internal/instancectl/names.go

Loading diff…

internal/instancectl/names_test.go +43 −3
internal/instancectl/names_test.go

Loading diff…

internal/instancectl/server.go +50 −37
internal/instancectl/server.go

Loading diff…

internal/instancectl/server_test.go +86 −0
internal/instancectl/server_test.go

Loading diff…

internal/instancectl/stagedexe_linux_test.go +87 −0
internal/instancectl/stagedexe_linux_test.go

Loading diff…

internal/instanceexec/exec.go +2 −2
internal/instanceexec/exec.go

Loading diff…

internal/instanceexec/exec_test.go +30 −0
internal/instanceexec/exec_test.go

Loading diff…

internal/instanceexec/exit.go +2 −2
internal/instanceexec/exit.go

Loading diff…

internal/instanceexec/exit_test.go +11 −0
internal/instanceexec/exit_test.go

Loading diff…

internal/layout/journal.go +23 −5
internal/layout/journal.go

Loading diff…

internal/layout/journal_test.go +13 −11
internal/layout/journal_test.go

Loading diff…

internal/layout/layout_copy.go +9 −0
internal/layout/layout_copy.go

Loading diff…

internal/layout/pass.go +114 −17
internal/layout/pass.go

Loading diff…

internal/layout/pass_worker_test.go +994 −0
internal/layout/pass_worker_test.go

Loading diff…

internal/layout/plan.go +127 −1
internal/layout/plan.go

Loading diff…

internal/layout/replicator.go +450 −0
internal/layout/replicator.go

Loading diff…

internal/layout/replicator_test.go +382 −0
internal/layout/replicator_test.go

Loading diff…

internal/ops/hibernate_verify.go +8 −7
internal/ops/hibernate_verify.go

Loading diff…

internal/ops/hibernate_verify_test.go +24 −0
internal/ops/hibernate_verify_test.go

Loading diff…

internal/ops/litestream.go +55 −5
internal/ops/litestream.go

Loading diff…

internal/ops/ops.go +15 −2
internal/ops/ops.go

Loading diff…

internal/ops/ops_test.go +143 −0
internal/ops/ops_test.go

Loading diff…

internal/provision/reconcile.go +22 −0
internal/provision/reconcile.go

Loading diff…

internal/provision/sidecar_reconcile.go +37 −8
internal/provision/sidecar_reconcile.go

Loading diff…

internal/provision/sidecar_reconcile_test.go +117 −0
internal/provision/sidecar_reconcile_test.go

Loading diff…

internal/release/layoutintent.go +19 −0
internal/release/layoutintent.go

Loading diff…

internal/release/layoutintent_test.go +21 −0
internal/release/layoutintent_test.go

Loading diff…

internal/sim/engines/calls_test.go +8 −4
internal/sim/engines/calls_test.go

Loading diff…

internal/sim/engines/witness_test.go +44 −0
internal/sim/engines/witness_test.go

Loading diff…

internal/status/contract_test.go +39 −4
internal/status/contract_test.go

Loading diff…

internal/status/snapshot.go +79 −1
internal/status/snapshot.go

Loading diff…

status_instances.go +173 −4
status_instances.go

Loading diff…

status_layout_copy.go +62 −0
status_layout_copy.go

Loading diff…

status_layout_flatexec_test.go +176 −0
status_layout_flatexec_test.go

Loading diff…