design-sidecar-isolation
docs/superpowers/plans/2026-10-24-sidecar-isolation.md
+488 −0
docs/superpowers/plans/2026-10-24-sidecar-isolation.mdLoading diff…
docs/superpowers/specs/2026-10-24-sidecar-isolation-design.md
+1570 −0
docs/superpowers/specs/2026-10-24-sidecar-isolation-design.mdLoading diff…
docs/superpowers/specs/CODEX-FINDINGS-SIDECAR-ISOLATION-R1.md
+87 −0
docs/superpowers/specs/CODEX-FINDINGS-SIDECAR-ISOLATION-R1.mdLoading diff…
docs/superpowers/specs/CODEX-FINDINGS-SIDECAR-ISOLATION-R2.md
+95 −0
docs/superpowers/specs/CODEX-FINDINGS-SIDECAR-ISOLATION-R2.mdLoading diff…
docs/superpowers/specs/CODEX-FINDINGS-SIDECAR-ISOLATION-R3.md
+98 −0
docs/superpowers/specs/CODEX-FINDINGS-SIDECAR-ISOLATION-R3.mdLoading diff…
docs/superpowers/specs/CODEX-FINDINGS-SIDECAR-ISOLATION-R4.md
+63 −0
docs/superpowers/specs/CODEX-FINDINGS-SIDECAR-ISOLATION-R4.mdLoading diff…
docs/superpowers/specs/CODEX-REVIEW-BRIEF-SIDECAR-ISOLATION.md
+162 −0
docs/superpowers/specs/CODEX-REVIEW-BRIEF-SIDECAR-ISOLATION.mdLoading diff…
implementation/census-claims-sidecar-isolation.txt
+36 −0
implementation/census-claims-sidecar-isolation.txtLoading diff…
internal/activator/activator.go
+165 −13
internal/activator/activator.goLoading diff…
internal/activator/activator_test.go
+25 −3
internal/activator/activator_test.goLoading diff…
internal/activator/backend_exec.go
+146 −20
internal/activator/backend_exec.goLoading diff…
internal/activator/backend_unit.go
+34 −7
internal/activator/backend_unit.goLoading diff…
internal/activator/containment.go
+30 −17
internal/activator/containment.goLoading diff…
internal/activator/control.go
+36 −6
internal/activator/control.goLoading diff…
internal/activator/flatexec.go
+101 −0
internal/activator/flatexec.goLoading diff…
internal/activator/flatexec_copy.go
+12 −0
internal/activator/flatexec_copy.goLoading diff…
internal/activator/flatexec_test.go
+302 −0
internal/activator/flatexec_test.goLoading diff…
internal/activator/layout.go
+24 −1
internal/activator/layout.goLoading diff…
internal/activator/layout_test.go
+130 −0
internal/activator/layout_test.goLoading diff…
internal/activator/maintenance.go
+20 −11
internal/activator/maintenance.goLoading diff…
internal/activator/opset.go
+44 −6
internal/activator/opset.goLoading diff…
internal/activator/prepare.go
+123 −19
internal/activator/prepare.goLoading diff…
internal/activator/prepare_test.go
+441 −0
internal/activator/prepare_test.goLoading diff…
internal/activator/spawn_enumeration_test.go
+191 −0
internal/activator/spawn_enumeration_test.goLoading diff…
internal/activator/swap.go
+5 −2
internal/activator/swap.goLoading diff…
internal/activator/unitproc.go
+60 −5
internal/activator/unitproc.goLoading diff…
internal/activator/unitproc_gen_test.go
+2 −2
internal/activator/unitproc_gen_test.goLoading diff…
internal/activator/unitproc_test.go
+19 −1
internal/activator/unitproc_test.goLoading diff…
internal/activator/worker_fenced_wake_test.go
+178 −0
internal/activator/worker_fenced_wake_test.goLoading diff…
internal/activator/worker_gen_test.go
+0 −19
internal/activator/worker_gen_test.goLoading diff…
internal/activator/worker_nested_test.go
+1311 −0
internal/activator/worker_nested_test.goLoading diff…
internal/activator/worker_stub_test.go
+87 −0
internal/activator/worker_stub_test.goLoading diff…
internal/activator/workerswap.go
+36 −0
internal/activator/workerswap.goLoading diff…
internal/agentsock/agentsock.go
+172 −32
internal/agentsock/agentsock.goLoading diff…
internal/agentsock/agentsock_test.go
+331 −0
internal/agentsock/agentsock_test.goLoading diff…
internal/appconfig/syncexec.go
+11 −3
internal/appconfig/syncexec.goLoading diff…
internal/appconfig/syncexec_test.go
+83 −0
internal/appconfig/syncexec_test.goLoading diff…
internal/console/apistatusinstances_test.go
+34 −0
internal/console/apistatusinstances_test.goLoading diff…
internal/console/apistatuslayout.go
+30 −8
internal/console/apistatuslayout.goLoading diff…
internal/console/apistatuslayout_test.go
+68 −0
internal/console/apistatuslayout_test.goLoading diff…
internal/console/layoutguard.go
+54 −12
internal/console/layoutguard.goLoading diff…
internal/console/layoutguard_copy.go
+15 −0
internal/console/layoutguard_copy.goLoading diff…
internal/console/layoutguard_test.go
+90 −1
internal/console/layoutguard_test.goLoading diff…
internal/host/agent.go
+41 −1
internal/host/agent.goLoading diff…
internal/host/agent_layout_test.go
+105 −11
internal/host/agent_layout_test.goLoading diff…
internal/host/claimunit.go
+55 −34
internal/host/claimunit.goLoading diff…
internal/host/claimunit_test.go
+22 −0
internal/host/claimunit_test.goLoading diff…
internal/host/flatexec.go
+345 −0
internal/host/flatexec.goLoading diff…
internal/host/flatexec_copy.go
+9 −0
internal/host/flatexec_copy.goLoading diff…
internal/host/flatexec_nudge_linux_test.go
+159 −0
internal/host/flatexec_nudge_linux_test.goLoading diff…
internal/host/flatexec_test.go
+396 −0
internal/host/flatexec_test.goLoading diff…
internal/host/host_test.go
+1 −0
internal/host/host_test.goLoading diff…
internal/host/layoutleg.go
+53 −28
internal/host/layoutleg.goLoading diff…
internal/host/systemapply.go
+107 −11
internal/host/systemapply.goLoading diff…
internal/host/systemapply_test.go
+249 −5
internal/host/systemapply_test.goLoading diff…
internal/host/units/carlos-instance-worker@.service
+183 −0
internal/host/units/carlos-instance-worker@.serviceLoading diff…
internal/host/units_hardening_test.go
+2 −1
internal/host/units_hardening_test.goLoading diff…
internal/host/units_isolation_test.go
+86 −2
internal/host/units_isolation_test.goLoading diff…
internal/host/worker_fenced_wake_test.go
+148 −0
internal/host/worker_fenced_wake_test.goLoading diff…
internal/host/workerguard_copy.go
+25 −0
internal/host/workerguard_copy.goLoading diff…
internal/host/workerready.go
+128 −0
internal/host/workerready.goLoading diff…
internal/host/workerready_test.go
+172 −0
internal/host/workerready_test.goLoading diff…
internal/hostbox/inventoryscope_worker_test.go
+51 −0
internal/hostbox/inventoryscope_worker_test.goLoading diff…
internal/hostenv/hostenv.go
+9 −0
internal/hostenv/hostenv.goLoading diff…
internal/hostenv/hostenv_test.go
+39 −0
internal/hostenv/hostenv_test.goLoading diff…
internal/instancectl/legacystart.go
+64 −46
internal/instancectl/legacystart.goLoading diff…
internal/instancectl/legacystart_live_test.go
+28 −10
internal/instancectl/legacystart_live_test.goLoading diff…
internal/instancectl/legacystart_test.go
+89 −8
internal/instancectl/legacystart_test.goLoading diff…
internal/instancectl/names.go
+16 −7
internal/instancectl/names.goLoading diff…
internal/instancectl/names_test.go
+43 −3
internal/instancectl/names_test.goLoading diff…
internal/instancectl/server.go
+50 −37
internal/instancectl/server.goLoading diff…
internal/instancectl/server_test.go
+86 −0
internal/instancectl/server_test.goLoading diff…
internal/instancectl/stagedexe_linux_test.go
+87 −0
internal/instancectl/stagedexe_linux_test.goLoading diff…
internal/instanceexec/exec.go
+2 −2
internal/instanceexec/exec.goLoading diff…
internal/instanceexec/exec_test.go
+30 −0
internal/instanceexec/exec_test.goLoading diff…
internal/instanceexec/exit.go
+2 −2
internal/instanceexec/exit.goLoading diff…
internal/instanceexec/exit_test.go
+11 −0
internal/instanceexec/exit_test.goLoading diff…
internal/layout/journal.go
+23 −5
internal/layout/journal.goLoading diff…
internal/layout/journal_test.go
+13 −11
internal/layout/journal_test.goLoading diff…
internal/layout/layout_copy.go
+9 −0
internal/layout/layout_copy.goLoading diff…
internal/layout/pass.go
+114 −17
internal/layout/pass.goLoading diff…
internal/layout/pass_worker_test.go
+994 −0
internal/layout/pass_worker_test.goLoading diff…
internal/layout/plan.go
+127 −1
internal/layout/plan.goLoading diff…
internal/layout/replicator.go
+450 −0
internal/layout/replicator.goLoading diff…
internal/layout/replicator_test.go
+382 −0
internal/layout/replicator_test.goLoading diff…
internal/ops/hibernate_verify.go
+8 −7
internal/ops/hibernate_verify.goLoading diff…
internal/ops/hibernate_verify_test.go
+24 −0
internal/ops/hibernate_verify_test.goLoading diff…
internal/ops/litestream.go
+55 −5
internal/ops/litestream.goLoading diff…
internal/ops/ops.go
+15 −2
internal/ops/ops.goLoading diff…
internal/ops/ops_test.go
+143 −0
internal/ops/ops_test.goLoading diff…
internal/provision/reconcile.go
+22 −0
internal/provision/reconcile.goLoading diff…
internal/provision/sidecar_reconcile.go
+37 −8
internal/provision/sidecar_reconcile.goLoading diff…
internal/provision/sidecar_reconcile_test.go
+117 −0
internal/provision/sidecar_reconcile_test.goLoading diff…
internal/release/layoutintent.go
+19 −0
internal/release/layoutintent.goLoading diff…
internal/release/layoutintent_test.go
+21 −0
internal/release/layoutintent_test.goLoading diff…
internal/sim/engines/calls_test.go
+8 −4
internal/sim/engines/calls_test.goLoading diff…
internal/sim/engines/witness_test.go
+44 −0
internal/sim/engines/witness_test.goLoading diff…
internal/status/contract_test.go
+39 −4
internal/status/contract_test.goLoading diff…
internal/status/snapshot.go
+79 −1
internal/status/snapshot.goLoading diff…
status_instances.go
+173 −4
status_instances.goLoading diff…
status_layout_copy.go
+62 −0
status_layout_copy.goLoading diff…
status_layout_flatexec_test.go
+176 −0
status_layout_flatexec_test.goLoading diff…