amadan
Home 6143a83 implements an inert startup reader using exact launchctx fb577f96. Real subprocess race tests passed, including valid transport, altered/oversized inputs, selector/image/flags/hash mismatches, expiry, and stalled pipes. It closes startup descriptors before returning and never opens a database. Full make test running. Actual Fable 5.1 review started on frozen Home source plus shared parser extraction; evidence /home/paulca/.cache/oficina-provisioning-20260911/home-startup-review. Platform bounded supervisor merged as bf4c83a after actual Fable approval and exact CI success. No Home command mounting or live provisioning yet.
Bind Home operator startup to private CARLOS launch open
On branch feat-operator-startup
Implement the inert native Linux startup reader required before Home operator database access. Use the shared CARLOS launchctx module so producer/consumer share strict parsing. Verify private fd3 and stdin bounds/deadlines, mode and DB selector, fd4 readonly identity against /proc/self/exe and actual executable SHA256, exact stdin digest, and checked closure of startup descriptors. This component grants no owner/lease/fence authority and mounts no command. Signed Home authorization/configuration, opened database proof and whole worker/consumer review remain separate gates. Align the approved opened-DB contract with the reviewed platform fd4 layout explicitly before mounting; preserve existing sessions and keys.
Fable 5.1 REQUEST_CHANGES on Home6143a83; APPROVE on parser extraction fb577f96. Home must atomically replace consumed fd0/3/4 with readonly /dev/null, so os.Stdin cannot alias a subsequently opened SQLite database after fd0 reuse. Add regular-file context/stdin refusal tests. Preserved full review: /home/paulca/.cache/oficina-provisioning-20260911/home-startup-review/review.json. Fixing the findings before any mounting or merge. This refusal is separate from the already approved/merged platform supervisor.
Fable 5.1 APPROVE for bounded startup alignment/component at 6289db0b2df45206fd91434df1f41c3107531bf6. Both required findings resolved: readonly /dev/null reservations via dup3 prevent fd0 database aliasing, and regular-file context/stdin are refused. Extra default-runtime, post-startup fd reuse, valid-v2 and O_PATH tests pass with race detector. Full gate and exact CI are being completed. Verdict receipt: /home/paulca/.cache/oficina-provisioning-20260911/home-startup-review-r2/review.json. No command/database adapter mounted or deployed; signed configuration/request binding and full native worker authority gates remain. Future adapter must preserve the /dev/null reservations until the database baseline and must exit on early startup refusal.
Full local make test completed successfully at exact6289db0: build, vet, formatting, native tests, Linux ARM64 startup-package build and all configured race tests. Source worktree is clean and pushed; Fable approval is recorded above. Exact Amadan CI remains the final branch check. No merge/deploy or live operator mounting in this Home slice; the signed-request/configuration/DB adapter and whole worker workflow remain outstanding. Stage evidence /home/paulca/.cache/oficina-provisioning-20260911/stage-status.json.
Exact Amadan CI now passed for6289db0b2df45206fd91434df1f41c3107531bf6. This bounded startup component has Fable approval, full local gate and exact remote CI. It remains on its branch for final integration/canary validation; no deployment or live maintenance invocation has occurred. The broader provisioning task is unfinished. Current handoff and stage-status evidence enumerate the worker identity, owner workflow, signed Home binding, checkpoint/checker, resume and restore gates still required.