docs(reviews): Seatbelt L3 backend run live on a developer Mac#202
Merged
Conversation
Records the first owner-Mac exercise of the Seatbelt kernel proofs on real Apple-Silicon hardware (main @ bacb3b1), post-ADR-0019 / host-shell (#199): - All kernel proofs pass under RUSTFLAGS="-D warnings" + BRIDLE_REQUIRE_SEATBELT=1 — fs/exec/net axes, the ShellTool e2e path, and the ADR 0019 host-shell keystone. Genuinely exercised, not skipped. - The PR#195 net-proxy CI flake did not reproduce (0/40 parallel runs), but the cause is inspection-confirmed: fenced_child_reaches_allowed_via_proxy… is the only loopback-exercising net_proxy test that omits net_test_lock(). One-line fix suggested; issue to follow. Cross-links the full results + downstream adoption plan in newt-agent/docs/testing/seatbelt-live-uat.md. Docs-only; no code on main altered. Co-authored-by: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01UGQ2qe2Z4psJbv5nrg2HX4
… follow-up - Replace the stale "filed as an issue" line with the real issue number (#207), noting the finding is still applicable on main as of 2026-07-06. - Add a Follow-up section pointing to the #205 0.7.0-rc.1 MacBook gate as the fuller re-verification of the Seatbelt line. Docs-only. Co-authored-by: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01UGQ2qe2Z4psJbv5nrg2HX4
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What this is
The first owner-Mac exercise of the Seatbelt L3 kernel proofs on real
Apple-Silicon hardware (
main@bacb3b1), now that ADR 0019 and the host-shellengine (#199) have landed. CI runs these on a GitHub
macos-latestrunner; #199'smacOS mirror test was written for owner-Mac usability testing — this is that run.
Adds one file:
docs/reviews/2026-07-04-seatbelt-live-owner-mac.md.Results
Ran the exact
check-macosCI commands withRUSTFLAGS="-D warnings"andBRIDLE_REQUIRE_SEATBELT=1(so a missingsandbox-exechard-fails rather thanskips — the proofs were genuinely exercised):
interpreter-trampoline + dyld-linking), empty-net + loopback-only, the
net-proxy egress fence, the
ShellToole2e path, and the ADR 0019 host-shellkeystone (
macos_dynamic_construct_runs_but_out_of_scope_write_is_seatbelt_denied).-D warningsclean on Homebrew rustc 1.95;--no-default-features --features host-shellcompiles in isolation.The one finding (test-only, not a product bug)
PR #195's macOS CI leg once failed on
fenced_child_reaches_allowed_via_proxy…("Empty reply from server"). It didnot reproduce here (0/40 parallel runs), but inspection pins the cause: it's
the only loopback-exercising
net_proxytest that omitsnet_test_lock(). Aone-line fix is suggested in the doc; I'll file a separate issue + hold a fix PR
for review.
Docs-only; no code on
mainaltered. Full results + the downstream newtadoption plan:
newt-agent/docs/testing/seatbelt-live-uat.md(companion PR).🤖 Generated with Claude Code
https://claude.ai/code/session_01UGQ2qe2Z4psJbv5nrg2HX4