feat(worker): authorized task home for compartment child requests - #278

Merged

ruby-dlee merged 13 commits into

mainfrom

fm/compartment-task-home

Aug 20, 2026

Commits on Aug 20, 2026

feat(worker): authorized task home for compartment child requests
ruby-dlee
committed
b4d9a8c
feat(spawn): task home split for the compartment child lane
ruby-dlee
committed
7a72a1e
test(worker): authorized task home, local-secondmate golden, and home fence golden
ruby-dlee
committed
d914367
fix(spawn): anchor the controller read on the primary home across the split
ruby-dlee
committed
9126acd
test(spawn): end-to-end compartment child spawn and task home refusal matrix
ruby-dlee
committed
f2d490d
test(worker): pin the task home authorization inside the controller lock hold
ruby-dlee
committed
e012e67
test(worker): prove the home marker is load-bearing against the registry
ruby-dlee
committed
e83e0f3
test(worker): order the load-bearing marker case ahead of the string case
ruby-dlee
committed
95b5848
docs(azure): record the authorized task home and retire the blocked note
ruby-dlee
committed
ce86520
fix(worker): give the compartment child an ordinary exit and read the registry canonically
ruby-dlee
committed
2478ab8
test(worker): complete the marker-rule fixtures so a dropped rule admits
ruby-dlee
committed
b82bba7
test(worker): make the fence and registry cases admit-reds under mutation
ruby-dlee
committed
cacfb96
docs(azure): record the canonical registry read, home rules, and the durable task home
ruby-dlee
committed
197f261