wip(route): iproute2 route driver design note (S7B) - #73
Merged
Merged
Conversation
Add agent/driver with the ProbeResult type, the Prober interface, shared AF-PROBE reason codes, validation bounds, and a deterministic SHA-256 digest. A ProbeResult is evidence produced by driver code on the node; it is never accepted from a caller, plan, manifest file, or the network. The digest layout is pinned by test so a layout change cannot silently re-identify stored manifests and receipts. This file is the single cross-lane contract for the capability-discovery, driver-contract, and host-driver lanes; it is frozen at schema version 1.
…ion, memory reference driver
…ct tests, memory driver conformance
…ecovery statements
…rvation floor, store/journal conformance runners, journal compaction
…action, conformance runners
Incomplete: whole adapters/route/iproute2 package (runner, model, driver, tests), conformance, netns proof, mutations. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
AetherAI3
marked this pull request as ready for review
September 21, 2026 23:26
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
DRAFT / WIP. Stacked on #64 (
lane/s5-driver@ 9717079); will be rebased once #64 merges.Outcome
Lane S7B stopped by A0 before implementation. Only
docs/driver-route.md(design note) is committed.What changed
docs/driver-route.md: design decisions foradapters/route/iproute2verified in a rootless netns (trustedippaths, per-family JSON capture commands, table 7301 + rule pref 7301 +proto 250ownership marker,ip -batch -stdin mutation, conflict/recovery-loss rules, verify viaroute get).Safety boundary
No Go code, no host mutation; all probing done inside
unshare -rn.Verification
None applicable (docs only).
Not done
Entire
adapters/route/iproute2package, conformance, netns proof, tamper/lost-process tests, mutations.🤖 Generated with Claude Code