Repository navigation
Codex sandbox cannot read scratch host-tests.log (sealed log → reviewEvidence) #2519
Description
Problem
Codex sandbox cannot read scratch host-tests.log during host-test / Reviewer flow. Reviewer then lacks the host-test evidence unless something else embeds it.
Ask
Either:
- Make scratch readable to the Codex sandbox, or
- Put a ≤2MiB sealed log into
reviewEvidenceso Reviewer does not depend on sandbox reading scratch.
Workaround (current)
PA embedded the sealed log inline for this round. Does not block the current OpenToday main task.
Context
- Observed while shipping OpenToday PR #6 (
mergeCommitSha=f276738a). - Related tracking: #2483 (control-plane self-heal gaps); this is a separate product/sandbox mount / evidence-plumbing item.
- Host ops / restart not required.
Requested in room by @Flybot-项目代理; opened by flybot运维 for assignee Yi Zhang (zy95-12).
Metadata
Metadata
Assignees
Labels
No labels
Activity
Deliver sealed host-test evidence inline to SDK Reviewers (#2525)
zy95-12 commentedon Nov 5, 2026
Written-by: Codex
已通过 #2525 合入
delivery/ai-centric-development-service，合入提交e11ba3b04b3c2aed8c2554438218773c37e8492c。已 fetch 核验：合入文件树与最终验证 head42d28f92a4936cef6da6e1d057afcd43a42d569b完全一致。采用本单允许的 inline evidence 方案：SDK Reviewer 直接收到完整、哈希校验后的 UTF-8 宿主测试日志，不再依赖 scratch 上传/读取。保留 2 MiB artifact 上限、当前候选/Session/授权和既有执行上下文检查；超出配置的上下文预算在 SDK 输入前拒绝，不截断证据或提高预算。持久 worker 记录只保存来源元数据。长期记忆、历史原文归档、架构/角色文档、changelog、OpenAPI 源码指纹及生成补丁同步。
验证：最终 head 全量
TZ=UTC setpriv --bounding-set=-dac_override,-dac_read_search npm run verify5,088 passed / 0 failed / 0 skipped，含8个真实隔离DSH场景；同 head Node24/tests-ok run42019929932 成功。14条证据回归、2条实际子进程派发及10条API检查通过。实际安装的 pinned Codex SDK/CLI 以本地 Responses fixture 验证接收日志、接收端无日志文件、候选仍只读；不是付费模型或现场验收。证据 helper 覆盖100%行/100%函数/93.55%分支；未覆盖继承的缺 Attempt map/缺 hash 默认值分支，不宣称整体100%。旧版缺 inline 通道的回归先失败、修复后通过。边界：隔离 hidden-scratch 读取本身通过，因此没有把现场故障宣称为通用沙箱权限根因。本次完成本单允许的替代交付通道；未部署、重启或修改 OpenToday 现场任务/资源/凭据，未声称现场回放完成。