feat: run a brokered Grok training slot in one container - #33
Merged
Merged
Conversation
…the Grok CLI from it
…Daimon Grok agents
…nd warn on declared skills
…s sandbox profile renderer
…es with a non-empty deny list and service.json v2
…ile and preflight host user namespaces
…l, and estimated usage fields
…deduped usage accounting
…er resource path the container provisions
…orker config bytes
# Conflicts: # package.json # runtime-images/training/Dockerfile # src/compiler/training/preparation/image.ts
… paths the broker contract names
…e training recipe
…around mount points
…e real preparation
…on runtime home rule
# Conflicts: # src/compiler/containerDaimonGrokWorkerProvisioning.ts
…gid spill directory
…o the training slot
…-tail diagnostic window
… worker stdout pipe
…g and launcher drain bound
…imon runtime identity
… a slot that cannot prove it
…e the first trial
… each route's denial mechanism
…d-inputs attestation
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
…receipt code enum
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds the training-container v3 path: a brokered Grok slot, its root supervisor, and the bindings that stop a run using the wrong code or reading its own test set.
Depends on noopolis/daimon#29. This branch vendors Daimon's contract manifest
sha256:c672ed47…, which exists only on that branch. Merging this first would leavemainunable to compile or attest any Daimon organization.What this adds
grok-slot-preflight.v2receipt, now run at container start rather than only on recycleThe sealed test set was reachable
Proven, not theorised: as uid 2200, three of four routes read the held-out answer key, including a namespace rebind of the dataset's own mount that no bubblewrap deny mask can answer.
/run/training/inputsis now baked0:2000 0750into the image on a read-only rootfs — asserted, never set, so an image that did not bake it is refused. All routes denied; the evaluator still reads its datasets. Provisioning attacks its own boundary before any trial and refuses on no verdict, with the denying layer named.Known and documented:
/run/training/outputis not sealed the same way, so a subject may still reach judge verdicts. Closing it changes a pathlaunch.v2names and is left for a follow-up.Verification
Typecheck, build, unit suite 454 files / 3806 tests with coverage thresholds met, scripts 38/38, and
check-boundaries.mjsclean.🤖 Generated with Claude Code