Repository navigation
0.8.0-alpha.15: install/update closure, Local AI fixes, Browser on Mac and Jetson - #343
Merged
Merged
Conversation
Keep the ownership-pipe writer in Runtime and forward its verified reader through Browser launchers. Reuse the update-controller pipe contract for VM, hosted, native and proof helpers, and flush the crosvm guest before VM termination. Verify parent loss for TERM, INT and KILL through the real helper spawn path, Runtime provider shutdown, and guest flush ordering. Targeted Rust, Node, product-data and formatting checks pass. Full control-socket and installed VM journeys require operator proof outside the sandbox.
…nux launches engines
…ocket length limit
Preserve the read-only seed while giving the owned VZ launch disk private write permissions before guest overlays. Recreate partial clone output before the copy fallback. Add a seed mode, inode and write isolation regression.
Retain Engine obligations when its owner is unavailable or its receipt is incomplete. Preserve partial native evidence across control-service reconciliation and restart. Add bound receipt, pending ownership, replacement/reset refusal and partial absence regressions. Validation: control-service settlement smoke, product-data/public-copy checks, Rust format checks and diff check pass. Compiled Rust and installed journey proof remain pending.
Acquire the existing profile sidecar lease before checking Runtime ownership. Retain trusted root/profile directory descriptors, reject linked or replaced profile paths, and keep the lease in the blocking unlink worker through cancellation. Preserve scoped Reset receipts and missing-disk idempotence. Validation: independent Mac/Linux source review, workspace formatting and diff check pass. Writer, link, replacement and cancellation regressions are prepared; compiled and installed proof remain pending.
Keep the single startup result inline and preserve all tested handle transfers. The scoped Clippy expectation documents its bounded use. Validation: independent usage and ownership review; executable source is byte-identical after removing the attribute.
Pass the validated Engine receipt into Runtime terminal retirement so first remote Close can persist exact cleanup proof and safely release its owner. Preserve native cleanup validation, authority checks and replay ordering. Verification: the cached prior signed Carrier case failed in 0.92 seconds; both exact signed Carrier and remote cleanup/replay/late-input tests pass after one targeted compile. Independent receipt and call-site review passed. Whitespace, workspace formatting and product-data checks pass.
Use an atomic sequence and exclusive directory creation so parallel tests cannot adopt or remove another fixture. Add a forced-collision regression that preserves the existing owner.
Verify the exact bytes consumed by tar for each payload before immutable publication. Keep source checks and ownership-aware publication cleanup. Verification: python3 -B scripts/package-browser-vm-image-test.py -v (7 passed); git diff --cached --check; independent producer review passed.
Validate every selected source before publishing helpers, retain owned output identity during cleanup, and require explicit handoff from native producers. Release wrappers use the managed Node component. Verification: python3 -B scripts/browser-host-release-test.py -v (20 passed); git diff --cached --check; independent admission and cleanup reviews passed. Complete role integration remains with #217 and #89.
…ps Browser profiles
…n UDP 4433 message
…s, open Carrier fetch limit
…r recovery under Added
…onsistent version examples
…t behaviour, one profile check, hung tests fail
…y now import release-platform-input.py loads release-platforms.json and imports the signer's component derivation; the fixture source trees copied a fixed script list without them, so prepare-release-platform-test failed 16 of 25 and release-platform-input-test failed its publisher cases.
scripts/test-source-gate.sh owns the fast source checks CI source-gate runs (product data, pre-push gate behaviour, product UI smokes, release artifact source proofs). CI steps call its sections under the same step names; the local pre-push gate runs it after test-behaviour.sh for every push instead of a path-selected subset, so these failures show locally before CI.
…rce changed (CI parity)
… first; ignore /output/
This was referenced Oct 13, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Release train for 0.8.0-alpha.15. Release notes:
elastos/CHANGELOG.mdsection [0.8.0-alpha.15].Closes the install/update remediation (#89 Remaining list): #110, #156, #312, #313, #314, #315, #317, #320, #321, #325, #329 and the security-advisory fixes. Also: Local AI fixes (#84: Qwen restart memory, memory check, resume after a read error, model names, first use), Browser on Apple Silicon Mac and Jetson with review fixes (#87, #217; was PR #307), Browser hidden where it cannot run, Linux Carrier sends one UDP datagram per call (#139 root cause), Carrier read bounds, Recovery Kit owner recovery (#88), uninstall, CLI clean-up, CI Linux update test.
Every branch passed an independent model review; the pre-push gate (now running CI's fast checks) and a Linux full check ran before this push. Failure record and guards: #319.