complete-xdg-worker-sandbox

Complete XDG external graph-state migration and hard worker sandbox

Metadata

Statusfailed
Assignedagent-962
Agent identity02e879681e52e0a384106169be043416c4d946e850ab26b2269c57681b52a6e7
Created2026-08-02T06:54:07.997549456+00:00
Started2026-08-02T07:44:37.890680895+00:00
Failure reasonPi exited without a policy-valid continuation authorization

Description

Description

Follow the attempt-capability broker vertical slice by moving durable graph state to an XDG state root keyed by graph identity and implementing an actually-probed Linux mount/container sandbox. Project-local .wg becomes an operator locator only. Include backup-first byte-preserving migration and rollback. Implement directly — do not decompose further.

Validation

  • Failing migration digest/rollback tests written first
  • Linux candidate smoke proves canonical control and project Git stores are unreadable through path guessing, proc, symlink, bind, and sibling worktrees
  • Enforced vs degraded status is based on a child-side visibility probe and never environment omission
  • cargo fmt --check, cargo check, cargo clippy, cargo test pass

Depends on

Required by

Log