fix(sandbox): require runner-specific spawn evidence

This commit is contained in:
Hypatia May
2026-08-04 14:47:46 +08:00
parent 0cd1611023
commit 96ba98c99e
14 changed files with 217 additions and 39 deletions
+14
View File
@@ -170,6 +170,20 @@ const SCENARIOS: Scenario[] = [
env: { DSH_PERMISSION_MODE: 'read-only' },
posixOnly: true,
},
// A valid cwd plus a missing provider executable exercises the assembled
// foreground error and background task marker without a platform runner.
{
name: 'missing-sandbox-runner',
hasModelTurn: true,
recorded: false,
headerClass: 'sandbox',
configPath: PARTIAL_LANDLOCK_CONFIG,
env: {
DSH_PERMISSION_MODE: 'read-only',
DSH_SNAPSHOT_MISSING_SANDBOX_RUNNER: '1',
},
posixOnly: true,
},
{ name: 'todo-write', hasModelTurn: true, recorded: true },
{
name: 'skill-load',