Include the current addon, terrain integrations, tools, regression tests and recorded development evidence.
22 lines
1.5 KiB
JSON
22 lines
1.5 KiB
JSON
{
|
|
"runner_sha256": "1f0b10b9067ba9d6e3a457e8f6b0439f75856657b53fb6826cf608961328d97f",
|
|
"package_files_exact": 416,
|
|
"binary_hash_matches_archive": true,
|
|
"external_addons": 7,
|
|
"external_fingerprint_records_changed_since_package_cache": [],
|
|
"native_processes_at_review": [],
|
|
"verdict": "No launch blocker found for bounded isolated empty-server startup; recheck run-time gates at launch",
|
|
"review": [
|
|
"Package and binary are read-only mounts and hash-verified before launch; current external records exactly match cached package fingerprints.",
|
|
"Home/tmp/run are masked, environment cleared, private writable run directory only; network/PID namespaces, loopback-only preflight and noBackend/noSound prevent ordinary network/display/audio activity.",
|
|
"Nonblocking shared dedicated lock, prelaunch native process scan, parent serialized execution;110s run with owned process-group cleanup5s TERM then5s KILL and PID namespace child containment.",
|
|
"Result correctly marks0real players and multiplayer/release unproven."
|
|
],
|
|
"limitations": [
|
|
"Existing process check is a snapshot, not a universal cross-runner lock; parent serialization remains necessary.",
|
|
"Mounted vanilla game data is read-only but not comprehensively hashed by this script.",
|
|
"Source bindings external_addons.py and dedicated_native.PROBE are imported from working tree; script archives itself but not those helper hashes.",
|
|
"Cleanup result records supervisor reap rather than separate post-run descendant inventory; parent should verify process absence after run."
|
|
]
|
|
}
|