feat(remote): complete bounded node-agent execution candidate #14

Open

bryce wants to merge 13 commits from feature/node-agent into feature/upgrade-completion

bryce commented

2026-10-26 20:44:33 -05:00

Owner

Scope

Complete v2-remote-execution.node-agent for RPS-V2-035 and RPS-V2-038 without claiming artifact placement, lease/proxy fencing, release publication, or deployment.

Source identity

Executable candidate: 379067c6a511dfc1bf6611157dfb887167ee715b
Documentation/evidence head: 71ff11a575ca933990f8a857d4bd62098b205826
Executable source is byte-identical across the docs-only closeout.

Evidence

See workflow/features/v2-remote-execution.node-agent/evidence/candidate-2026-10-26.md and the parent review. Exact-source full repository, bounded race partitions, real delegated cgroup lifecycle, SDK, vet, workflow/document checks, FreeBSD compile-denial/build checks, benchmarks, and source-manifest reconciliation pass.

Required review

An independent cold source review is still required. This PR deliberately leaves the feature active and v2 at 10/20 until that review passes.

## Scope Complete `v2-remote-execution.node-agent` for RPS-V2-035 and RPS-V2-038 without claiming artifact placement, lease/proxy fencing, release publication, or deployment. ## Source identity - Executable candidate: `379067c6a511dfc1bf6611157dfb887167ee715b` - Documentation/evidence head: `71ff11a575ca933990f8a857d4bd62098b205826` - Executable source is byte-identical across the docs-only closeout. ## Evidence See `workflow/features/v2-remote-execution.node-agent/evidence/candidate-2026-10-26.md` and the parent review. Exact-source full repository, bounded race partitions, real delegated cgroup lifecycle, SDK, vet, workflow/document checks, FreeBSD compile-denial/build checks, benchmarks, and source-manifest reconciliation pass. ## Required review An independent cold source review is still required. This PR deliberately leaves the feature active and v2 at 10/20 until that review passes.

bryce added 13 commits

2026-10-26 20:44:33 -05:00

feat(remote): bind node execution plans to signed limits 48c5f40c94

feat(remote): prepare fail-closed node isolation e59a33c98f

feat(remote): enforce assigned node runtime limits a608f37aa3

fix(remote): observe assigned process health without restart 8d4f6f08d1

fix(remote): keep assigned memory ceiling swap-proof 9ac0176fa8

test(remote): prove assigned limit failure boundaries 1c47b54e00

fix(remote): retain failed prelaunch cleanup custody 8d34197b9c

fix(remote): reap complete assigned cgroup trees 056a9c0345

fix(remote): probe cgroup kill without firing it c4dd71913e

fix(remote): require exclusive delegated cgroup root 227d866cb4

fix(remote): permit clean cgroup root reopen feddaad95a

docs(remote): record cgroup helper costs 379067c6a5

docs(remote): record node-agent candidate evidence 71ff11a575

bryce requested review from linus

2026-10-26 20:44:54 -05:00

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin "feature/node-agent:feature/node-agent"

git switch "feature/node-agent"

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.