Checkpoint web parity through Chromium input tasks
Some checks failed
M6 deployable RC / quick (push) Has been cancelled
M6 deployable RC / chromium (push) Has been cancelled
M6 deployable RC / release (push) Has been cancelled

This commit is contained in:
mes123456
2026-08-19 10:39:03 -04:00
parent 5a11045ca5
commit 380cbed4ff
634 changed files with 41862 additions and 212 deletions

41
docs/status/M13-01B.md Normal file
View File

@@ -0,0 +1,41 @@
# M13-01B Status
status: done
task: read script metadata on `.blend` open without executing arbitrary content
updated: 2026-08-18 America/New_York
enablingTask: false
parityStateChange: false
## Scope
The real `script_scene.blend` open path reads all three Text sources, verifies source bytes and
SHA-256, preserves read-only metadata, and keeps every source `executionStatus=BLOCKED`. A
`use_module` autorun request remains `SCRIPT_POLICY_DENIED`; no Python Console, driver, handler,
or add-on code executes during open. This task does not add a script execution route.
## Evidence
- `node tools/web/check-script-open-metadata.mjs` ran the production WASM Main reader against the
real fixture and passed `script-open-metadata-ok blend=opened textMetadata=read sourceHash=verified execution=DENY autorun=DENY next=M13-01C`.
- `CHROME_PATH=/usr/bin/google-chrome-stable WEB_TEST_PORT=5495 node_modules/.bin/playwright test
--config playwright.config.ts --workers=1 tests/e2e/script-open-metadata.spec.ts` passed 1/1.
Chromium opened the fixture through `WebEngineClient`, saw three read-only blocked sources and
the explicit autorun denial.
- `npm --prefix web run typecheck` and `git diff --check` passed. The checker emits the deterministic
report `tests/golden/M13-01B/open-metadata-report.json` bound to the fixture hash.
## Artifact Hashes
- checker: `66396d5c9a5294021ae077bb162278c74d46de8b52ac8a444a5de4f6d84cfe05`
- e2e: `df6412cda113c830996e08c3d66a035dc1ac309e392f5946a762d11121b1926c`
- report: `f92470e57c048452134664f7f6208e50b6f087dbcbc33369e6b882c51813990c`
- fixture: `2b8fbdb05419e1e61d64777998d6a3b2562f726c17f548cd1852efc723e1a037`
## Next Task
`M13-01C`: default-deny autorun, register, install, and driver execution policy codes.
## Rollback
Remove the checker, report, manifest, e2e test, and this status entry. Restore M13-01A as the
queue tail and move the machine queue back to M13-01B. No parity ledger rollback is required.