M13-01E Status

status: done
task: preserve Text data and unknown script sources through save/reopen
updated: 2026-08-18 America/New_York
enablingTask: false
parityStateChange: false

Scope

The production WebEngine path opens script_scene.blend, saves it, starts a new engine Worker, and reopens the saved bytes. All three Text sources compare exact by metadata and source SHA-256; they remain read-only and BLOCKED, including the use_module autorun request. No source is rewritten or executed. This does not claim arbitrary script execution or add-on support.

Evidence

UPDATE_SCRIPT_SAVE_REOPEN_REPORT=1 CHROME_PATH=/usr/bin/google-chrome-stable WEB_TEST_PORT=5498 node_modules/.bin/playwright test --config playwright.config.ts --workers=1 tests/e2e/script-save-reopen.spec.ts passed 1/1. A second run without report update on port 5497 also passed against the same deterministic report.
node tools/web/check-script-save-reopen.mjs passed: script-save-reopen-ok sources=3 exact=true blocked=true savedBytes=490191 next=M13-01F.
npm --prefix web run typecheck and git diff --check passed.

Artifact Hashes

checker: 7fc9a370cb472636e2699565cb21a1450e3cc8a2c90ffdcdff96533b344afa7c
e2e: 481f78f3a0cce923b67ab14436cc23cbcd2ce66725de29dc874fea4fb5801227
report: 0f6869a8ec8342ed87649312d2872ab2c172cbf12d6be81bb0b770ebcbe8a398
manifest: 889a4e06f7e8c0ea55b3ca4baa9fe85dccbe97053e497a45e3d364ce2b70a7c6
fixture: 2b8fbdb05419e1e61d64777998d6a3b2562f726c17f548cd1852efc723e1a037

Next Task

M13-01F: malicious Text, driver, handler, and embedded-module fixtures.

Rollback

Remove the checker, e2e test, report, manifest, and this status entry. Restore M13-01D as the queue tail and move the machine queue back to M13-01E. No parity ledger rollback is required.

1.8 KiB Raw Blame History