47 lines
2.2 KiB
Markdown
47 lines
2.2 KiB
Markdown
# M13-03D Status
|
|
|
|
status: done
|
|
task: sandbox crash/timeout isolation
|
|
updated: 2026-08-18 America/New_York
|
|
enablingTask: false
|
|
parityStateChange: false
|
|
|
|
## Scope
|
|
|
|
The sandbox job termination receipt now converts crash, wall-time timeout and cancellation into
|
|
stable fail-closed statuses. Every terminated receipt keeps `mainRevisionAfter` equal to
|
|
`mainRevisionBefore`, publishes no result, releases temporary bytes, and remains
|
|
`execution=DISABLED`; a result received after termination is rejected with
|
|
`SCRIPT_SANDBOX_LATE_RESULT`.
|
|
|
|
The Chromium test starts a production Worker that throws for the crash case and a production Worker
|
|
that would publish a delayed result for the timeout case. The host observes the crash, terminates the
|
|
timeout Worker before its delayed message, and confirms no late message arrives.
|
|
|
|
## Evidence
|
|
|
|
- `node --test web/tests/unit/script-sandbox-isolation.test.mjs` passed 3/3.
|
|
- `CHROME_PATH=/usr/bin/google-chrome-stable WEB_TEST_PORT=5532 npm --prefix web run test:script-sandbox-isolation` passed unit 3/3 and Chromium Worker E2E 1/1.
|
|
- `node tools/web/check-script-sandbox-isolation.mjs` passed:
|
|
`script-sandbox-isolation-ok crash=SCRIPT_SANDBOX_CRASHED timeout=SCRIPT_SANDBOX_TIMEOUT revisionUnchanged=true late=SCRIPT_SANDBOX_LATE_RESULT next=M13-03E`.
|
|
- `npm --prefix web run typecheck` and `git diff --check` passed.
|
|
|
|
## Artifact Hashes
|
|
|
|
- protocol: `6699fc0a19e0736823f164e707a420655803e36019cf0071f7ff9c760d25e9f2`
|
|
- worker: `8c810ee7c8bd15d83ecfb4981068f947536bfe8c9e63b906861f42b8465722da`
|
|
- checker: `e5c0c3c7cd500c269ae43a1a9eb05589e82aad28199ab4f11ad1167b486f6937`
|
|
- unit: `47986f93638fdc18b817b03222484f4691dc294185040eaebac8e1f386bc1549`
|
|
- e2e: `2c16c42f09827a0c0100ef2cc6295ca6bc96933ed7475e08b1fa195d7940c141`
|
|
- report: `4af91cdb21101039b379136c7559b46df55f4f5ab5478c05c1c57cd6e1624d2a`
|
|
- manifest: `8066013f3d356ba438c36d1f1ea1cf692dbb4f60b086f552072e36b783a96d42`
|
|
|
|
## Next Task
|
|
|
|
`M13-03E`: cancellation after termination must not publish a late message or cache.
|
|
|
|
## Rollback
|
|
|
|
Remove the isolation Worker additions, focused tests/checker, report, manifest and this status entry;
|
|
restore M13-03C as the queue tail and move `nextTask` back to `M13-03D`.
|