M13-03G Status

status: done
task: same-session sandbox recovery and audit continuity
updated: 2026-08-19 America/New_York
enablingTask: false
parityStateChange: false

Scope

A denied script request can be resumed in the same session after a Worker generation change from 4 to 5. The Main revision remains 11, and the source and canonical manifest hashes remain stable. Two default-deny audit entries use distinct request IDs, sequence 1/2, and a continuous previousEntrySha256 -> entrySha256 chain. Replay and source-hash tampering are rejected. This task does not enable Python execution or claim Blender server isolation.

Evidence

node --test web/tests/unit/script-sandbox-recovery.test.mjs passed 2/2.
CHROME_PATH=/usr/bin/google-chrome-stable WEB_TEST_PORT=5535 npm --prefix web run test:script-sandbox-recovery passed unit 2/2 and Chromium Worker E2E 1/1.
node tools/web/check-script-sandbox-recovery.mjs passed: script-sandbox-recovery-ok generation=4->5 revision=11 sourceStable=true manifestStable=true sequence=1,2 chain=true replay=SCRIPT_MANIFEST_INVALID tamper=SCRIPT_MANIFEST_INVALID next=M13-04A.
npm --prefix web run typecheck, npm --prefix web run lint and git diff --check passed.

Artifact Hashes

protocol: 8034faded657d49e1376ea42051bc302a090b485024a9ff3781e46aa82638b64
worker: 7b02331c375d4fb7dbadadd179f0ab9a0e336c8b95fabb071c06e67f3e7b3fe4
checker: 612015a3fca44bae0f0b78e622f044a5297ed8aa3a0efc774a40f0d47ddbdc9e
unit: 69a2d34e38d591043ff62b2d305bd9aae684ecebd9ecba718580d77318931226
e2e: 73176e513f115ba917be74f62a5deb8fe2918fafa8a84c9294e80d2a86b8f1ed
package: 3df02b6049ac5d7185c23aef7764933ee460fedeb6595b3861272b0d49da5ecd
report: 9057b3f49c3bb15cf53d638ada4bd2743949d3914173cd3799414489d584111d
manifest: 5cd365eeebbd6a7f56f380af103b66f2beb11eb49cb6db6adb49972b572cf2ec

Next Task

M13-04A: create an unpredictable one-shot directory for each real Blender server job.

Rollback

Remove the recovery protocol, Worker, focused tests/checker, report, manifest, package command and this status entry; restore M13-03F as the queue tail and move nextTask back to M13-03G.

2.1 KiB Raw Blame History