M13-04C Status

status: done
task: server job resource budget gate
updated: 2026-08-19 America/New_York
enablingTask: false
parityStateChange: false

Scope

Server jobs now have fixed CPU, memory, process, file, wall-time and output-byte limits. Budget parsing rejects undeclared fields and out-of-range values. A usage receipt is marked enforced=true only when every measured value is within its corresponding limit; each of the six over-limit cases returns SERVER_JOB_BUDGET_EXCEEDED and remains execution=DISABLED.

This is the resource contract and usage gate. OS/container enforcement is proven by the later real process task and is not claimed here.

Evidence

node --test web/tests/unit/server-job-resource-budget.test.mjs passed 2/2.
npm --prefix web run test:server-job-resource-budget passed unit 2/2 and the independent checker.
node tools/web/check-server-job-resource-budget.mjs passed: server-job-budget-ok cpu=bounded memory=bounded process=bounded files=bounded wall=bounded output=bounded overages=6 execution=DISABLED next=M13-04D.
npm --prefix web run typecheck, npm --prefix web run lint and git diff --check passed.

Artifact Hashes

protocol: 9746f0aef9dd76411320792dee1213c03755a3c03a87bbc4cbf88d4324c728d6
checker: 5599f4e25fc3ceca18e04be322450a4dc5bb6ce9c72c3abe9f1afc9c81851ff8
unit: 05212b2aa639f4c37e37e1cac0597d9b367a1280e519240f073762394914dc63
package: 3df02b6049ac5d7185c23aef7764933ee460fedeb6595b3861272b0d49da5ecd
report: 76ba684966bf7e680b0ebfc630ae9e080f04dd6daa6dd744bbb22dcff43f8eb1
manifest: d00fff709b57909ec418ff0e476dca97281fc39456f674c63b51248377fc6ab2

Next Task

M13-04D: default-deny network policy with explicit declared-origin admission.

Rollback

Remove the resource budget protocol, focused tests/checker, report, manifest, package command and this status entry; restore M13-04B as the queue tail and move nextTask back to M13-04C.

1.9 KiB Raw Blame History