bazel: add unified Rust foundation - #394
Draft
vicondoa wants to merge 228 commits into
Draft
Conversation
Merge broker and guest into the resolver-v2 product workspace, add the safe provider and protocol foundation, and keep the runner, locator, and workspace policy roots green before later generator scopes. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Pin Bazel 8.6.0, the patched Linux sandbox policy, and the immutable static C supervisor with native identity evidence and fixture-independent policy coverage. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Read patched package inputs from the package expression so the Nix-unit case verifies the actual policy and patch authorities. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Make namespace PID 1 kill and nonblocking-reap descendants, keep the outer userspace ceiling monotonic, and bind the refreshed Bazel identity. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Fail closed on unsupported native systems and record the exact Nix, startup, and sandbox policy owners, inputs, and remedies. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Pass the fixed installed policy from the immutable Bazel wrapper and reject missing policy identity before action execution. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Use the unified product workspace and keep the dedicated static guest build explicitly package-, binary-, feature-, and target-scoped. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Bind derivationSha256 to the raw .drv file bytes, record the native ARM measurement, and reject zero digest placeholders in both policy and Nix contracts. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Keep product and walker Cargo authorities separate, constrain contributor mutations to scratch previews, and validate selected policy contexts against the pinned patched Bazel action boundary. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Keep Bazel startup state separate from command options, use the rules_rust target spelling, and make the root package own Cargo metadata so repin bootstrap does not depend on an unplanned nested package. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Bazel 8.6.0 exposes cargo_bazel as a library and cargo_bazel_bin as the runnable generator. Keep the generator-owned module unchanged while routing the xtask CLI to the executable target. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Use the supported rules_rust bzlmod extension evaluation with explicit selected-hub controls, and keep walker Cargo inputs in the root Bazel package without generating an aggregate BUILD file. Pinned Bazel 8.6 exposes sync as a WORKSPACE-only command; mod deps is the corresponding Bzlmod extension evaluation path. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Record the closure identities produced by the synchronized supervisor protocol test source on both native systems. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Match the unified product-workspace runner label while preserving the doctest and harness-free coverage assertions. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Refresh the native closure identities after aligning the unified workspace companion policy. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Treat every Cargo target-* directory as transient during fresh-workspace copying and mutation snapshots, with a planted exclusion test. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Refresh the native closure identities after excluding transient Cargo targets from fresh bootstrap inputs. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Bind the compiler-derived census to the final fresh-bootstrap source filter. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
… H20 H21 ) Retain process ownership, bound protocol waits, close ambient descriptors, privatize test capabilities, wire startup admission, and make pre-READY signal and typed failure handling enforcing. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
…H22 H23 H26 ) Isolate rc and environment inputs, wire real graph surfaces and native observations, type inherited capability failures, and select pinned cargo-bazel tools per host architecture. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
…H19 H24 H25 ) Share production policy validation and native inventories, preserve CLI contracts, redact diagnostics, anchor writes, align six-check docs, remove dead scaffolding, and generate exact target topology. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Use the kernel-floor descriptor scan fallback without procfs and make the host contract map the dedicated helper error channel collision-safely. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Bind the proc-free supervisor and current x86 broker and guest artifact closures before native ARM reconciliation. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Bind the final ARM supervisor and native broker and guest artifact closures measured on the disposable runner. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Record the self-resolving cleanup plant used by native patched-sandbox validation. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Admit the indexed Bazel policy guide into the governed prompt corpus and refresh compiler-derived workspace metadata after removing dead crates. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Pass the manifest system string directly to the production-validator source assertion. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Keep concurrent native Bazel validation from appearing as candidate-state drift to Rust inventory checks. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Record the final native broker and guest closure identities after the policy and API test changes. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Yield between write groups and timeout the collector so concurrent Layer-1 load cannot turn a delivery regression into an unbounded hang. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Keep the compact AGENTS router explicit about the product manifest, root lock, and separate walker while linking the detailed workflow. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Run the full-scale proof after parallel Layer-1 work locally while retaining its independent CI runner and 15-minute budget. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Create a fresh immutable delivery address after correcting the verification selection range; content is unchanged. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Bind real rules_rust and native sandbox evidence into the generated Layer-1 graph, harden supervisor ownership and diagnostics, and make target and companion discovery fail closed. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Install the combined generator preview so checked-in policy, configured targets, inventory, and source census reflect the real rules_rust evidence graph. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Refresh compiler-derived workspace metadata after the supervisor ownership and protocol changes. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Carry shared native execution paths and the planted secret in one harness so the enforcing evidence test remains Clippy-clean without lint suppression. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Align Rust and Nix policy contracts with genuine rules_rust mnemonics and the single pending-quarantine plus consuming-reap diagnostic protocol. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Check the byte-level pending and consuming-reap fields in the patch while leaving operator prohibition wording to the dedicated runbook contract. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Assert each exact release field independently because the patched C diagnostic is assembled from adjacent string literals. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Refresh closure identities after verification changes altered the selected Nix output paths without changing the measured binaries. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Bind the aarch64 broker and guest closure identities measured on the unchanged native ARM candidate. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Validation
make check-tier0make test-lintmake test-rust-mainmake test-rust-brokermake test-rust-guest-shell-runnermake test-rust-schemamake test-rust-inventorymake test-rust-supply-chainmake test-rustmake test-policymake test-driftmake test-flakemake test-nix-unitD2B_ENABLE_FIXTURE_BUILD=1 make test-fixture-contractsThe native ARM job must realize the same six checks and run the supply-chain gate on this unchanged head before review closes.