kayg/infraternal

Watch

Fork 0

Access rules: one sentence model (who can verb where), verified until foolproof across CLI, API, MCP, apps, WebMCP #186

New issue

Open

opened 2026-10-12 10:46:50 +00:00 by kayg · 139 comments

kayg commented

2026-10-12 10:46:50 +00:00

Owner

Owner 2026-10-12: write the access-rules model down and exhaustively try to break it with Codex jobs until we are sure it's foolproof. It must work across the CLI, API, MCP, the apps, and WebMCP in the future. Very simple, very human readable, very robust. Spec: docs/design/access-rules.md on branch access-rules. Supersedes D252's three names once the owner approves.

mesh-port-hover-desktop-paper.png

9 KiB

m1-connector-hover-slowly.png

206 KiB

m2-connector-tap-phone.png

177 KiB

chips-real-sheet-ink.png

142 KiB

chips-real-sheet-paper.png

138 KiB

chips-4x-ink.png

32 KiB

chips-4x-paper.png

32 KiB

i2-open-desktop-ink.png

204 KiB

i3-changed-desktop-ink.png

174 KiB

i4-undone-desktop-ink.png

164 KiB

i5-disabled-reason-desktop-paper.png

190 KiB

i3-changed-phone-paper.png

175 KiB

i2-open-small-paper.png

166 KiB

i5-disabled-reason-small-ink.png

177 KiB

fix-verb-desktop-ink.png

451 KiB

fix-verb-small-ink.png

172 KiB

i2-open-phone-ink.png

202 KiB

i6-duplicate-desktop-ink.png

208 KiB

access-r3-phone-closeup.png

64 KiB

kayg commented

2026-10-12 10:49:13 +00:00

Author

Owner

Starting access rules verification round 1 coverage. Branch: access-rules-r1-coverage. Base SHA: b0691640ec. Read the 125-line spec at b0691640, required repo docs, DECISIONS.md, and issue #186 plus parent #147; both issues had zero comments before this note.

Starting access rules verification round 1 coverage. Branch: access-rules-r1-coverage. Base SHA: b0691640ec5ab63423061d7a9d67e4e69032f1f1. Read the 125-line spec at b0691640, required repo docs, DECISIONS.md, and issue #186 plus parent #147; both issues had zero comments before this note.

kayg commented

2026-10-12 10:49:23 +00:00

Author

Owner

Starting round 1 soundness review on access-rules-r1-soundness, base b0691640ec (draft v1). Read #186 body and every comment: zero prior comments, no parent issue identified. Worktree spec matches access-rules (SHA256 0409269f70a258c961e4783055c6a1ffeb24e55299dc6857222be80662f4ef15). Will keep spec unchanged, write docs/design/access-rules-verification/round1-soundness.md, split findings/coverage commits, and push the job branch as explicitly requested. No implementation or deployment; no performance measurements needed for this design-only review.

Starting round 1 soundness review on access-rules-r1-soundness, base b0691640ec5ab63423061d7a9d67e4e69032f1f1 (draft v1). Read #186 body and every comment: zero prior comments, no parent issue identified. Worktree spec matches access-rules (SHA256 0409269f70a258c961e4783055c6a1ffeb24e55299dc6857222be80662f4ef15). Will keep spec unchanged, write docs/design/access-rules-verification/round1-soundness.md, split findings/coverage commits, and push the job branch as explicitly requested. No implementation or deployment; no performance measurements needed for this design-only review.

kayg commented

2026-10-12 10:49:33 +00:00

Author

Owner

Starting access rules verification round 1 surfaces. Branch: access-rules-r1-surfaces. Base SHA: b0691640ec. Read issue #186's existing coverage comment and parent #147; #147 has zero comments. I am now reading the specification and required decisions, then will prototype sentence/structure round trips and record surface findings.

Starting access rules verification round 1 surfaces. Branch: access-rules-r1-surfaces. Base SHA: b0691640ec5ab63423061d7a9d67e4e69032f1f1. Read issue #186's existing coverage comment and parent #147; #147 has zero comments. I am now reading the specification and required decisions, then will prototype sentence/structure round trips and record surface findings.

kayg commented

2026-10-12 10:52:36 +00:00

Author

Owner

Step 1 committed and pushed: 37275fe5, docs/design/access-rules-verification/round1-soundness.md, S01-S14 (10 P0, 4 P1). Evidence is a concrete named scenario and spec/decision reference per finding, not implementation claims. S01 preferred deploy account differs from own username; S02 replacement name identities; S03 scoped manage edits outside scope/D211; S04 tag/ownership self-expansion; S05 unreviewed IdP widening and stale combined preview; S06 disabled identities still matching Everyone; S07 token intersection loses conditions; S08 scoped manage sees everything; S09 host view vs private session sharing; S10 always-view built-in vs removal cut-off; S11 missing D235 initial any-account login; S12 missing source machine-account identity; S13 missing granular actions/shared typing; S14 person/device reach ambiguity. Documentation diff check passed. Full fast gate still running; no code or parser changes, so no crate/TS-specific gates apply.

Step 1 committed and pushed: 37275fe5, docs/design/access-rules-verification/round1-soundness.md, S01-S14 (10 P0, 4 P1). Evidence is a concrete named scenario and spec/decision reference per finding, not implementation claims. S01 preferred deploy account differs from own username; S02 replacement name identities; S03 scoped manage edits outside scope/D211; S04 tag/ownership self-expansion; S05 unreviewed IdP widening and stale combined preview; S06 disabled identities still matching Everyone; S07 token intersection loses conditions; S08 scoped manage sees everything; S09 host view vs private session sharing; S10 always-view built-in vs removal cut-off; S11 missing D235 initial any-account login; S12 missing source machine-account identity; S13 missing granular actions/shared typing; S14 person/device reach ambiguity. Documentation diff check passed. Full fast gate still running; no code or parser changes, so no crate/TS-specific gates apply.

kayg commented

2026-10-12 10:54:26 +00:00

Author

Owner

Step 1 committed as ee2d399e: added the capability map covering 24 permission-bearing areas and nine rule cases that held up. Evidence and decision anchors are in docs/design/access-rules-verification/round1-coverage.md. The draft remains unchanged.

Step 1 committed as ee2d399e: added the capability map covering 24 permission-bearing areas and nine rule cases that held up. Evidence and decision anchors are in docs/design/access-rules-verification/round1-coverage.md. The draft remains unchanged.

kayg commented

2026-10-12 10:55:38 +00:00

Author

Owner

Step 2 committed and pushed as 9bca3cbc: added 10-entry homelab and startup trials and a 12-entry MSP trial. The MSP rules isolate Aster and Birch with positive tag scopes after removing the broad reach default; a dual-tag host would apply both sets, so the tag preview and D211 manager boundary matter. Evidence is in the three scenarios in docs/design/access-rules-verification/round1-coverage.md.

Step 2 committed and pushed as 9bca3cbc: added 10-entry homelab and startup trials and a 12-entry MSP trial. The MSP rules isolate Aster and Birch with positive tag scopes after removing the broad reach default; a dual-tag host would apply both sets, so the tag preview and D211 manager boundary matter. Evidence is in the three scenarios in docs/design/access-rules-verification/round1-coverage.md.

kayg commented

2026-10-12 10:56:14 +00:00

Author

Owner

Step 3 committed and pushed as 1bbf4332: added ten-entry trials for a 200-person SSO organization, time-limited contractors, and on-call access. The cases show synced groups and absolute expiry are readable; approval request binding, self-approval, the meaning of “for 2 hours,” and one-person exceptions remain unclear or unavailable. See the trial evidence in docs/design/access-rules-verification/round1-coverage.md.

Step 3 committed and pushed as 1bbf4332: added ten-entry trials for a 200-person SSO organization, time-limited contractors, and on-call access. The cases show synced groups and absolute expiry are readable; approval request binding, self-approval, the meaning of “for 2 hours,” and one-person exceptions remain unclear or unavailable. See the trial evidence in docs/design/access-rules-verification/round1-coverage.md.

kayg commented

2026-10-12 10:56:56 +00:00

Author

Owner

Step 2 committed and pushed: f7d710f7, same findings file, S15-S36 (19 P0, 2 P1, 1 P2 at this checkpoint). S15 full-rule/ending composition; S16 duration reset and active expiry; S17 self/reused approval; S18 disconnected-node D242 boundary; S19 check/use race; S20 detached logins/resume/conntrack cut-off; S21 files-only host execution boundary; S22 paste/resize/clipboard/app input under view; S23 sudo/su/setuid host boundary; S24 browser tunnel requester identity; S25 forwarding final destination; S26 exit internet/private scope; S27 subnet address mutation/overlap; S28 spoofable boot selectors; S29 atomic next-machine claim; S30 boot enrollment vs broad defaults; S31 visible infrastructure exceptions; S32 discovery/why/DNS/reference visibility; S33 why/check route context; S34 atomic narrowing and default recreation; S35 ignored incompatible endings; S36 defaults/built-ins outside canonical slots. Each has named scenario, spec evidence, and smallest proposed repair. git diff --check passed. Completing the coverage matrix and safety-property attempts next; gate is still building.

Step 2 committed and pushed: f7d710f7, same findings file, S15-S36 (19 P0, 2 P1, 1 P2 at this checkpoint). S15 full-rule/ending composition; S16 duration reset and active expiry; S17 self/reused approval; S18 disconnected-node D242 boundary; S19 check/use race; S20 detached logins/resume/conntrack cut-off; S21 files-only host execution boundary; S22 paste/resize/clipboard/app input under view; S23 sudo/su/setuid host boundary; S24 browser tunnel requester identity; S25 forwarding final destination; S26 exit internet/private scope; S27 subnet address mutation/overlap; S28 spoofable boot selectors; S29 atomic next-machine claim; S30 boot enrollment vs broad defaults; S31 visible infrastructure exceptions; S32 discovery/why/DNS/reference visibility; S33 why/check route context; S34 atomic narrowing and default recreation; S35 ignored incompatible endings; S36 defaults/built-ins outside canonical slots. Each has named scenario, spec evidence, and smallest proposed repair. git diff --check passed. Completing the coverage matrix and safety-property attempts next; gate is still building.

kayg commented

2026-10-12 10:56:58 +00:00

Author

Owner

Step 4 committed and pushed as 0124d24c: completed nine organization trials, each with 10–12 rule entries or explicitly marked failed attempts. The CI, AI-agent, and classroom cases confirm narrow network rules and the owner cap, and expose missing run-scoped actions, ordinary join, and narrow machine administration. Full scenarios are in docs/design/access-rules-verification/round1-coverage.md.

Step 4 committed and pushed as 0124d24c: completed nine organization trials, each with 10–12 rule entries or explicitly marked failed attempts. The CI, AI-agent, and classroom cases confirm narrow network rules and the owner cap, and expose missing run-scoped actions, ordinary join, and narrow machine administration. Full scenarios are in docs/design/access-rules-verification/round1-coverage.md.

kayg commented

2026-10-12 10:58:48 +00:00

Author

Owner

Correction to step 1: the capability map contains 25 data rows, not 24 as the earlier comment said. The 25th is the separate CA-unlock/pending-admin-actions row (D168, D217, D234). The report now has the complete count in docs/design/access-rules-verification/round1-coverage.md.

kayg commented

2026-10-12 10:59:21 +00:00

Author

Owner

Findings committed and pushed as ab0deb3e: 14 total (P0=1, P1=11, P2=2). Evidence for every finding is in docs/design/access-rules-verification/round1-coverage.md:

AR-01 P1, line 230: the built-in session sentence combines passive viewing and ending.
AR-02 P0, line 237: D231's missing-account root fallback exceeds the ordinary-user login sentence.
AR-03 P1, line 244: own-machine removal has only a broad manage shape.
AR-04 P1, line 251: login, network reach, and app action checks differ by route but are not composed explicitly.
AR-05 P1, line 258: plugin actions and custom role scopes collapse into view/manage.
AR-06 P1, line 265: a named session's edit/control mode is absent.
AR-07 P1, line 272: recording access has no audit/connection-log counterpart.
AR-08 P1, line 279: D211's all-tags manager boundary is missing from rule semantics.
AR-09 P1, line 286: approval is not request-bound or defined as one-use.
AR-10 P1, line 293: duration may mean rule expiry or session length.
AR-11 P1, line 300: D182 team layouts and D248 owner-only canvases are not modeled.
AR-12 P1, line 307: the account operand and canonical multi-ending grammar are unspecified across adapters.
AR-13 P2, line 314: a person cannot be subtracted from a matching universal rule; D154 leaves this unsupported.
AR-14 P2, line 321: a link holder cannot be a principal; D180 leaves live link sharing for later design.

Top five by safety and breadth: AR-02 (root fallback), AR-04 (cross-route checks), AR-05 (action/role scope), AR-06 (session control), and AR-03 (machine self-service scope). The smallest proposed fixes are recorded per finding. The access-rules draft remains unchanged.

Findings committed and pushed as ab0deb3e: 14 total (P0=1, P1=11, P2=2). Evidence for every finding is in docs/design/access-rules-verification/round1-coverage.md: - AR-01 P1, line 230: the built-in session sentence combines passive viewing and ending. - AR-02 P0, line 237: D231's missing-account root fallback exceeds the ordinary-user login sentence. - AR-03 P1, line 244: own-machine removal has only a broad manage shape. - AR-04 P1, line 251: login, network reach, and app action checks differ by route but are not composed explicitly. - AR-05 P1, line 258: plugin actions and custom role scopes collapse into view/manage. - AR-06 P1, line 265: a named session's edit/control mode is absent. - AR-07 P1, line 272: recording access has no audit/connection-log counterpart. - AR-08 P1, line 279: D211's all-tags manager boundary is missing from rule semantics. - AR-09 P1, line 286: approval is not request-bound or defined as one-use. - AR-10 P1, line 293: duration may mean rule expiry or session length. - AR-11 P1, line 300: D182 team layouts and D248 owner-only canvases are not modeled. - AR-12 P1, line 307: the account operand and canonical multi-ending grammar are unspecified across adapters. - AR-13 P2, line 314: a person cannot be subtracted from a matching universal rule; D154 leaves this unsupported. - AR-14 P2, line 321: a link holder cannot be a principal; D180 leaves live link sharing for later design. Top five by safety and breadth: AR-02 (root fallback), AR-04 (cross-route checks), AR-05 (action/role scope), AR-06 (session control), and AR-03 (machine self-service scope). The smallest proposed fixes are recorded per finding. The access-rules draft remains unchanged.

kayg commented

2026-10-12 11:00:12 +00:00

Author

Owner

Step 5 committed and pushed as 6ab46fca: clarified that device approval, a fresh passkey for destructive UI actions, and dry run for destructive MCP actions remain required outside the access sentence. The capability map also records immediate cleanup of personal machines when a person is disabled. No new findings were added.

Step 5 committed and pushed as 6ab46fca: clarified that device approval, a fresh passkey for destructive UI actions, and dry run for destructive MCP actions remain required outside the access sentence. The capability map also records immediate cleanup of personal machines when a person is disabled. No new findings were added.

kayg commented

2026-10-12 11:00:19 +00:00

Author

Owner

Step 3 committed and pushed: e619ffc46d. Report complete: 37 findings, 28 P0 / 8 P1 / 1 P2. Added S37 (P1): structured rule shape omits mandatory target-account argument. Corrected S15 from P0 to P1: complete-rule union itself already excludes cross-rule mixing; remaining issue is ending conjunction/protocol pairing. Includes symbolic compatibility coverage of every listed who/verb/where/ending class (4,000 single-ending shapes, not runtime tests), all eight safety-property attempts, indirect changes, and cases that hold. Unique IDs/count assertions and diff check pass. Spec unchanged; no deployment or implementation. Full fast gate started at base and remains building; final-head invocation and verbatim output will follow.

Step 3 committed and pushed: e619ffc46dcd5f7b595165605358a436b8a69363. Report complete: 37 findings, 28 P0 / 8 P1 / 1 P2. Added S37 (P1): structured rule shape omits mandatory target-account argument. Corrected S15 from P0 to P1: complete-rule union itself already excludes cross-rule mixing; remaining issue is ending conjunction/protocol pairing. Includes symbolic compatibility coverage of every listed who/verb/where/ending class (4,000 single-ending shapes, not runtime tests), all eight safety-property attempts, indirect changes, and cases that hold. Unique IDs/count assertions and diff check pass. Spec unchanged; no deployment or implementation. Full fast gate started at base and remains building; final-head invocation and verbatim output will follow.

kayg commented

2026-10-12 11:03:21 +00:00

Author

Owner

S18 evidence correction committed and pushed: direct-session outage is a short fail-closed lease under D128, but offline mesh uses last-known rules indefinitely under D166. The report now distinguishes both from D242's absolute at-once cutoff instead of attributing one lease to all paths. Counts remain 28 P0 / 8 P1 / 1 P2. git diff --check passed; no code changed. Full gate is still compiling the native shim on this host; no timing numbers are claimed as evidence.

kayg commented

2026-10-12 11:20:05 +00:00

Author

Owner

Step 1 complete: committed canonical grammar, JSON Schema sketch, and scratch round-trip evidence. Commit: 82494c5779b6e030f9fb22ea7f2bf26ae0010a88. Prototype: 10,000 generated rules, 0 round-trip failures; 5 hostile-name cases, 0 failures. The draft delimiter probe failed 3/5 cases; these are undefined-grammar examples, not product-parser failures.

kayg commented

2026-10-12 11:26:43 +00:00

Author

Owner

Coverage clarification committed and pushed: S12 now explicitly covers D235's ordinary authorized_keys authentication without a person identity. A valid target key cannot replace source/account login authorization; do not fall back from a refused person to machine authority. Added the same case to lifecycle coverage and separated native host sshd's host boundary (S23). Counts unchanged: 37 findings, 28 P0 / 8 P1 / 1 P2. Diff check passed. Milestone gate passed workspace clippy and is running integration tests; final-head gate is queued behind it.

kayg commented

2026-10-12 11:32:12 +00:00

Author

Owner

Coverage analysis complete at head 6ab46fca on access-rules-r1-coverage. The report maps 25 capability areas, models nine organizations with 10–12 entries each, and records 14 findings (P0=1, P1=11, P2=2). Top five: AR-02 missing-account root fallback; AR-04 route-specific checks; AR-05 plugin-action scope; AR-06 session control; AR-03 self-service machine scope. The source spec is unchanged; the branch diff contains only docs/design/access-rules-verification/round1-coverage.md.

Self-review: every requested capability is mapped; all nine organizations have 10–20 rule entries; each finding includes an ID, severity, named scenario, model behavior, failure, and smallest proposed change. No area-specific design checklist exists in the repository; I checked against the job checklist and the process Definition of Done.

The required fast gate was run three times. The first two stopped at the latency-proxy preflight under shared-host scheduling. The final run under the weighted user scope passed that preflight, Rust formatting, native formatting, plugin compile-out, clippy, workspace tests, and cargo-deny. It then failed the static binary size budget; TypeScript did not run after that failure. This is unchanged code at the base commit, and no Rust or TypeScript files changed in this branch.

Final scripts/verify fast output (verbatim summary):

    Finished `release` profile [optimized] target(s) in 6m 21s
/home/kayg/.cache/codex-scratch/access-rules-r1-coverage/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 21857264 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Coverage analysis complete at head 6ab46fca on `access-rules-r1-coverage`. The report maps 25 capability areas, models nine organizations with 10–12 entries each, and records 14 findings (P0=1, P1=11, P2=2). Top five: AR-02 missing-account root fallback; AR-04 route-specific checks; AR-05 plugin-action scope; AR-06 session control; AR-03 self-service machine scope. The source spec is unchanged; the branch diff contains only docs/design/access-rules-verification/round1-coverage.md. Self-review: every requested capability is mapped; all nine organizations have 10–20 rule entries; each finding includes an ID, severity, named scenario, model behavior, failure, and smallest proposed change. No area-specific design checklist exists in the repository; I checked against the job checklist and the process Definition of Done. The required fast gate was run three times. The first two stopped at the latency-proxy preflight under shared-host scheduling. The final run under the weighted user scope passed that preflight, Rust formatting, native formatting, plugin compile-out, clippy, workspace tests, and cargo-deny. It then failed the static binary size budget; TypeScript did not run after that failure. This is unchanged code at the base commit, and no Rust or TypeScript files changed in this branch. Final `scripts/verify fast` output (verbatim summary): ``` Finished `release` profile [optimized] target(s) in 6m 21s /home/kayg/.cache/codex-scratch/access-rules-r1-coverage/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 21857264 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented

2026-10-12 11:39:50 +00:00

Author

Owner

Coverage clarification committed and pushed: e845e148b7. S13 now also covers D237 personal-machine join/removal: the draft omits narrow visible starter/built-in authority, while manage-own bundles rule edits and reinstalls. Recommend narrowly named actions under D16, never implicit access from ownership. Counts stay 37 findings, 28 P0 / 8 P1 / 1 P2. Diff check passed. Previous clarification SHAs: b419b4b30a (D128 vs D166); a90c9471 (ordinary authorized_keys vs matching login rule). Full milestone Rust tests and dependency checks passed; static release builds remain in progress; final-head gate is queued.

Coverage clarification committed and pushed: e845e148b7ced2d57df1dfa4f193ffa8cd1270b3. S13 now also covers D237 personal-machine join/removal: the draft omits narrow visible starter/built-in authority, while manage-own bundles rule edits and reinstalls. Recommend narrowly named actions under D16, never implicit access from ownership. Counts stay 37 findings, 28 P0 / 8 P1 / 1 P2. Diff check passed. Previous clarification SHAs: b419b4b30a44e2cd76310b06715e4b1cbbc417a1 (D128 vs D166); a90c9471 (ordinary authorized_keys vs matching login rule). Full milestone Rust tests and dependency checks passed; static release builds remain in progress; final-head gate is queued.

kayg commented

2026-10-12 11:44:33 +00:00

Author

Owner

Gate blocker on e845e148b7: scripts/verify fast exits 1 in the static-build row. x86_64 musl binary is 21,857,264 bytes; maximum is 16,404,816 (5,452,448 over). fmt, VT native fmt, CLI compile-out, workspace clippy, workspace tests and cargo-deny pass. Rust failure exits the dispatcher before TypeScript or aarch64 checks. No host-load test exception was needed. Build sources match origin/dev c0d01d2285; complete changed-path list relative to that ref:
docs/design/TASTE.md
docs/design/access-rules-verification/round1-soundness.md
docs/design/access-rules.md

D243 size reduction on the development line is needed from the orchestrator/integration lane before this gate can pass; this design-review branch adds no binary code. Final-head full run remains active, and supplemental TypeScript checks will cover the skipped functional rows. Verbatim size failure:

PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 21857264 bytes

Gate blocker on e845e148b7ced2d57df1dfa4f193ffa8cd1270b3: scripts/verify fast exits 1 in the static-build row. x86_64 musl binary is 21,857,264 bytes; maximum is 16,404,816 (5,452,448 over). fmt, VT native fmt, CLI compile-out, workspace clippy, workspace tests and cargo-deny pass. Rust failure exits the dispatcher before TypeScript or aarch64 checks. No host-load test exception was needed. Build sources match origin/dev c0d01d2285b92ea8e452f10a3a0d8b479fa1bff8; complete changed-path list relative to that ref: docs/design/TASTE.md docs/design/access-rules-verification/round1-soundness.md docs/design/access-rules.md D243 size reduction on the development line is needed from the orchestrator/integration lane before this gate can pass; this design-review branch adds no binary code. Final-head full run remains active, and supplemental TypeScript checks will cover the skipped functional rows. Verbatim size failure: ```text PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 21857264 bytes ```

kayg commented

2026-10-12 11:44:57 +00:00

Author

Owner

Round 1 surface matrix and findings committed: 8ded0646c8 (branch access-rules-r1-surfaces; base b0691640ec).

Evidence: docs/design/access-rules-verification/round1-surfaces.md has the 12 exact sentence/body pairs, surface mappings, 13 valid JSON examples, and the shared check/audit/diff/refusal renderer. Scratch probe: 10,000 generated rules, 0 round-trip failures; 5 hostile names, 0 failures; original undefined-delimiter probe 3/5 failures; 0 noncanonical escape spellings accepted.

Finding evidence, with full scenario, model statement, failure and smallest fix in the linked section:

F-SURF-01 P0: missing local username can fall back to root (line 605).
F-SURF-02 P0: scoped management can expose unrelated machines (line 612).
F-SURF-03 P0: one tag can affect a multi-tag machine (line 619).
F-SURF-04 P1: the open default cannot be narrowed by adding a union member (line 626).
F-SURF-05 P1: the built-in session action is outside the verb/schema model (line 633).
F-SURF-06 P1: plugin action granularity cannot fit the five verbs (line 640).
F-SURF-07 P1: login checks need separate network and role context (line 647).
F-SURF-08 P1: unquoted names and delimiters are ambiguous; draft probe failed 3/5 (line 654).
F-SURF-09 P1: files-only scope does not identify allowed file operations (line 661).
F-SURF-10 P1: approval cadence, duration start and time zone are unspecified (line 668).
F-SURF-11 P0: concurrent next-machine requests can consume a one-time boot more than once (line 675).
F-SURF-12 P1: CLI/API/MCP, check, audit and refusal outputs lack a shared contract (line 682).
F-SURF-13 P2: app list grouping and Mesh arrow visibility can hide rule kinds (line 689).
F-SURF-14 P2: session, username and AI-owner example wording depends on context or reads awkwardly (line 696).

Counts: P0 4, P1 8, P2 2. Cases that held up are recorded at line 703 onward.

Round 1 surface matrix and findings committed: 8ded0646c8269a6e1c529b380193cd23bd41918a (branch access-rules-r1-surfaces; base b0691640ec5ab63423061d7a9d67e4e69032f1f1). Evidence: docs/design/access-rules-verification/round1-surfaces.md has the 12 exact sentence/body pairs, surface mappings, 13 valid JSON examples, and the shared check/audit/diff/refusal renderer. Scratch probe: 10,000 generated rules, 0 round-trip failures; 5 hostile names, 0 failures; original undefined-delimiter probe 3/5 failures; 0 noncanonical escape spellings accepted. Finding evidence, with full scenario, model statement, failure and smallest fix in the linked section: - F-SURF-01 P0: missing local username can fall back to root (line 605). - F-SURF-02 P0: scoped management can expose unrelated machines (line 612). - F-SURF-03 P0: one tag can affect a multi-tag machine (line 619). - F-SURF-04 P1: the open default cannot be narrowed by adding a union member (line 626). - F-SURF-05 P1: the built-in session action is outside the verb/schema model (line 633). - F-SURF-06 P1: plugin action granularity cannot fit the five verbs (line 640). - F-SURF-07 P1: login checks need separate network and role context (line 647). - F-SURF-08 P1: unquoted names and delimiters are ambiguous; draft probe failed 3/5 (line 654). - F-SURF-09 P1: files-only scope does not identify allowed file operations (line 661). - F-SURF-10 P1: approval cadence, duration start and time zone are unspecified (line 668). - F-SURF-11 P0: concurrent next-machine requests can consume a one-time boot more than once (line 675). - F-SURF-12 P1: CLI/API/MCP, check, audit and refusal outputs lack a shared contract (line 682). - F-SURF-13 P2: app list grouping and Mesh arrow visibility can hide rule kinds (line 689). - F-SURF-14 P2: session, username and AI-owner example wording depends on context or reads awkwardly (line 696). Counts: P0 4, P1 8, P2 2. Cases that held up are recorded at line 703 onward.

kayg commented

2026-10-12 11:55:00 +00:00

Author

Owner

Round 1 soundness design review finished; required full gate is blocked by binary size.

Head: e845e148b7; branch access-rules-r1-soundness, pushed. Findings: docs/design/access-rules-verification/round1-soundness.md. 37 findings: 28 P0, 8 P1, 1 P2. Every entry has a named scenario, model evidence, failure and minimal proposed repair. Coverage includes all listed slot classes (4,000 symbolic single-ending shapes, not runtime requests), all eight safety-property attempts, indirect changes, and cases that hold. Reviewer checklist completed. Draft spec unchanged; no implementation, deployment or performance claims.

Top five findings:

S03 (P0): scoped manage can change rules outside its scope; old/new resource authorization and D211 all-tags coverage are absent.
S01 (P0): preferred deploy/shared account can match “their own username”, authorizing a different account than written.
S18 (P0): at-once cut-off conflicts with disconnected direct-session leases (D128) and indefinite offline mesh rules (D166); D242 completion semantics need resolution.
S30 (P0): boot enrollment promises no other access but broad reach/login defaults immediately match the enrolled host.
S32 (P0): lists, checks, why, DNS, chips and references can expose hidden resources unless the same visibility contract filters them.

Atomic pushed commits:
e845e148 docs(access): preserve narrow personal-machine lifecycle actions (#186)
a90c9471 docs(access): cover ordinary key login authorization boundary (#186)
b419b4b3 docs(access): distinguish offline mesh from direct session leases (#186)
e619ffc4 docs(access): map safety coverage and clarify ending finding (#186)
f7d710f7 docs(access): verify conditions revocation and boot safety (#186)
37275fe5 docs(access): identify identity and scope soundness gaps (#186)

Validation: unique finding IDs/count assertions and git diff --check pass. Full scripts/verify fast at this head exits 1: fmt, native fmt, CLI plugin compile-out, clippy, Rust tests and cargo-deny pass; x86_64 static binary is 21,857,264 bytes against maximum 16,404,816 (5,452,448 over). The dispatcher stops before aarch64 and TypeScript. Supplemental Bash invocation of ts_verify_fast exits 0 (checksums, compilers, unit tests, production build, transfer budget and protocol differential tests). No failing host-load test required a baseline exception.

Complete build sources are unchanged relative to origin/dev c0d01d2285; only docs/design/TASTE.md, docs/design/access-rules.md and this new report differ. Passing the full gate needs the D243 binary size reduction from the development/integration lane; no budget was changed. Build-host timing lines below are verbatim mandatory gate output, not performance evidence. Scratch build output is being deleted after preserving this issue record. Issue remains open.

Final-head scripts/verify fast output, verbatim (exit 1):

METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=301.58 p99_ms=304.29 result=PASS

==> fmt

==> VT native fmt

==> CLI plugin compile-out
disabled CLI plugin dependencies: absent from normal dependency graph
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.14s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal-d0028d263474a180)

running 24 tests
test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok
test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok
test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok
test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok
test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok
test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok
test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test status_tests::custom_named_server_service_is_reported_as_running ... ok
test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok
test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok

test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s


==> clippy
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.76s

==> test
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.49s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal-d549e36661370196)

running 65 tests
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok
test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok
test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok
test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok
test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test status_tests::custom_named_server_service_is_reported_as_running ... ok
test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok
test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok

test result: ok. 65 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.07s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/agent_daemon-5de2ce691037a6fb)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 32.59s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/agent_queues-e091edc68b27f96c)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 42.86s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/agent_review-d94b1e14e60e4ef2)

running 8 tests
test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.85s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/agent_sessions-02290b123f5f2fd1)

running 3 tests
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok
test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok
test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.52s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/idle_canary-26b2a47f3626ff86)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.40s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/remote_output-174b9538baf046d1)

running 1 test
test remote_refusal_matches_its_declared_cli_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.29s

     Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/session_bounds_review-72c64f17fd25b658)

running 1 test
test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.95s

     Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/session_exit_events-11a4cce005fc09ec)

running 1 test
test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.53s

     Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/session_retention-2365452bec4dac67)

running 1 test
test bounded_owned_exit_reconnects_as_ended_with_status ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.66s

     Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/setup_output-0aeb77f16924cef7)

running 1 test
test setup_output_keeps_legacy_and_versioned_readers ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/shim-c81baaf26e3012d1)

running 13 tests
test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok
test unowned_normal_exit_retires_promptly_and_records_status ... ok
test detached_shell_exit_reaps_shim_within_one_second ... ok
test double_fork_survives_parent_death ... ok
test disallowed_signal_only_disconnects_peer ... ok
test replacement_connection_and_malformed_limit ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test real_shell_reconnect_resize_and_delivered_exit ... ok
test attached_backpressure_and_detached_progress ... ok
test delivered_exit_cannot_release_another_owning_window ... ok
test owned_exit_releases_promptly_on_window_close ... ok
test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.21s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/ssh_askpass-617ca478b5d79487)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/vt_credit-0a8dc350571af348)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.72s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/vt_reconnect-ecf739816bc14d42)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.72s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_agent-dc304b9d51d0941a)

running 86 tests
test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok
test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok
test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok
test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok
test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok
test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok
test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok
test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok
test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok
test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok
test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok
test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok
test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok
test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok
test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope
test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok
test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok
test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok
test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok

test result: ok. 74 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 11.03s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/transport-02d53fbe758b717f)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_mesh-25b71fd0307aac40)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/default_arrow-6d2e8df0e7b48da6)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/properties-cb03b103616f12c2)

running 14 tests
test directional_grants_union_and_minimal_updates ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test names_versions_and_backend_status ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.72s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/rotation_time-961162d4330c2fec)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_plugin_api-c495c2150d66af78)

running 20 tests
test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok
test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok
test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok
test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok
test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok
test action::tests::registry_rejects_inconsistent_json_schemas ... ok
test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok
test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test release_version::tests::accepts_only_worker_version_forms ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::machine_actions_are_declared_without_entering_human_discovery ... ok
test tests::public_dispatch_cannot_call_a_machine_control_action ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok
test tests::operator_presentation_cannot_follow_a_private_control_action ... ok
test tests::notifications_are_declared_json_bounded_and_drained_once ... ok

test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/routing_review-b99b0b882dabc235)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_plugin_backup-a417bdd50ad1b333)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_plugin_host_facts-4f71949982aad5d8)

running 13 tests
test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok
test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok
test tests::configured_memory_floor_refuses_with_current_host_counters ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_plugin_mesh-1b760e879d6cc016)

running 25 tests
test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing.
test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok
test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok
test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok
test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok
test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok
test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok
test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok
test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok
test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok
test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok
test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok
test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok
test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok
test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok
test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok
test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok
test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok

test result: ok. 17 passed; 0 failed; 8 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/configuration-836876ba6734f0d1)

running 4 tests
test edition_default_is_explicit_and_build_selected ... ok
test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok
test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok
test large_valid_port_policy_is_split_without_a_port_count_cap ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.37s

     Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/kernel-8886a63e9998e503)

running 6 tests
test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/restart_route_ownership-915aa90068a8947f)

running 1 test
test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/review_endpoint_transaction-466627b0ed41f23e)

running 1 test
test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/review_ingress_translation-bd8664555dc4f00b)

running 2 tests
test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/review_local_delivery-b93d5857cea9a210)

running 2 tests
test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/review_restart_routes-2842f5c26f6abc6e)

running 1 test
test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/review_route_inventory-0efd1dc3b9824c23)

running 2 tests
test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/review_route_scope-2cbe953ad2ece6af)

running 1 test
test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/review_shutdown_budget-cb0fcfe1b2aad42f)

running 1 test
test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/review_shutdown_restart-c5e07544297f612a)

running 3 tests
test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof.
test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.
test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.

test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/settings.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/settings-0d4e5c1ccc396650)

running 1 test
test default_switch_requires_owner_freshness_and_the_preview_revision ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/store.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/store-653d928dd28e0534)

running 5 tests
test absent_discovery_preserves_the_last_known_endpoint ... ok
test key_replacement_preserves_identity_and_addresses_after_restart ... ok
test required_server_membership_cannot_be_deleted ... ok
test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok
test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.37s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_plugin_relay-d765ce907b6d6285)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_plugin_release-d9a3a22170648e3d)

running 8 tests
test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency
test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok
test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok
test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok
test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok
test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok
test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok
test latest::tests::cancellation_joins_verification ... ok

test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.55s

     Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/review_pool-7342401812584e29)

running 1 test
test pending_channel_writers_preserve_authority_read_capacity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.57s

     Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/review_restart-433d5f6159022764)

running 2 tests
test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification
test restarted_latest_reclaims_metadata_after_process_stop ... ok

test result: ok. 1 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_plugin_remote-befabe8c66488616)

running 12 tests
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.04s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_plugin_ssh-8fc5a3d5ae8e8da5)

running 13 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 12 filtered out; finished in 0.00s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 12 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/auth_order-a6672937b409eb18)

running 6 tests
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/build_removal-ea54acad90939da0)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.95s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/concurrency-84194037b61b4a88)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test component_off_retires_a_real_native_helper ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/config_isolation-7ef0e56361e7afa9)

running 2 tests
test synthetic_master_socket_is_private_at_creation ... ok
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.23s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/credentials-d8295318c2cb85c8)

running 3 tests
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/diagnostics-07214f0a23810c1c)

running 8 tests
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test status_mapping_preserves_authentication_and_missing_payload_classification ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test every_failed_step_names_the_step_and_a_next_action ... ok
test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.17s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/event_metadata-44d697ac35cff957)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/foreground-a7c134dfcb5c5797)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.26s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/host_trust-956578b69494d660)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/install-c9a4eb681da6c6e1)

running 30 tests
test command_failure_names_upload_join_install_and_start_separately ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok

test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.53s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/model-8d8a118fb482cb01)

running 5 tests
test addresses_never_become_options_or_shell_syntax ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/payload_source.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/payload_source-2b9cf9e8f172fa9d)

running 2 tests
test verification_failure_names_step_and_stops_before_upload ... ok
test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/probe_check-4c243b7c35682a6f)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/process-52eb00630d90c109)

running 5 tests
test completed_helper_retires_descendants_with_closed_pipes ... ok
test cancellation_retires_the_helper_descendant_too ... ok
test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.20s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/proxy_policy-ca5da5ebac2b936e)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/real_ssh-7e667740bdea77a4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/single_connection-824b96a985bd76a6)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/source_completeness-221723904e9d35a3)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/trust_round2-78f0ff3b67dbad9b)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_server-e66837f90a21069b)

running 368 tests
test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions
test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok
test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok
test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok
test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok
test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok
test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket has been running for over 60 seconds
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser has been running for over 60 seconds
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies has been running for over 60 seconds
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies has been running for over 60 seconds
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch has been running for over 60 seconds
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket has been running for over 60 seconds
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok
test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope
test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok
test release_build_tests::release_build_marker_is_explicit ... ok
test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok
test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok
test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok
test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark
test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok
test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok
test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok
test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok
test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope
test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok
test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification
test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok
test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok
test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok
test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok
test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok
test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok
test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok
test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok
test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok
test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok
test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok

test result: ok. 329 passed; 0 failed; 39 ignored; 0 measured; 0 filtered out; finished in 305.81s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/catalog_startup-7dd8be68f0697857)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/enrollment-32f61b19a7c9b610)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.87s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/mesh_parser-13fd59a4a8708f05)

running 2 tests
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok
test review_grant_parser_rejects_unknown_nested_port_fields ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/mesh_review_plugin-1de3bc1351e8739c)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/mesh_review_policy-44ce3d3efaec58dc)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/mesh_review_role_scope-4848c1545d27cd89)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/plugin_host_review-e125600348cb05bb)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_disable_answers_inflight_call ... ok
test review_exited_worker_ends_its_subscriptions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/plugin_settings_review-f9f86b6508eec089)

running 3 tests
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.48s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/remote_plugin_contract-467d546d48fb6a49)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.05s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_shim-6198daaedaec1ac5)

running 87 tests
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok
test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok
test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok
test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok
test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok
test frame::checks::golden::every_frozen_message ... ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test ring::checks::tests::wrap_and_exact_offsets ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test pty::child_locale_tests::spawned_login_shell_receives_selected_locale_without_other_host_variables ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok

running 1 test
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 86 filtered out; finished in 0.01s

test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test locale::tests::invalid_shell_expressions_are_ignored ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 74 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 92.91s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/detach-f17510b824ed2469)

running 2 tests
test detached_child_restores_default_signals_without_changing_parent ... ok
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.94s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/mouse-0d16f77afbdea7cb)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.44s

     Running tests/process_exit_descriptor.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/process_exit_descriptor-67dfefbd2451d374)

running 2 tests
test invalid_pid_never_creates_a_descriptor ... ok
test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_backup

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_relay

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_release

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   ├── infraternal-fuzz v0.1.0
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0 (*)
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-mesh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   ├── infraternal-plugin-release v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-mesh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   ├── infraternal-fuzz v0.1.0 (*)
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-mesh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-mesh v0.1.0 (*)
         ├── infraternal-plugin-release v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-mesh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   ├── hyper v1.11.1
         │   │   ├── axum v0.8.9
         │   │   │   ├── infraternal-fuzz v0.1.0
         │   │   │   └── infraternal-server v0.1.0
         │   │   │       ├── infraternal v0.1.0
         │   │   │       └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── axum-server v0.8.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── hyper-util v0.1.21
         │   │   │   ├── axum v0.8.9 (*)
         │   │   │   ├── axum-server v0.8.0 (*)
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   │   ├── infraternal v0.1.0 (*)
         │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal v0.1.0 (*)
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-mesh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   └── infraternal-plugin-mesh v0.1.0
             │   │   │       ├── infraternal v0.1.0 (*)
             │   │   │       ├── infraternal-agent v0.1.0 (*)
             │   │   │       ├── infraternal-fuzz v0.1.0 (*)
             │   │   │       └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-backup v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   │   ├── infraternal-plugin-relay v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-release v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   ├── infraternal-plugin-release v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:197:1
    │  
197 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
198 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   ├── infraternal-fuzz v0.1.0 (*)
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-mesh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │       └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-backup v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-relay v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-release v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-mesh v0.1.0 (*)
              ├── infraternal-plugin-release v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:199:1
    │  
199 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
201 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:202:1
    │  
202 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:204:1
    │  
204 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
205 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
206 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:248:1
    │  
248 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
249 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-mesh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-backup v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-relay v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-release v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-release v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-release v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │   │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── (dev) infraternal v0.1.0 (*)
      │       ├── (dev) infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:251:1
    │  
251 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
252 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │       ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-release v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:254:1
    │  
254 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
255 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   ├── infraternal v0.1.0 (*)
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0
      │       │   └── infraternal-server v0.1.0
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── infraternal-fuzz v0.1.0 (*)
      │       ├── infraternal-fuzz v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:256:1
    │  
256 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
257 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   ├── infraternal v0.1.0 (*)
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal v0.1.0 (*)
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-fuzz v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-backup v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-relay v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-release v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   ├── infraternal-plugin-release v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   ├── infraternal-fuzz v0.1.0 (*)
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:314:1
    │  
314 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
315 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-release v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   ├── hyper v1.11.1
      │           │   │   ├── axum v0.8.9 (*)
      │           │   │   ├── axum-server v0.8.0 (*)
      │           │   │   ├── hyper-util v0.1.21
      │           │   │   │   ├── axum v0.8.9 (*)
      │           │   │   │   ├── axum-server v0.8.0 (*)
      │           │   │   │   ├── infraternal v0.1.0 (*)
      │           │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── (dev) infraternal v0.1.0 (*)
      │           ├── (dev) infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-mesh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-backup v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-relay v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-release v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
    Finished `release` profile [optimized] target(s) in 0.35s
/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 21857264 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Supplemental TypeScript output, verbatim (exit 0):


==> Vendored Ghostty artifact checksums
dist/ghostty-web.js: OK
dist/ghostty-vt.wasm: OK
dist/index.d.ts: OK

==> TypeScript protocol compiler

==> Tracer compiler, precompression and bundle transfer budget
bun install v1.4.2 (744846f84)

+ @types/bun@1.3.8
+ @types/node@22.19.0
+ @types/ws@8.5.10
+ playwright@1.61.1
+ typescript@5.9.3
+ ws@8.18.3
+ @scure/bip39@2.2.0
+ geist@1.7.2

38 packages installed [393.00ms]
$ bun x tsc --project tsconfig.json
bun test v1.4.2 (744846f84)

precompress.test.ts:
(pass) text sidecars round-trip deterministically; compressed formats remain identity [17.05ms]

browser-build.test.ts:
(pass) the browser renderer has no unresolved Vite Node-file shim request [17.73ms]

src/perf-detector.test.ts:
(pass) FrameDetector > estimates the refresh from the median and snaps it [0.76ms]
(pass) FrameDetector > nothing is a drop before the rate is known [0.06ms]
(pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.15ms]
(pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.21ms]
(pass) FrameDetector > the first frame after a pause is not an interval [0.06ms]
(pass) FrameDetector > fps, p95 and window read the ring [0.24ms]
(pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.25ms]
(pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.05ms]

src/canvas/recency.test.ts:
(pass) touch moves an item to the front and never duplicates it [0.17ms]
(pass) repeating the front item changes nothing [0.07ms]
(pass) the list is capped, so the oldest items fall off [0.06ms]
(pass) top skips items that are no longer live, without losing them [0.13ms]
(pass) recentRows: five used windows in reverse order of use, from 54 windows [0.29ms]
(pass) recentRows: a view with three windows and no use shows them in order [0.05ms]
(pass) recentRows: used windows lead, the rest fill up to five in window order [0.08ms]

src/canvas/windows/details-facts.test.ts:
(pass) host facts become plain-language details rows [0.51ms]
(pass) unknown optional host facts stay absent instead of appearing as placeholders [0.13ms]
(pass) extended info off: the machine tab shows only the essentials, ungrouped, and there is no More section [0.24ms]
(pass) extended info on: every fact sits under System, Resources or Access [0.13ms]
(pass) the header follows the machine's own facts, not the platform the host list guessed [0.10ms]
(pass) before facts arrive the host's platform names the header [0.09ms]
(pass) a reported system with no platform mark still names the header and shows no mark [0.04ms]

src/canvas/mesh/protocol.test.ts:
(pass) the server's own list becomes nodes, tags and grants, by name [0.47ms]
(pass) without `access` (today's server) the person may view and may not edit [0.27ms]
(pass) fields the server does not send are absent, never invented [0.13ms]
(pass) anything that is not a list is refused, whole [8.14ms]
(pass) a node's own tag list and the tag table agree even when a server sends only one [0.22ms]
(pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.27ms]
(pass) answers carry the new revision, and a create the new arrow's id [0.07ms]
(pass) endpoints go out as the server writes them: a node by id, a tag by name [0.08ms]

src/canvas/mesh/layout.test.ts:
(pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.66ms]
(pass) the layout is deterministic and does not depend on input order [2.92ms]
(pass) no two cards overlap, and every card lies inside the graph [5.37ms]
(pass) the sheet is wider than tall, roughly 16:10 [1.26ms]
(pass) a pinned node stays where it was put and the others do not move [1.67ms]
(pass) a pin beyond the sheet grows the graph [0.23ms]
(pass) a host's other tags do not move it; a tag nobody carries still has its node [0.12ms]
(pass) 1,000 nodes lay out in a few milliseconds [5.07ms]

src/canvas/layout/stops.test.ts:
(pass) a view that fits the viewport has one stop, centred [0.60ms]
(pass) a wide view has one stop per column and the last stop ends at the right edge [0.15ms]
(pass) a view taller than the viewport is scaled down so it fits [0.03ms]
(pass) nearestStop picks the stop whose centre is closest [0.16ms]
(pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.11ms]
(pass) a small graph keeps one stop per node column [0.06ms]
(pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.06ms]
(pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.06ms]

src/canvas/layout/grid.test.ts:
(pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [0.85ms]
(pass) closing the new half gives the layout back exactly, in the model [0.78ms]
(pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.27ms]
(pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.19ms]
(pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.36ms]
(pass) closing the window split down gives its band back to the window above and to the partner [0.34ms]
(pass) a window split down in a plain column stacks under it and moves the windows below down [0.10ms]
(pass) new window right opens a full-size column after the whole group, never inside it [0.21ms]
(pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.06ms]
(pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.10ms]
(pass) random sequences of split right, split down, new window right and close never break the grid [38.11ms]
(pass) closing every window of a group returns the view to nothing, with no problem on the way [0.56ms]
(pass) a full-width band under a group moves nothing and extends the group by one band [0.29ms]
(pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.20ms]

src/canvas/layout/geometry.test.ts:
(pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.43ms]
(pass) a chain of neighbours is pushed in turn [0.09ms]
(pass) snapping rounds to whole cells [0.03ms]
(pass) reach follows grants through tags and keeps the relay [0.18ms]
(pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.17ms]
(pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.03ms]
(pass) a desktop column is the same alone and in a strip [0.01ms]

src/canvas/sessions/live-inventory.test.ts:
(pass) a host snapshot replaces cached session rows and keeps only live shims [1.61ms]
(pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.33ms]
(pass) inventory remembers a remote session and refuses a cross-host attach [0.26ms]
(pass) superseded status snapshots release records for sessions this device never opened [1.07ms]
(pass) superseding a sidecar preserves status for a window opened on this device [0.12ms]
(pass) a census predating a new shell does not permanently retire its confirmed live ID [0.09ms]
(pass) a final Close before the first positive census never revives a new ID [0.06ms]
(pass) a later absence retires a new ID after its first positive census [0.08ms]
(pass) another host's census cannot clear a new shell's census fence [0.08ms]
(pass) another host's close cannot clear a new shell's census fence [0.03ms]

src/canvas/sessions/details-live.test.ts:
(pass) a refused host facts action stops its recurring timer [0.72ms]
(pass) a detected operating system supplies the live popover mark [0.70ms]

src/canvas/sessions/live.test.ts:
(pass) an enrolled host opens by UUID and splits keep that authority [0.56ms]
(pass) unknown and ambiguous labels never open an embedded shell [0.05ms]
(pass) removed hosts disappear from inventory and cannot route a new shell [0.08ms]

src/canvas/sessions/gone-review.test.ts:
(pass) selecting a known gone session keeps its final exited state [0.14ms]
(pass) a known retired status survives repeated selection and generic ended answers [0.08ms]

src/canvas/sessions/open-refusal.test.ts:
(pass) memory refusal retains the reason and current counters [0.60ms]
(pass) legacy refusals still work and malformed counters never reach the message [0.33ms]
(pass) product copy names the host and counters and never renders untrusted server text [0.49ms]
(pass) oversized refusal JSON is ignored before parsing [0.09ms]

src/canvas/model/document.test.ts:
(pass) a document holds references and layout, never content [0.26ms]
(pass) a document survives JSON and rebuilds the same columns [0.57ms]
(pass) a target that no longer exists is dropped, and an emptied column with it [0.08ms]
(pass) parseDocument rejects anything that is not a document of this format [0.21ms]
(pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.18ms]
(pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.30ms]
(pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.22ms]
(pass) a plain view is saved without spans or bands, exactly as before D212 [0.04ms]

src/canvas/addhost/real.test.ts:
(pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.19ms]
(pass) parsing the server's data > the server key needs its public key and fingerprint [0.04ms]
(pass) parsing the server's data > an install command needs a lifetime [0.03ms]
(pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [0.82ms]
(pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.17ms]
(pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [0.65ms]
(pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.14ms]
(pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.12ms]
(pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.06ms]
(pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.21ms]
(pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.34ms]

src/canvas/addhost/authority.on-demand.test.ts:
(pass) CA wrapping matches the contract's HKDF domain and separates generations [0.85ms]

src/canvas/addhost/model.test.ts:
(pass) stagesOf > a host with no event is waiting everywhere [0.21ms]
(pass) stagesOf > check before sign-in is detecting how to sign in [0.12ms]
(pass) stagesOf > the sign-in report finishes detect and starts the system check [0.07ms]
(pass) stagesOf > install, facts and connect map to install, enrol and first session [0.09ms]
(pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.16ms]
(pass) stagesOf > an unsupported host fails the system check, after sign-in [0.05ms]
(pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.05ms]
(pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.11ms]
(pass) authLabel > names the method and a trusted network provider only [0.05ms]
(pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.15ms]
(pass) guideFor > each failure kind names its fix [0.06ms]
(pass) guideFor > mesh-policy words say possible, not certain [0.02ms]
(pass) parseTarget > reads user, host and port [0.11ms]
(pass) parseTarget > refuses what cannot name a host [0.02ms]
(pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.27ms]
(pass) parseSshConfig > recognises config text [0.04ms]
(pass) parseSshConfig > a hostname that is an option is dropped [0.03ms]
(pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.04ms]
(pass) plain words > no headline carries an arrow, an id or an API noun [0.12ms]
(pass) only a completed canonical host identity becomes terminal authority [0.10ms]
(pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.03ms]
(pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.03ms]
(pass) matchListed > a name that is exactly one host's id or address names that host [0.08ms]
(pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.02ms]
(pass) matchListed > a partial name that starts several hosts names none and waits [0.01ms]
(pass) matchListed > a new name that starts no host is neither named nor waiting [0.01ms]
(pass) install diagnostics name the failed step and public host error [0.04ms]
(pass) missing payload tells the operator the architecture and expected server path [0.04ms]
(pass) an already added host says so and offers opening its existing terminal [0.02ms]
(pass) release payload verification names the architecture step and plain reason [0.01ms]

src/canvas/addhost/wizard.test.ts:
(pass) a saved-key prompt completing after close never starts an SSH attempt [0.41ms]
(pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.23ms]
(pass) ready CA begins the requested installation mode without another prompt [0.09ms]
(pass) closing during CA confirmation never starts an SSH attempt [0.20ms]
(pass) a typed root login requires explicit consent before any installation [0.15ms]

../../packages/ui/src/spring.test.ts:
(pass) a missed frame does not stretch a settled spring [0.36ms]
(pass) motion follows elapsed time across frame rates and damping regimes [0.64ms]

chunk-classes.test.ts:
(pass) the first screen is critical, the canvas product module and what only it uses are deferred [0.71ms]
(pass) a chunk that both sides use stays critical [0.10ms]
(pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.26ms]

test/recovery-ui.test.ts:
(pass) compiled recovery UI mode off obeys its URL boundary [3.45ms]
(pass) compiled recovery UI mode preview obeys its URL boundary [2.11ms]
(pass) compiled recovery UI mode 1 obeys its URL boundary [2.03ms]

test/recovery-crypto.test.ts:
(pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [9.83ms]
(pass) 100 repeated wrapping operations generate independent salts and nonces [16.64ms]

test/recovery-rotation.test.ts:
(pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [5.96ms]
(pass) abandoned word acknowledgement uploads nothing [1.95ms]
(pass) settled acknowledgement cannot upload later (dismissed) [1.82ms]
(pass) settled acknowledgement cannot upload later (no acknowledgement) [3.96ms]

test/recovery-wait.test.ts:
(pass) server remaining wait 0s is accepted through the capability policy maximum [1.11ms]
(pass) server remaining wait 86400s is accepted through the capability policy maximum [0.73ms]
(pass) server remaining wait 90000s is accepted through the capability policy maximum [0.93ms]
(pass) server remaining wait 172800s is accepted through the capability policy maximum [0.65ms]
(pass) malformed or excessive remaining wait -1 is denied [0.81ms]
(pass) malformed or excessive remaining wait 0.5 is denied [0.61ms]
(pass) malformed or excessive remaining wait 172801 is denied [0.66ms]
(pass) malformed or excessive remaining wait 9007199254740992 is denied [0.70ms]
(pass) malformed or excessive remaining wait 90000 is denied [0.66ms]

 168 pass
 0 fail
 11332 expect() calls
Ran 168 tests across 26 files. [261.00ms]
$ bun run build.ts
built chunk-z93cxfvm.js, chunk-bcrmm064.js, chunk-3g02wn4t.js, chunk-c3hd7e33.js, chunk-j9gks9kw.js, chunk-p4pq9b17.js, chunk-a895a34j.js, chunk-gtm292qm.js, chunk-6vtc0agk.js, chunk-e8hwzj6w.js, chunk-3jfd6y3h.js, chunk-5s6a3m50.js, main.js, chunk-969atqet.js, chunk-15nnyy73.js, chunk-vxv25w33.js, chunk-jzjctnkh.js, chunk-pje1mxac.js, chunk-c1dgfc87.js, chunk-0dj0z8nw.js, chunk-yr0r38s4.js, chunk-8t7pe4ht.js, chunk-qy2p4tcb.js, chunk-axbkkqp1.js, chunk-a3tnmqq9.js, chunk-694zdmn6.js, chunk-hdbm75rr.js, chunk-3n13ezxw.js, chunk-0hfae3mr.js, chunk-6fcfq7fs.js, chunk-t0fmgjex.js, chunk-jbpydr6f.js, chunk-778thkbs.js, chunk-ffqpz744.js, chunk-vexgjzw4.js, chunk-nks0vz2v.js, chunk-1yrg8bhf.js, chunk-q56hm25z.js, chunk-9xd3g65e.js, chunk-28rbcdd5.js, chunk-61xwpgvs.js, chunk-80ftd1rc.js, chunk-433eyr4g.js, chunk-vv34e0bb.js, chunk-crd1grvv.js, chunk-rh6y9cg2.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-zz8xnybz.js, chunk-f2r0hhqc.js, chunk-2bcfkj59.js, chunk-1gmd2m5q.js, chunk-qhn2jnjb.js
onDemand chunk-ffqpz744.js: identity=5359 gzip=2579 brotli=2295 bytes
critical chunk-0dj0z8nw.js: identity=2519 gzip=1008 brotli=876 bytes
critical chunk-p4pq9b17.js: identity=707 gzip=368 brotli=306 bytes
critical chunk-8t7pe4ht.js: identity=1104 gzip=666 brotli=604 bytes
critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-q56hm25z.js: identity=10693 gzip=4125 brotli=3760 bytes
onDemand chunk-vexgjzw4.js: identity=4640 gzip=1932 brotli=1702 bytes
critical chunk-1gmd2m5q.js: identity=199 gzip=162 brotli=136 bytes
critical chunk-zz8xnybz.js: identity=9810 gzip=4016 brotli=3459 bytes
onDemand chunk-3n13ezxw.js: identity=4575 gzip=2012 brotli=1785 bytes
critical chunk-jzjctnkh.js: identity=15859 gzip=6182 brotli=5484 bytes
onDemand chunk-2bcfkj59.js: identity=1063 gzip=653 brotli=521 bytes
critical chunk-c1dgfc87.js: identity=590 gzip=327 brotli=319 bytes
onDemand chunk-vv34e0bb.js: identity=6773 gzip=3175 brotli=2885 bytes
onDemand chunk-nks0vz2v.js: identity=7662 gzip=3397 brotli=2971 bytes
critical faulty-terminal.worker.js: identity=1086 gzip=559 brotli=480 bytes
critical backdrop.worker.js: identity=243 gzip=212 brotli=165 bytes
onDemand chunk-e8hwzj6w.js: identity=191 gzip=170 brotli=130 bytes
onDemand chunk-5s6a3m50.js: identity=2108 gzip=1037 brotli=869 bytes
critical chunk-a895a34j.js: identity=88 gzip=88 brotli=74 bytes
critical chunk-vxv25w33.js: identity=5443 gzip=2605 brotli=2380 bytes
critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes
onDemand chunk-0hfae3mr.js: identity=1616 gzip=866 brotli=739 bytes
critical chunk-bcrmm064.js: identity=4499 gzip=1856 brotli=1635 bytes
onDemand chunk-t0fmgjex.js: identity=1170 gzip=705 brotli=589 bytes
onDemand chunk-gtm292qm.js: identity=228 gzip=178 brotli=165 bytes
onDemand chunk-778thkbs.js: identity=11529 gzip=4656 brotli=4255 bytes
critical chunk-pje1mxac.js: identity=17627 gzip=6253 brotli=5572 bytes
onDemand chunk-crd1grvv.js: identity=31922 gzip=12262 brotli=11026 bytes
onDemand chunk-694zdmn6.js: identity=6198 gzip=2792 brotli=2519 bytes
critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes
critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-rh6y9cg2.js: identity=2462 gzip=1107 brotli=935 bytes
onDemand chunk-6vtc0agk.js: identity=2420 gzip=1199 brotli=1078 bytes
onDemand chunk-15nnyy73.js: identity=2557 gzip=1180 brotli=1009 bytes
critical chunk-a3tnmqq9.js: identity=707945 gzip=204703 brotli=165886 bytes
onDemand chunk-j9gks9kw.js: identity=3891 gzip=1735 brotli=1516 bytes
onDemand chunk-hdbm75rr.js: identity=2824 gzip=1387 brotli=1196 bytes
critical chunk-yr0r38s4.js: identity=386 gzip=238 brotli=196 bytes
onDemand chunk-80ftd1rc.js: identity=48283 gzip=15179 brotli=13487 bytes
onDemand chunk-3g02wn4t.js: identity=5784 gzip=2189 brotli=1938 bytes
onDemand chunk-qy2p4tcb.js: identity=1026 gzip=623 brotli=498 bytes
onDemand chunk-3jfd6y3h.js: identity=6265 gzip=2105 brotli=1865 bytes
onDemand chunk-1yrg8bhf.js: identity=13384 gzip=5027 brotli=4502 bytes
deferred chunk-6fcfq7fs.js: identity=97656 gzip=33164 brotli=29284 bytes
critical main.js: identity=111029 gzip=40362 brotli=34971 bytes
critical chunk-qhn2jnjb.js: identity=42395 gzip=14483 brotli=12981 bytes
deferred chunk-c3hd7e33.js: identity=43000 gzip=16582 brotli=14638 bytes
critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes
critical chunk-433eyr4g.js: identity=162 gzip=150 brotli=127 bytes
onDemand chunk-jbpydr6f.js: identity=540 gzip=353 brotli=313 bytes
critical chunk-z93cxfvm.js: identity=21235 gzip=6857 brotli=6128 bytes
critical chunk-969atqet.js: identity=8377 gzip=3575 brotli=3180 bytes
JavaScript transfer, critical: identity=951648 gzip=294996/307200 brotli=245275/256000 bytes
JavaScript transfer, deferred: identity=140656 gzip=49746/51200 brotli=43922/45056 bytes
JavaScript transfer, onDemand: identity=185163 gzip=72623/20480 brotli=64548/18432 bytes
JavaScript transfer, onDemand largest chunk chunk-80ftd1rc.js: gzip=15179/20480 brotli=13487/18432 bytes (class total gzip=72623 brotli=64548, not limited)
fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes
fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes
fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes
fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes
fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes
fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes
fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes
fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes
fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes
fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes
fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes
fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes
fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes
fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes
fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes
fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes
fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes
fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes
fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes
fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes
Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes

==> Rust stream oracle (for the differential test)

==> TypeScript protocol tests
bun test v1.4.2 (744846f84)

src/mesh-review-revocation.test.ts:
(pass) review forbidden event cancels pending snapshot publication [5.82ms]
(pass) subscription forbidden ends delivery before a late refresh rejection [2.65ms]
(pass) subscription not found ends delivery before a late refresh rejection [12.50ms]
(pass) subscription invalid input ends delivery before a late refresh rejection [1.38ms]
(pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.24ms]
(pass) synchronous subscription refusal releases the transport exactly once [0.40ms]

src/codec.test.ts:
(pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [7.81ms]
(pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.36ms]
(pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.42ms]
(pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.29ms]
(pass) split mux header preserves trailing Close [1.41ms]

src/mesh-review-paged-error.test.ts:
(pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [13.91ms]
(pass) review earlier snapshot continuation cannot overwrite a delivered revision [7.26ms]
(pass) a newer paged event owns publication before an earlier refresh resumes [11.61ms]

src/mesh-review-refresh.test.ts:
(pass) review superseded refresh failure cannot replace authoritative resync [1.71ms]
(pass) superseded failure preserves a newer pending refresh [3.73ms]

src/stream.test.ts:
stream differential: 134 streams, 11439 schedules, zero divergences
(pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [4297.13ms]
(pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [10.17ms]

src/mesh.test.ts:
(pass) Mesh actions map to their typed action IDs and JSON inputs [1.92ms]
(pass) Mesh watch coalesces change bursts and never publishes an older revision [4.14ms]
(pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.11ms]

src/mesh-review-continuation.test.ts:
(pass) review continuation stops after stop [1.62ms]
(pass) review continuation stops after forbidden [1.62ms]
(pass) review continuation stops after superseded [1.31ms]

src/mesh-pagination.test.ts:
(pass) list assembles bounded pages using the same filter [0.51ms]
(pass) a changed revision discards earlier pages before assembling its restart [0.27ms]
(pass) malformed continuation is refused: {"revision":1,"offset":0} [0.42ms]
(pass) malformed continuation is refused: {"revision":2,"offset":1} [0.03ms]
(pass) malformed continuation is refused: {"revision":1,"offset":2} [0.01ms]
(pass) watch never publishes a partial page; withdrawn=false [1.60ms]
(pass) watch never publishes a partial page; withdrawn=true [1.27ms]
(pass) a superseding equal-revision resync wins over pending page assembly [1.78ms]

src/mesh-review-resync.test.ts:
(pass) review watch applies same-revision authoritative resync [0.42ms]
(pass) authoritative resync keeps priority over an equal-revision pending list [1.72ms]

src/mesh-vectors.test.ts:
(pass) every shared Mesh action vector passes through the typed client unchanged [2.52ms]
(pass) shared Mesh event vectors drive the typed watch adapter [6.76ms]

 36 pass
 0 fail
 34462 expect() calls
Ran 36 tests across 10 files. [4.46s]

Round 1 soundness design review finished; required full gate is blocked by binary size. Head: e845e148b7ced2d57df1dfa4f193ffa8cd1270b3; branch access-rules-r1-soundness, pushed. Findings: docs/design/access-rules-verification/round1-soundness.md. 37 findings: 28 P0, 8 P1, 1 P2. Every entry has a named scenario, model evidence, failure and minimal proposed repair. Coverage includes all listed slot classes (4,000 symbolic single-ending shapes, not runtime requests), all eight safety-property attempts, indirect changes, and cases that hold. Reviewer checklist completed. Draft spec unchanged; no implementation, deployment or performance claims. Top five findings: 1. S03 (P0): scoped manage can change rules outside its scope; old/new resource authorization and D211 all-tags coverage are absent. 2. S01 (P0): preferred deploy/shared account can match “their own username”, authorizing a different account than written. 3. S18 (P0): at-once cut-off conflicts with disconnected direct-session leases (D128) and indefinite offline mesh rules (D166); D242 completion semantics need resolution. 4. S30 (P0): boot enrollment promises no other access but broad reach/login defaults immediately match the enrolled host. 5. S32 (P0): lists, checks, why, DNS, chips and references can expose hidden resources unless the same visibility contract filters them. Atomic pushed commits: e845e148 docs(access): preserve narrow personal-machine lifecycle actions (#186) a90c9471 docs(access): cover ordinary key login authorization boundary (#186) b419b4b3 docs(access): distinguish offline mesh from direct session leases (#186) e619ffc4 docs(access): map safety coverage and clarify ending finding (#186) f7d710f7 docs(access): verify conditions revocation and boot safety (#186) 37275fe5 docs(access): identify identity and scope soundness gaps (#186) Validation: unique finding IDs/count assertions and git diff --check pass. Full scripts/verify fast at this head exits 1: fmt, native fmt, CLI plugin compile-out, clippy, Rust tests and cargo-deny pass; x86_64 static binary is 21,857,264 bytes against maximum 16,404,816 (5,452,448 over). The dispatcher stops before aarch64 and TypeScript. Supplemental Bash invocation of ts_verify_fast exits 0 (checksums, compilers, unit tests, production build, transfer budget and protocol differential tests). No failing host-load test required a baseline exception. Complete build sources are unchanged relative to origin/dev c0d01d2285b92ea8e452f10a3a0d8b479fa1bff8; only docs/design/TASTE.md, docs/design/access-rules.md and this new report differ. Passing the full gate needs the D243 binary size reduction from the development/integration lane; no budget was changed. Build-host timing lines below are verbatim mandatory gate output, not performance evidence. Scratch build output is being deleted after preserving this issue record. Issue remains open. Final-head scripts/verify fast output, verbatim (exit 1): ````text METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=301.58 p99_ms=304.29 result=PASS ==> fmt ==> VT native fmt ==> CLI plugin compile-out disabled CLI plugin dependencies: absent from normal dependency graph Finished `test` profile [unoptimized + debuginfo] target(s) in 0.14s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal-d0028d263474a180) running 24 tests test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test status_tests::custom_named_server_service_is_reported_as_running ... ok test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s ==> clippy Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.76s ==> test Finished `test` profile [unoptimized + debuginfo] target(s) in 0.49s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal-d549e36661370196) running 65 tests test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test status_tests::custom_named_server_service_is_reported_as_running ... ok test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test result: ok. 65 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.07s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/agent_daemon-5de2ce691037a6fb) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 32.59s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/agent_queues-e091edc68b27f96c) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 42.86s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/agent_review-d94b1e14e60e4ef2) running 8 tests test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.85s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/agent_sessions-02290b123f5f2fd1) running 3 tests test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.52s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/idle_canary-26b2a47f3626ff86) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.40s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/remote_output-174b9538baf046d1) running 1 test test remote_refusal_matches_its_declared_cli_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.29s Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/session_bounds_review-72c64f17fd25b658) running 1 test test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.95s Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/session_exit_events-11a4cce005fc09ec) running 1 test test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.53s Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/session_retention-2365452bec4dac67) running 1 test test bounded_owned_exit_reconnects_as_ended_with_status ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.66s Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/setup_output-0aeb77f16924cef7) running 1 test test setup_output_keeps_legacy_and_versioned_readers ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/shim-c81baaf26e3012d1) running 13 tests test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok test unowned_normal_exit_retires_promptly_and_records_status ... ok test detached_shell_exit_reaps_shim_within_one_second ... ok test double_fork_survives_parent_death ... ok test disallowed_signal_only_disconnects_peer ... ok test replacement_connection_and_malformed_limit ... ok active test user_scope_survives_parent_unit_stop ... ok test real_shell_reconnect_resize_and_delivered_exit ... ok test attached_backpressure_and_detached_progress ... ok test delivered_exit_cannot_release_another_owning_window ... ok test owned_exit_releases_promptly_on_window_close ... ok test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.21s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/ssh_askpass-617ca478b5d79487) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/vt_credit-0a8dc350571af348) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.72s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/vt_reconnect-ecf739816bc14d42) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.72s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_agent-dc304b9d51d0941a) running 86 tests test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000 test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok test result: ok. 74 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 11.03s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/transport-02d53fbe758b717f) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_mesh-25b71fd0307aac40) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/default_arrow-6d2e8df0e7b48da6) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/properties-cb03b103616f12c2) running 14 tests test directional_grants_union_and_minimal_updates ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test overlaps_are_reported_without_silent_range_changes ... ok test names_versions_and_backend_status ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test addresses_are_unique_stable_and_not_recycled ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.72s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/rotation_time-961162d4330c2fec) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_plugin_api-c495c2150d66af78) running 20 tests test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok test action::tests::registry_rejects_inconsistent_json_schemas ... ok test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test component_tests::component_declarations_cannot_create_servers ... ok test release_version::tests::accepts_only_worker_version_forms ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::machine_actions_are_declared_without_entering_human_discovery ... ok test tests::public_dispatch_cannot_call_a_machine_control_action ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test tests::operator_presentation_cannot_follow_a_private_control_action ... ok test tests::notifications_are_declared_json_bounded_and_drained_once ... ok test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/routing_review-b99b0b882dabc235) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_plugin_backup-a417bdd50ad1b333) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_plugin_host_facts-4f71949982aad5d8) running 13 tests test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok test tests::configured_memory_floor_refuses_with_current_host_counters ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_plugin_mesh-1b760e879d6cc016) running 25 tests test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing. test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok test result: ok. 17 passed; 0 failed; 8 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/configuration-836876ba6734f0d1) running 4 tests test edition_default_is_explicit_and_build_selected ... ok test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok test large_valid_port_policy_is_split_without_a_port_count_cap ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.37s Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/kernel-8886a63e9998e503) running 6 tests test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/restart_route_ownership-915aa90068a8947f) running 1 test test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/review_endpoint_transaction-466627b0ed41f23e) running 1 test test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/review_ingress_translation-bd8664555dc4f00b) running 2 tests test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/review_local_delivery-b93d5857cea9a210) running 2 tests test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/review_restart_routes-2842f5c26f6abc6e) running 1 test test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/review_route_inventory-0efd1dc3b9824c23) running 2 tests test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/review_route_scope-2cbe953ad2ece6af) running 1 test test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/review_shutdown_budget-cb0fcfe1b2aad42f) running 1 test test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/review_shutdown_restart-c5e07544297f612a) running 3 tests test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof. test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/settings.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/settings-0d4e5c1ccc396650) running 1 test test default_switch_requires_owner_freshness_and_the_preview_revision ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/store.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/store-653d928dd28e0534) running 5 tests test absent_discovery_preserves_the_last_known_endpoint ... ok test key_replacement_preserves_identity_and_addresses_after_restart ... ok test required_server_membership_cannot_be_deleted ... ok test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.37s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_plugin_relay-d765ce907b6d6285) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_plugin_release-d9a3a22170648e3d) running 8 tests test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok test latest::tests::cancellation_joins_verification ... ok test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.55s Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/review_pool-7342401812584e29) running 1 test test pending_channel_writers_preserve_authority_read_capacity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.57s Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/review_restart-433d5f6159022764) running 2 tests test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification test restarted_latest_reclaims_metadata_after_process_stop ... ok test result: ok. 1 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.07s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_plugin_remote-befabe8c66488616) running 12 tests test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.04s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_plugin_ssh-8fc5a3d5ae8e8da5) running 13 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 12 filtered out; finished in 0.00s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 12 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/auth_order-a6672937b409eb18) running 6 tests test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/build_removal-ea54acad90939da0) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.95s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/concurrency-84194037b61b4a88) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test component_off_retires_a_real_native_helper ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/config_isolation-7ef0e56361e7afa9) running 2 tests test synthetic_master_socket_is_private_at_creation ... ok test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.23s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/credentials-d8295318c2cb85c8) running 3 tests test credential_helper_refuses_host_trust_and_permission_prompts ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/diagnostics-07214f0a23810c1c) running 8 tests test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test status_mapping_preserves_authentication_and_missing_payload_classification ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test every_failed_step_names_the_step_and_a_next_action ... ok test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.17s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/event_metadata-44d697ac35cff957) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/foreground-a7c134dfcb5c5797) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.26s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/host_trust-956578b69494d660) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/install-c9a4eb681da6c6e1) running 30 tests test command_failure_names_upload_join_install_and_start_separately ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test refused_previous_service_stop_only_removes_staging ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.53s Running tests/model.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/model-8d8a118fb482cb01) running 5 tests test addresses_never_become_options_or_shell_syntax ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/payload_source.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/payload_source-2b9cf9e8f172fa9d) running 2 tests test verification_failure_names_step_and_stops_before_upload ... ok test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/probe_check-4c243b7c35682a6f) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/process.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/process-52eb00630d90c109) running 5 tests test completed_helper_retires_descendants_with_closed_pipes ... ok test cancellation_retires_the_helper_descendant_too ... ok test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.20s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/proxy_policy-ca5da5ebac2b936e) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/real_ssh-7e667740bdea77a4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/single_connection-824b96a985bd76a6) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/source_completeness-221723904e9d35a3) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/trust_round2-78f0ff3b67dbad9b) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_server-e66837f90a21069b) running 368 tests test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket has been running for over 60 seconds test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser has been running for over 60 seconds test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies has been running for over 60 seconds test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies has been running for over 60 seconds test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch has been running for over 60 seconds test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket has been running for over 60 seconds test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok test release_build_tests::release_build_marker_is_explicit ... ok test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test result: ok. 329 passed; 0 failed; 39 ignored; 0 measured; 0 filtered out; finished in 305.81s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/catalog_startup-7dd8be68f0697857) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/enrollment-32f61b19a7c9b610) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test concurrent_redemption_has_one_winner_and_one_certificate ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.87s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/mesh_parser-13fd59a4a8708f05) running 2 tests test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test review_grant_parser_rejects_unknown_nested_port_fields ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/mesh_review_plugin-1de3bc1351e8739c) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/mesh_review_policy-44ce3d3efaec58dc) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/mesh_review_role_scope-4848c1545d27cd89) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/plugin_host_review-e125600348cb05bb) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_disable_answers_inflight_call ... ok test review_exited_worker_ends_its_subscriptions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/plugin_settings_review-f9f86b6508eec089) running 3 tests test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.48s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/remote_plugin_contract-467d546d48fb6a49) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.05s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/infraternal_shim-6198daaedaec1ac5) running 87 tests test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok test frame::checks::tests::golden_and_fragmented ... ok test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok test frame::checks::golden::every_frozen_message ... ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test ring::checks::tests::wrap_and_exact_offsets ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test pty::child_locale_tests::spawned_login_shell_receives_selected_locale_without_other_host_variables ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok running 1 test test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 86 filtered out; finished in 0.01s test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test locale::tests::invalid_shell_expressions_are_ignored ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 74 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 92.91s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/detach-f17510b824ed2469) running 2 tests test detached_child_restores_default_signals_without_changing_parent ... ok test closed_standard_descriptors_become_dev_null ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.94s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/mouse-0d16f77afbdea7cb) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.44s Running tests/process_exit_descriptor.rs (/home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/debug/deps/process_exit_descriptor-67dfefbd2451d374) running 2 tests test invalid_pid_never_creates_a_descriptor ... ok test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_backup running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_relay running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_release running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ ├── hyper v1.11.1 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:197:1 │ 197 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 198 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:199:1 │ 199 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 201 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:202:1 │ 202 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:204:1 │ 204 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 205 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 206 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:248:1 │ 248 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 249 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:251:1 │ 251 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 252 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:254:1 │ 254 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 255 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:256:1 │ 256 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 257 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r1-soundness/Cargo.lock:314:1 │ 314 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 315 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Finished `release` profile [optimized] target(s) in 0.35s /home/kayg/.cache/codex-scratch/access-rules-r1-soundness/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 21857264 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```` Supplemental TypeScript output, verbatim (exit 0): ````text ==> Vendored Ghostty artifact checksums dist/ghostty-web.js: OK dist/ghostty-vt.wasm: OK dist/index.d.ts: OK ==> TypeScript protocol compiler ==> Tracer compiler, precompression and bundle transfer budget bun install v1.4.2 (744846f84) + @types/bun@1.3.8 + @types/node@22.19.0 + @types/ws@8.5.10 + playwright@1.61.1 + typescript@5.9.3 + ws@8.18.3 + @scure/bip39@2.2.0 + geist@1.7.2 38 packages installed [393.00ms] $ bun x tsc --project tsconfig.json bun test v1.4.2 (744846f84) precompress.test.ts: (pass) text sidecars round-trip deterministically; compressed formats remain identity [17.05ms] browser-build.test.ts: (pass) the browser renderer has no unresolved Vite Node-file shim request [17.73ms] src/perf-detector.test.ts: (pass) FrameDetector > estimates the refresh from the median and snaps it [0.76ms] (pass) FrameDetector > nothing is a drop before the rate is known [0.06ms] (pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.15ms] (pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.21ms] (pass) FrameDetector > the first frame after a pause is not an interval [0.06ms] (pass) FrameDetector > fps, p95 and window read the ring [0.24ms] (pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.25ms] (pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.05ms] src/canvas/recency.test.ts: (pass) touch moves an item to the front and never duplicates it [0.17ms] (pass) repeating the front item changes nothing [0.07ms] (pass) the list is capped, so the oldest items fall off [0.06ms] (pass) top skips items that are no longer live, without losing them [0.13ms] (pass) recentRows: five used windows in reverse order of use, from 54 windows [0.29ms] (pass) recentRows: a view with three windows and no use shows them in order [0.05ms] (pass) recentRows: used windows lead, the rest fill up to five in window order [0.08ms] src/canvas/windows/details-facts.test.ts: (pass) host facts become plain-language details rows [0.51ms] (pass) unknown optional host facts stay absent instead of appearing as placeholders [0.13ms] (pass) extended info off: the machine tab shows only the essentials, ungrouped, and there is no More section [0.24ms] (pass) extended info on: every fact sits under System, Resources or Access [0.13ms] (pass) the header follows the machine's own facts, not the platform the host list guessed [0.10ms] (pass) before facts arrive the host's platform names the header [0.09ms] (pass) a reported system with no platform mark still names the header and shows no mark [0.04ms] src/canvas/mesh/protocol.test.ts: (pass) the server's own list becomes nodes, tags and grants, by name [0.47ms] (pass) without `access` (today's server) the person may view and may not edit [0.27ms] (pass) fields the server does not send are absent, never invented [0.13ms] (pass) anything that is not a list is refused, whole [8.14ms] (pass) a node's own tag list and the tag table agree even when a server sends only one [0.22ms] (pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.27ms] (pass) answers carry the new revision, and a create the new arrow's id [0.07ms] (pass) endpoints go out as the server writes them: a node by id, a tag by name [0.08ms] src/canvas/mesh/layout.test.ts: (pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.66ms] (pass) the layout is deterministic and does not depend on input order [2.92ms] (pass) no two cards overlap, and every card lies inside the graph [5.37ms] (pass) the sheet is wider than tall, roughly 16:10 [1.26ms] (pass) a pinned node stays where it was put and the others do not move [1.67ms] (pass) a pin beyond the sheet grows the graph [0.23ms] (pass) a host's other tags do not move it; a tag nobody carries still has its node [0.12ms] (pass) 1,000 nodes lay out in a few milliseconds [5.07ms] src/canvas/layout/stops.test.ts: (pass) a view that fits the viewport has one stop, centred [0.60ms] (pass) a wide view has one stop per column and the last stop ends at the right edge [0.15ms] (pass) a view taller than the viewport is scaled down so it fits [0.03ms] (pass) nearestStop picks the stop whose centre is closest [0.16ms] (pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.11ms] (pass) a small graph keeps one stop per node column [0.06ms] (pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.06ms] (pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.06ms] src/canvas/layout/grid.test.ts: (pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [0.85ms] (pass) closing the new half gives the layout back exactly, in the model [0.78ms] (pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.27ms] (pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.19ms] (pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.36ms] (pass) closing the window split down gives its band back to the window above and to the partner [0.34ms] (pass) a window split down in a plain column stacks under it and moves the windows below down [0.10ms] (pass) new window right opens a full-size column after the whole group, never inside it [0.21ms] (pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.06ms] (pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.10ms] (pass) random sequences of split right, split down, new window right and close never break the grid [38.11ms] (pass) closing every window of a group returns the view to nothing, with no problem on the way [0.56ms] (pass) a full-width band under a group moves nothing and extends the group by one band [0.29ms] (pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.20ms] src/canvas/layout/geometry.test.ts: (pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.43ms] (pass) a chain of neighbours is pushed in turn [0.09ms] (pass) snapping rounds to whole cells [0.03ms] (pass) reach follows grants through tags and keeps the relay [0.18ms] (pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.17ms] (pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.03ms] (pass) a desktop column is the same alone and in a strip [0.01ms] src/canvas/sessions/live-inventory.test.ts: (pass) a host snapshot replaces cached session rows and keeps only live shims [1.61ms] (pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.33ms] (pass) inventory remembers a remote session and refuses a cross-host attach [0.26ms] (pass) superseded status snapshots release records for sessions this device never opened [1.07ms] (pass) superseding a sidecar preserves status for a window opened on this device [0.12ms] (pass) a census predating a new shell does not permanently retire its confirmed live ID [0.09ms] (pass) a final Close before the first positive census never revives a new ID [0.06ms] (pass) a later absence retires a new ID after its first positive census [0.08ms] (pass) another host's census cannot clear a new shell's census fence [0.08ms] (pass) another host's close cannot clear a new shell's census fence [0.03ms] src/canvas/sessions/details-live.test.ts: (pass) a refused host facts action stops its recurring timer [0.72ms] (pass) a detected operating system supplies the live popover mark [0.70ms] src/canvas/sessions/live.test.ts: (pass) an enrolled host opens by UUID and splits keep that authority [0.56ms] (pass) unknown and ambiguous labels never open an embedded shell [0.05ms] (pass) removed hosts disappear from inventory and cannot route a new shell [0.08ms] src/canvas/sessions/gone-review.test.ts: (pass) selecting a known gone session keeps its final exited state [0.14ms] (pass) a known retired status survives repeated selection and generic ended answers [0.08ms] src/canvas/sessions/open-refusal.test.ts: (pass) memory refusal retains the reason and current counters [0.60ms] (pass) legacy refusals still work and malformed counters never reach the message [0.33ms] (pass) product copy names the host and counters and never renders untrusted server text [0.49ms] (pass) oversized refusal JSON is ignored before parsing [0.09ms] src/canvas/model/document.test.ts: (pass) a document holds references and layout, never content [0.26ms] (pass) a document survives JSON and rebuilds the same columns [0.57ms] (pass) a target that no longer exists is dropped, and an emptied column with it [0.08ms] (pass) parseDocument rejects anything that is not a document of this format [0.21ms] (pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.18ms] (pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.30ms] (pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.22ms] (pass) a plain view is saved without spans or bands, exactly as before D212 [0.04ms] src/canvas/addhost/real.test.ts: (pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.19ms] (pass) parsing the server's data > the server key needs its public key and fingerprint [0.04ms] (pass) parsing the server's data > an install command needs a lifetime [0.03ms] (pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [0.82ms] (pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.17ms] (pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [0.65ms] (pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.14ms] (pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.12ms] (pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.06ms] (pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.21ms] (pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.34ms] src/canvas/addhost/authority.on-demand.test.ts: (pass) CA wrapping matches the contract's HKDF domain and separates generations [0.85ms] src/canvas/addhost/model.test.ts: (pass) stagesOf > a host with no event is waiting everywhere [0.21ms] (pass) stagesOf > check before sign-in is detecting how to sign in [0.12ms] (pass) stagesOf > the sign-in report finishes detect and starts the system check [0.07ms] (pass) stagesOf > install, facts and connect map to install, enrol and first session [0.09ms] (pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.16ms] (pass) stagesOf > an unsupported host fails the system check, after sign-in [0.05ms] (pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.05ms] (pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.11ms] (pass) authLabel > names the method and a trusted network provider only [0.05ms] (pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.15ms] (pass) guideFor > each failure kind names its fix [0.06ms] (pass) guideFor > mesh-policy words say possible, not certain [0.02ms] (pass) parseTarget > reads user, host and port [0.11ms] (pass) parseTarget > refuses what cannot name a host [0.02ms] (pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.27ms] (pass) parseSshConfig > recognises config text [0.04ms] (pass) parseSshConfig > a hostname that is an option is dropped [0.03ms] (pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.04ms] (pass) plain words > no headline carries an arrow, an id or an API noun [0.12ms] (pass) only a completed canonical host identity becomes terminal authority [0.10ms] (pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.03ms] (pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.03ms] (pass) matchListed > a name that is exactly one host's id or address names that host [0.08ms] (pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.02ms] (pass) matchListed > a partial name that starts several hosts names none and waits [0.01ms] (pass) matchListed > a new name that starts no host is neither named nor waiting [0.01ms] (pass) install diagnostics name the failed step and public host error [0.04ms] (pass) missing payload tells the operator the architecture and expected server path [0.04ms] (pass) an already added host says so and offers opening its existing terminal [0.02ms] (pass) release payload verification names the architecture step and plain reason [0.01ms] src/canvas/addhost/wizard.test.ts: (pass) a saved-key prompt completing after close never starts an SSH attempt [0.41ms] (pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.23ms] (pass) ready CA begins the requested installation mode without another prompt [0.09ms] (pass) closing during CA confirmation never starts an SSH attempt [0.20ms] (pass) a typed root login requires explicit consent before any installation [0.15ms] ../../packages/ui/src/spring.test.ts: (pass) a missed frame does not stretch a settled spring [0.36ms] (pass) motion follows elapsed time across frame rates and damping regimes [0.64ms] chunk-classes.test.ts: (pass) the first screen is critical, the canvas product module and what only it uses are deferred [0.71ms] (pass) a chunk that both sides use stays critical [0.10ms] (pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.26ms] test/recovery-ui.test.ts: (pass) compiled recovery UI mode off obeys its URL boundary [3.45ms] (pass) compiled recovery UI mode preview obeys its URL boundary [2.11ms] (pass) compiled recovery UI mode 1 obeys its URL boundary [2.03ms] test/recovery-crypto.test.ts: (pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [9.83ms] (pass) 100 repeated wrapping operations generate independent salts and nonces [16.64ms] test/recovery-rotation.test.ts: (pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [5.96ms] (pass) abandoned word acknowledgement uploads nothing [1.95ms] (pass) settled acknowledgement cannot upload later (dismissed) [1.82ms] (pass) settled acknowledgement cannot upload later (no acknowledgement) [3.96ms] test/recovery-wait.test.ts: (pass) server remaining wait 0s is accepted through the capability policy maximum [1.11ms] (pass) server remaining wait 86400s is accepted through the capability policy maximum [0.73ms] (pass) server remaining wait 90000s is accepted through the capability policy maximum [0.93ms] (pass) server remaining wait 172800s is accepted through the capability policy maximum [0.65ms] (pass) malformed or excessive remaining wait -1 is denied [0.81ms] (pass) malformed or excessive remaining wait 0.5 is denied [0.61ms] (pass) malformed or excessive remaining wait 172801 is denied [0.66ms] (pass) malformed or excessive remaining wait 9007199254740992 is denied [0.70ms] (pass) malformed or excessive remaining wait 90000 is denied [0.66ms] 168 pass 0 fail 11332 expect() calls Ran 168 tests across 26 files. [261.00ms] $ bun run build.ts built chunk-z93cxfvm.js, chunk-bcrmm064.js, chunk-3g02wn4t.js, chunk-c3hd7e33.js, chunk-j9gks9kw.js, chunk-p4pq9b17.js, chunk-a895a34j.js, chunk-gtm292qm.js, chunk-6vtc0agk.js, chunk-e8hwzj6w.js, chunk-3jfd6y3h.js, chunk-5s6a3m50.js, main.js, chunk-969atqet.js, chunk-15nnyy73.js, chunk-vxv25w33.js, chunk-jzjctnkh.js, chunk-pje1mxac.js, chunk-c1dgfc87.js, chunk-0dj0z8nw.js, chunk-yr0r38s4.js, chunk-8t7pe4ht.js, chunk-qy2p4tcb.js, chunk-axbkkqp1.js, chunk-a3tnmqq9.js, chunk-694zdmn6.js, chunk-hdbm75rr.js, chunk-3n13ezxw.js, chunk-0hfae3mr.js, chunk-6fcfq7fs.js, chunk-t0fmgjex.js, chunk-jbpydr6f.js, chunk-778thkbs.js, chunk-ffqpz744.js, chunk-vexgjzw4.js, chunk-nks0vz2v.js, chunk-1yrg8bhf.js, chunk-q56hm25z.js, chunk-9xd3g65e.js, chunk-28rbcdd5.js, chunk-61xwpgvs.js, chunk-80ftd1rc.js, chunk-433eyr4g.js, chunk-vv34e0bb.js, chunk-crd1grvv.js, chunk-rh6y9cg2.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-zz8xnybz.js, chunk-f2r0hhqc.js, chunk-2bcfkj59.js, chunk-1gmd2m5q.js, chunk-qhn2jnjb.js onDemand chunk-ffqpz744.js: identity=5359 gzip=2579 brotli=2295 bytes critical chunk-0dj0z8nw.js: identity=2519 gzip=1008 brotli=876 bytes critical chunk-p4pq9b17.js: identity=707 gzip=368 brotli=306 bytes critical chunk-8t7pe4ht.js: identity=1104 gzip=666 brotli=604 bytes critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-q56hm25z.js: identity=10693 gzip=4125 brotli=3760 bytes onDemand chunk-vexgjzw4.js: identity=4640 gzip=1932 brotli=1702 bytes critical chunk-1gmd2m5q.js: identity=199 gzip=162 brotli=136 bytes critical chunk-zz8xnybz.js: identity=9810 gzip=4016 brotli=3459 bytes onDemand chunk-3n13ezxw.js: identity=4575 gzip=2012 brotli=1785 bytes critical chunk-jzjctnkh.js: identity=15859 gzip=6182 brotli=5484 bytes onDemand chunk-2bcfkj59.js: identity=1063 gzip=653 brotli=521 bytes critical chunk-c1dgfc87.js: identity=590 gzip=327 brotli=319 bytes onDemand chunk-vv34e0bb.js: identity=6773 gzip=3175 brotli=2885 bytes onDemand chunk-nks0vz2v.js: identity=7662 gzip=3397 brotli=2971 bytes critical faulty-terminal.worker.js: identity=1086 gzip=559 brotli=480 bytes critical backdrop.worker.js: identity=243 gzip=212 brotli=165 bytes onDemand chunk-e8hwzj6w.js: identity=191 gzip=170 brotli=130 bytes onDemand chunk-5s6a3m50.js: identity=2108 gzip=1037 brotli=869 bytes critical chunk-a895a34j.js: identity=88 gzip=88 brotli=74 bytes critical chunk-vxv25w33.js: identity=5443 gzip=2605 brotli=2380 bytes critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes onDemand chunk-0hfae3mr.js: identity=1616 gzip=866 brotli=739 bytes critical chunk-bcrmm064.js: identity=4499 gzip=1856 brotli=1635 bytes onDemand chunk-t0fmgjex.js: identity=1170 gzip=705 brotli=589 bytes onDemand chunk-gtm292qm.js: identity=228 gzip=178 brotli=165 bytes onDemand chunk-778thkbs.js: identity=11529 gzip=4656 brotli=4255 bytes critical chunk-pje1mxac.js: identity=17627 gzip=6253 brotli=5572 bytes onDemand chunk-crd1grvv.js: identity=31922 gzip=12262 brotli=11026 bytes onDemand chunk-694zdmn6.js: identity=6198 gzip=2792 brotli=2519 bytes critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-rh6y9cg2.js: identity=2462 gzip=1107 brotli=935 bytes onDemand chunk-6vtc0agk.js: identity=2420 gzip=1199 brotli=1078 bytes onDemand chunk-15nnyy73.js: identity=2557 gzip=1180 brotli=1009 bytes critical chunk-a3tnmqq9.js: identity=707945 gzip=204703 brotli=165886 bytes onDemand chunk-j9gks9kw.js: identity=3891 gzip=1735 brotli=1516 bytes onDemand chunk-hdbm75rr.js: identity=2824 gzip=1387 brotli=1196 bytes critical chunk-yr0r38s4.js: identity=386 gzip=238 brotli=196 bytes onDemand chunk-80ftd1rc.js: identity=48283 gzip=15179 brotli=13487 bytes onDemand chunk-3g02wn4t.js: identity=5784 gzip=2189 brotli=1938 bytes onDemand chunk-qy2p4tcb.js: identity=1026 gzip=623 brotli=498 bytes onDemand chunk-3jfd6y3h.js: identity=6265 gzip=2105 brotli=1865 bytes onDemand chunk-1yrg8bhf.js: identity=13384 gzip=5027 brotli=4502 bytes deferred chunk-6fcfq7fs.js: identity=97656 gzip=33164 brotli=29284 bytes critical main.js: identity=111029 gzip=40362 brotli=34971 bytes critical chunk-qhn2jnjb.js: identity=42395 gzip=14483 brotli=12981 bytes deferred chunk-c3hd7e33.js: identity=43000 gzip=16582 brotli=14638 bytes critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes critical chunk-433eyr4g.js: identity=162 gzip=150 brotli=127 bytes onDemand chunk-jbpydr6f.js: identity=540 gzip=353 brotli=313 bytes critical chunk-z93cxfvm.js: identity=21235 gzip=6857 brotli=6128 bytes critical chunk-969atqet.js: identity=8377 gzip=3575 brotli=3180 bytes JavaScript transfer, critical: identity=951648 gzip=294996/307200 brotli=245275/256000 bytes JavaScript transfer, deferred: identity=140656 gzip=49746/51200 brotli=43922/45056 bytes JavaScript transfer, onDemand: identity=185163 gzip=72623/20480 brotli=64548/18432 bytes JavaScript transfer, onDemand largest chunk chunk-80ftd1rc.js: gzip=15179/20480 brotli=13487/18432 bytes (class total gzip=72623 brotli=64548, not limited) fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes ==> Rust stream oracle (for the differential test) ==> TypeScript protocol tests bun test v1.4.2 (744846f84) src/mesh-review-revocation.test.ts: (pass) review forbidden event cancels pending snapshot publication [5.82ms] (pass) subscription forbidden ends delivery before a late refresh rejection [2.65ms] (pass) subscription not found ends delivery before a late refresh rejection [12.50ms] (pass) subscription invalid input ends delivery before a late refresh rejection [1.38ms] (pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.24ms] (pass) synchronous subscription refusal releases the transport exactly once [0.40ms] src/codec.test.ts: (pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [7.81ms] (pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.36ms] (pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.42ms] (pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.29ms] (pass) split mux header preserves trailing Close [1.41ms] src/mesh-review-paged-error.test.ts: (pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [13.91ms] (pass) review earlier snapshot continuation cannot overwrite a delivered revision [7.26ms] (pass) a newer paged event owns publication before an earlier refresh resumes [11.61ms] src/mesh-review-refresh.test.ts: (pass) review superseded refresh failure cannot replace authoritative resync [1.71ms] (pass) superseded failure preserves a newer pending refresh [3.73ms] src/stream.test.ts: stream differential: 134 streams, 11439 schedules, zero divergences (pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [4297.13ms] (pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [10.17ms] src/mesh.test.ts: (pass) Mesh actions map to their typed action IDs and JSON inputs [1.92ms] (pass) Mesh watch coalesces change bursts and never publishes an older revision [4.14ms] (pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.11ms] src/mesh-review-continuation.test.ts: (pass) review continuation stops after stop [1.62ms] (pass) review continuation stops after forbidden [1.62ms] (pass) review continuation stops after superseded [1.31ms] src/mesh-pagination.test.ts: (pass) list assembles bounded pages using the same filter [0.51ms] (pass) a changed revision discards earlier pages before assembling its restart [0.27ms] (pass) malformed continuation is refused: {"revision":1,"offset":0} [0.42ms] (pass) malformed continuation is refused: {"revision":2,"offset":1} [0.03ms] (pass) malformed continuation is refused: {"revision":1,"offset":2} [0.01ms] (pass) watch never publishes a partial page; withdrawn=false [1.60ms] (pass) watch never publishes a partial page; withdrawn=true [1.27ms] (pass) a superseding equal-revision resync wins over pending page assembly [1.78ms] src/mesh-review-resync.test.ts: (pass) review watch applies same-revision authoritative resync [0.42ms] (pass) authoritative resync keeps priority over an equal-revision pending list [1.72ms] src/mesh-vectors.test.ts: (pass) every shared Mesh action vector passes through the typed client unchanged [2.52ms] (pass) shared Mesh event vectors drive the typed watch adapter [6.76ms] 36 pass 0 fail 34462 expect() calls Ran 36 tests across 10 files. [4.46s] ````

kayg commented

2026-10-12 12:05:59 +00:00

Author

Owner

Finished access rules surface verification on branch head 8ded0646c8. The only tracked change since b0691640ec is docs/design/access-rules-verification/round1-surfaces.md. No push or deployment was performed.

Findings: 4 P0, 8 P1, 2 P2. Top five:

F-SURF-01 (P0): a missing local username could inherit root fallback.
F-SURF-02 (P0): a scoped management sentence could expose unrelated machines.
F-SURF-03 (P0): one tag could authorize edits affecting another tag on the same machine.
F-SURF-11 (P0): concurrent next-machine requests could use a one-time boot more than once.
F-SURF-07 (P1): a login check could omit required network and role checks.

Evidence: the report contains 12 exact sentence/body pairs, mappings for each requested surface, 13 valid JSON examples, and cases that held up. The scratch probe passed 10,000 generated rules (0 round-trip failures), 5 hostile names (0 failures), and rejected all 3 tested noncanonical escape spellings; the draft delimiter probe failed 3/5 cases.

Final scripts/verify fast output:

binary exceeds the 16404816-byte size budget: 21857264 bytes
PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816)

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

The verifier exited 1 at the static build size limit; the TypeScript phase was not reached. The worktree diff from the spec base contains documentation only, so this failure is unrelated to the report. The issue remains open.

Finished access rules surface verification on branch head 8ded0646c8269a6e1c529b380193cd23bd41918a. The only tracked change since b0691640ec5ab63423061d7a9d67e4e69032f1f1 is docs/design/access-rules-verification/round1-surfaces.md. No push or deployment was performed. Findings: 4 P0, 8 P1, 2 P2. Top five: - F-SURF-01 (P0): a missing local username could inherit root fallback. - F-SURF-02 (P0): a scoped management sentence could expose unrelated machines. - F-SURF-03 (P0): one tag could authorize edits affecting another tag on the same machine. - F-SURF-11 (P0): concurrent next-machine requests could use a one-time boot more than once. - F-SURF-07 (P1): a login check could omit required network and role checks. Evidence: the report contains 12 exact sentence/body pairs, mappings for each requested surface, 13 valid JSON examples, and cases that held up. The scratch probe passed 10,000 generated rules (0 round-trip failures), 5 hostile names (0 failures), and rejected all 3 tested noncanonical escape spellings; the draft delimiter probe failed 3/5 cases. Final `scripts/verify fast` output: ```text binary exceeds the 16404816-byte size budget: 21857264 bytes PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816) +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ``` The verifier exited 1 at the static build size limit; the TypeScript phase was not reached. The worktree diff from the spec base contains documentation only, so this failure is unrelated to the report. The issue remains open.

kayg commented

2026-10-12 12:10:05 +00:00

Author

Owner

Starting spec v2 on access-rules-v2, base b0691640ec from origin/access-rules, as the brief explicitly specifies. Read #186 history (22 comments) and parent #147 (0 comments), required contracts, and round-one reports. Continuing their 65 findings: soundness 37, coverage 14, surfaces 14. Documentation only; import reports unchanged, then semantic repairs, canonical grammar/JSON, and a complete finding-to-resolution table. Owner decisions remain unchanged; conflicts become numbered recommendations. Explicit job instruction authorizes pushing this branch.

Starting spec v2 on access-rules-v2, base b0691640ec5ab63423061d7a9d67e4e69032f1f1 from origin/access-rules, as the brief explicitly specifies. Read #186 history (22 comments) and parent #147 (0 comments), required contracts, and round-one reports. Continuing their 65 findings: soundness 37, coverage 14, surfaces 14. Documentation only; import reports unchanged, then semantic repairs, canonical grammar/JSON, and a complete finding-to-resolution table. Owner decisions remain unchanged; conflicts become numbered recommendations. Explicit job instruction authorizes pushing this branch.

kayg commented

2026-10-12 12:14:20 +00:00

Author

Owner

Reports imported unchanged at c7997a3d and pushed (37 + 14 + 14 = 65 findings). The surfaces report retains its two intentional Markdown hard-break spaces. Semantic repair in progress: explicit D216 network mode, D235 first-admin any-account rule, request composition, all-tags before/after management, live token intersection, narrow D16 actions, view/control separation, and exact UTC deadlines. Evidence: docs/design/access-rules.md. Owner conflicts identified: offline D166 versus D242; own-session D154 wording versus revocation; automatic account matching/shared-account continuity; boot admission; synced additions; browser tunnel requester. No product code or measurements changed. Milestone fast gate launched with job-specific scratch target; final head will be checked separately.

Reports imported unchanged at c7997a3d and pushed (37 + 14 + 14 = 65 findings). The surfaces report retains its two intentional Markdown hard-break spaces. Semantic repair in progress: explicit D216 network mode, D235 first-admin any-account rule, request composition, all-tags before/after management, live token intersection, narrow D16 actions, view/control separation, and exact UTC deadlines. Evidence: docs/design/access-rules.md. Owner conflicts identified: offline D166 versus D242; own-session D154 wording versus revocation; automatic account matching/shared-account continuity; boot admission; synced additions; browser tunnel requester. No product code or measurements changed. Milestone fast gate launched with job-specific scratch target; final head will be checked separately.

kayg commented

2026-10-12 12:26:07 +00:00

Author

Owner

Semantic step ccbf26e1 pushed: explicit defaults, route composition, before/after all-tags management, token-owner intersection, narrow actions, session and host privilege boundaries; seven owner recommendations recorded without amending decisions. Language step ed0e655e49: canonical verb-specific grammar/RuleBodyV2 and complete request/result forms. Design probe: 22/22 examples fit delimiters; 3/3 omitted separators refuse; 10000 quote/token round trips, 0 failures, 10 hostile-name classes; 2 JSON blocks parse, 6/6 structural negatives refuse. Evidence is in docs/design/access-rules.md, Verification log. Not a production parser/evaluator or performance claim. Milestone scripts/verify fast exited 1 at latency-proxy preflight before Rust/TS; final-head invocation follows the trace-table commit.

Semantic step ccbf26e1 pushed: explicit defaults, route composition, before/after all-tags management, token-owner intersection, narrow actions, session and host privilege boundaries; seven owner recommendations recorded without amending decisions. Language step ed0e655e49e51cb17c64a2b25b118d227ca562ee: canonical verb-specific grammar/RuleBodyV2 and complete request/result forms. Design probe: 22/22 examples fit delimiters; 3/3 omitted separators refuse; 10000 quote/token round trips, 0 failures, 10 hostile-name classes; 2 JSON blocks parse, 6/6 structural negatives refuse. Evidence is in docs/design/access-rules.md, Verification log. Not a production parser/evaluator or performance claim. Milestone scripts/verify fast exited 1 at latency-proxy preflight before Rust/TS; final-head invocation follows the trace-table commit.

kayg commented

2026-10-12 12:28:13 +00:00

Author

Owner

Trace table committed/pushed at 2fef2070: exactly all 65 source IDs; 57 resolved in draft, 2 accepted P2 limitations, 6 owner-dependent findings and 7 numbered owner questions. Self-review clarification at 3d3c9df0ff: duration editor input resolves at preview time, apply preserves that exact deadline (no activation-time reset). Evidence: Conditions and complete finding table in docs/design/access-rules.md. Reports remain byte-identical to all three origin refs; only four documentation paths differ from b0691640. Weighted fast gate passed its preflight and is compiling unchanged build sources; another final-head invocation will run after this milestone finishes.

Trace table committed/pushed at 2fef2070: exactly all 65 source IDs; 57 resolved in draft, 2 accepted P2 limitations, 6 owner-dependent findings and 7 numbered owner questions. Self-review clarification at 3d3c9df0ff4906cabafbb368299cbefb2be00e1b: duration editor input resolves at preview time, apply preserves that exact deadline (no activation-time reset). Evidence: Conditions and complete finding table in docs/design/access-rules.md. Reports remain byte-identical to all three origin refs; only four documentation paths differ from b0691640. Weighted fast gate passed its preflight and is compiling unchanged build sources; another final-head invocation will run after this milestone finishes.

kayg commented

2026-10-12 12:37:58 +00:00

Author

Owner

Spec v2 documentation is committed and pushed on access-rules-v2 at dcec7b2d32. Counts: 57 resolved in the draft, 2 accepted P2 limitations, 6 owner-dependent findings; 65/65 IDs and severities match round-one reports (33 P0, 27 P1, 5 P2). There are 7 numbered owner questions, copied verbatim below. No product code or DECISIONS changed. Findings, grammar/schema, checks and full trace table: docs/design/access-rules.md. Imported reports are byte-identical to their supplied origin refs.

Atomic steps: c7997a3d reports; ccbf26e1 semantics; ed0e655e language/JSON/surfaces; 2fef2070 trace table; 3d3c9df0 fixed preview deadlines; 9610954e coordination-only pending enrollment; dcec7b2d boot claim before every rule-authorized response. Self-review caught and fixed the last three specification ambiguities.

Design evidence: 22/22 canonical examples fit delimiter productions; 3/3 omitted separators refused; 10000 quote/token round trips across 10 hostile-name classes, 0 failures; 2 JSON blocks parse, refs resolve, example validates against structural subset and 6/6 malformed structural cases refuse. Scratch probe is not a product parser, full JSON Schema validator or authorization proof. No timing/performance evidence is claimed.

Owner questions (verbatim):

Q1 — Should one access-rule language also replace D252's three headings? Recommendation: keep Roles, Network access and Login access as headings; share the sentence/body/evaluator and offer an All filter. This achieves one model without changing settled names.
Q2 — How should a browser outside the mesh name a local-service tunnel requester? Recommendation: declare a narrow Roles action, Open service tunnel, checked for the person/token and final service, as the browser equivalent of a reach check; do not pretend the browser is a machine. This changes v1 safety property 7's universal reach requirement; refuse these tunnels until decided.
Q3 — Is exact username matching sufficient when a local account is shared or replaced? Recommendation: require verified personal account identity/generation for the own-username rule, excluding shared accounts; retain D235's automatic exact-name path only where that validation succeeds, and use explicit named-account rules otherwise. This tightens D235's username-only default; refuse uncertain matching until decided.
Q4 — Should boot enrollment wait for separate admission before defaults apply? Recommendation: approve boot as a one-use, one-hour image offer, confirm its requester key, then quarantine the enrolled host until an administrator previews admission. Keep ordinary D237 joins unchanged. PXE has no settled decision yet; this resolves v1's “no other access” promise without weakening it.
Q5 — Should D154's own-session built-in yield to login revocation? Recommendation: yes; split view and end, keep safe status/end metadata, and stop live output/input plus the underlying login when access is lost. Historical output requires separate permission. This clarifies “always” against D242 and D240.
Q6 — Should access-widening identity-provider additions wait for review? Recommendation: yes; apply removals immediately, stage additions and preview the combined effective diff before activation. This adds an explicit apply boundary to D154/D235's read-only synced groups; do not apply unreviewed widening while the question is open.
Q7 — Which outage behavior wins when D166 and D242 conflict? Recommendation: replace indefinite offline mesh authorization with bounded fail-closed access leases, align direct and mesh paths, and show pending removal until all enforcement points acknowledge or leases expire. Propose a maximum of 60 seconds, subject to owner approval and perf-VM propagation/availability measurements; do not claim instantaneous global revocation. This requires amending D166/D242, not merely changing text in this draft.

Final-head scripts/verify fast is running on this SHA with a job-specific target and TRACER_TEST_PORT=4386. Previous preflight failure and superseded documentation-head gate runs are not final-head evidence; older compilation was stopped when the specification corrections changed HEAD, keeping compiler cache. Final result and verbatim transcript will follow; issue remains open.

Spec v2 documentation is committed and pushed on access-rules-v2 at dcec7b2d325837414593eaa8eb2027b43b10424e. Counts: 57 resolved in the draft, 2 accepted P2 limitations, 6 owner-dependent findings; 65/65 IDs and severities match round-one reports (33 P0, 27 P1, 5 P2). There are 7 numbered owner questions, copied verbatim below. No product code or DECISIONS changed. Findings, grammar/schema, checks and full trace table: docs/design/access-rules.md. Imported reports are byte-identical to their supplied origin refs. Atomic steps: c7997a3d reports; ccbf26e1 semantics; ed0e655e language/JSON/surfaces; 2fef2070 trace table; 3d3c9df0 fixed preview deadlines; 9610954e coordination-only pending enrollment; dcec7b2d boot claim before every rule-authorized response. Self-review caught and fixed the last three specification ambiguities. Design evidence: 22/22 canonical examples fit delimiter productions; 3/3 omitted separators refused; 10000 quote/token round trips across 10 hostile-name classes, 0 failures; 2 JSON blocks parse, refs resolve, example validates against structural subset and 6/6 malformed structural cases refuse. Scratch probe is not a product parser, full JSON Schema validator or authorization proof. No timing/performance evidence is claimed. Owner questions (verbatim): 1. **Q1 — Should one access-rule language also replace D252's three headings?** Recommendation: keep Roles, Network access and Login access as headings; share the sentence/body/evaluator and offer an All filter. This achieves one model without changing settled names. 2. **Q2 — How should a browser outside the mesh name a local-service tunnel requester?** Recommendation: declare a narrow Roles action, `Open service tunnel`, checked for the person/token and final service, as the browser equivalent of a reach check; do not pretend the browser is a machine. This changes v1 safety property 7's universal reach requirement; refuse these tunnels until decided. 3. **Q3 — Is exact username matching sufficient when a local account is shared or replaced?** Recommendation: require verified personal account identity/generation for the own-username rule, excluding shared accounts; retain D235's automatic exact-name path only where that validation succeeds, and use explicit named-account rules otherwise. This tightens D235's username-only default; refuse uncertain matching until decided. 4. **Q4 — Should boot enrollment wait for separate admission before defaults apply?** Recommendation: approve boot as a one-use, one-hour image offer, confirm its requester key, then quarantine the enrolled host until an administrator previews admission. Keep ordinary D237 joins unchanged. PXE has no settled decision yet; this resolves v1's “no other access” promise without weakening it. 5. **Q5 — Should D154's own-session built-in yield to login revocation?** Recommendation: yes; split view and end, keep safe status/end metadata, and stop live output/input plus the underlying login when access is lost. Historical output requires separate permission. This clarifies “always” against D242 and D240. 6. **Q6 — Should access-widening identity-provider additions wait for review?** Recommendation: yes; apply removals immediately, stage additions and preview the combined effective diff before activation. This adds an explicit apply boundary to D154/D235's read-only synced groups; do not apply unreviewed widening while the question is open. 7. **Q7 — Which outage behavior wins when D166 and D242 conflict?** Recommendation: replace indefinite offline mesh authorization with bounded fail-closed access leases, align direct and mesh paths, and show pending removal until all enforcement points acknowledge or leases expire. Propose a maximum of 60 seconds, subject to owner approval and perf-VM propagation/availability measurements; do not claim instantaneous global revocation. This requires amending D166/D242, not merely changing text in this draft. Final-head scripts/verify fast is running on this SHA with a job-specific target and TRACER_TEST_PORT=4386. Previous preflight failure and superseded documentation-head gate runs are not final-head evidence; older compilation was stopped when the specification corrections changed HEAD, keeping compiler cache. Final result and verbatim transcript will follow; issue remains open.

kayg commented

2026-10-12 13:06:40 +00:00

Author

Owner

Spec v2 finished as documentation; integration gate remains blocked. Head dcec7b2d32 on access-rules-v2 is pushed. Reports + spec only: four documentation paths differ from b0691640, no product code/decisions/dependencies/budgets changed.

Finding dispositions: 57 resolved in draft, 2 accepted P2 limitations, 6 owner-dependent findings = all 65 IDs, exactly matching source severities (33 P0, 27 P1, 5 P2). Seven owner questions are copied verbatim below. Draft repairs are not runtime proof or owner approval. Evidence and self-review: docs/design/access-rules.md, canonical grammar/JSON, 22 examples, verification log and exhaustive trace table. 10000 quote/token round trips had 0 failures; 3/3 invalid delimiter cases and 6/6 structural JSON negatives refused. All three reports remain byte-identical to the supplied refs.

Final-head scripts/verify fast exited 1: fmt, VT native fmt, CLI compile-out, clippy, workspace tests and cargo-deny PASS; static builds FAIL. The stripped x86_64 musl binary is 21,857,264 bytes versus 16,404,816 maximum, 5,452,448 over, exactly the round-one reports’ unchanged-source result. Rust failure stops the dispatcher before aarch64 and TypeScript; no TypeScript source was touched. No host-load test failure needed the baseline exception. Passing this gate requires the D243 size-reduction/integration work from the orchestrator; this documentation-only brief does not authorize product fixes or raising the budget.

Run machine: infraternal-dev; CPUWeight=10000 scope, CARGO_BUILD_JOBS=2, job-specific scratch target and TRACER_TEST_PORT=4386. Timing lines in the mandatory transcript are incidental gate output, not performance evidence; no benchmarks or remote lab hosts used. Previous superseded-head runs were stopped after specification corrections; the transcript below is the complete final-head run. Job scratch/build output is being deleted after preserving this record. Issue stays open.

Owner questions (verbatim):

Q1 — Should one access-rule language also replace D252's three headings? Recommendation: keep Roles, Network access and Login access as headings; share the sentence/body/evaluator and offer an All filter. This achieves one model without changing settled names.
Q2 — How should a browser outside the mesh name a local-service tunnel requester? Recommendation: declare a narrow Roles action, Open service tunnel, checked for the person/token and final service, as the browser equivalent of a reach check; do not pretend the browser is a machine. This changes v1 safety property 7's universal reach requirement; refuse these tunnels until decided.
Q3 — Is exact username matching sufficient when a local account is shared or replaced? Recommendation: require verified personal account identity/generation for the own-username rule, excluding shared accounts; retain D235's automatic exact-name path only where that validation succeeds, and use explicit named-account rules otherwise. This tightens D235's username-only default; refuse uncertain matching until decided.
Q4 — Should boot enrollment wait for separate admission before defaults apply? Recommendation: approve boot as a one-use, one-hour image offer, confirm its requester key, then quarantine the enrolled host until an administrator previews admission. Keep ordinary D237 joins unchanged. PXE has no settled decision yet; this resolves v1's “no other access” promise without weakening it.
Q5 — Should D154's own-session built-in yield to login revocation? Recommendation: yes; split view and end, keep safe status/end metadata, and stop live output/input plus the underlying login when access is lost. Historical output requires separate permission. This clarifies “always” against D242 and D240.
Q6 — Should access-widening identity-provider additions wait for review? Recommendation: yes; apply removals immediately, stage additions and preview the combined effective diff before activation. This adds an explicit apply boundary to D154/D235's read-only synced groups; do not apply unreviewed widening while the question is open.
Q7 — Which outage behavior wins when D166 and D242 conflict? Recommendation: replace indefinite offline mesh authorization with bounded fail-closed access leases, align direct and mesh paths, and show pending removal until all enforcement points acknowledge or leases expire. Propose a maximum of 60 seconds, subject to owner approval and perf-VM propagation/availability measurements; do not claim instantaneous global revocation. This requires amending D166/D242, not merely changing text in this draft.

Final-head gate output (verbatim, complete):

Running as unit: run-p831581-i13412881.scope; invocation ID: f8b1ce9cec1e4201acc0bdeda43e6273
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=299.61 p99_ms=315.38 result=PASS

==> fmt

==> VT native fmt

==> CLI plugin compile-out
disabled CLI plugin dependencies: absent from normal dependency graph
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.18s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal-d0028d263474a180)

running 24 tests
test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok
test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok
test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok
test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok
test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok
test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test status_tests::custom_named_server_service_is_reported_as_running ... ok
test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok

test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s


==> clippy
   Compiling openssl-sys v0.9.117
    Checking infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/ssh)
    Checking infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-shim)
    Checking infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-mesh)
    Checking infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-plugin-api)
    Checking infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/backup)
    Checking infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/relay)
   Compiling openssl v0.10.81
   Compiling tokio-openssl v0.6.5
   Compiling webauthn-attestation-ca v0.5.5
   Compiling webauthn-rs-core v0.5.5
    Checking infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/mesh)
    Checking infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/remote)
    Checking infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-agent)
    Checking webauthn-rs v0.5.5
    Checking axum-server v0.8.0
    Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-server)
    Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal)
    Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/fuzz)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 6m 03s

==> test
   Compiling memchr v2.8.3
   Compiling serde_core v1.0.229
   Compiling getrandom v0.2.17
   Compiling typenum v1.20.1
   Compiling generic-array v0.14.7
   Compiling serde v1.0.229
   Compiling futures-core v0.3.34
   Compiling once_cell v1.21.4
   Compiling zerofrom v0.1.8
   Compiling stable_deref_trait v1.2.1
   Compiling yoke v0.8.3
   Compiling rand_core v0.6.4
   Compiling crypto-common v0.1.7
   Compiling zerovec v0.11.8
   Compiling writeable v0.6.4
   Compiling log v0.4.34
   Compiling litemap v0.8.3
   Compiling tinystr v0.8.4
   Compiling subtle v2.6.1
   Compiling icu_locale_core v2.3.0
   Compiling potential_utf v0.1.6
   Compiling zerotrie v0.2.5
   Compiling tracing-core v0.1.36
   Compiling utf8_iter v1.0.4
   Compiling icu_provider v2.3.1
   Compiling icu_collections v2.3.0
   Compiling block-buffer v0.10.4
   Compiling icu_normalizer_data v2.3.0
   Compiling cpufeatures v0.2.17
   Compiling smallvec v1.16.2
   Compiling icu_properties_data v2.3.0
   Compiling tracing v0.1.44
   Compiling percent-encoding v2.3.2
   Compiling tokio v1.53.2
   Compiling icu_properties v2.3.0
   Compiling num-traits v0.2.19
   Compiling futures-sink v0.3.34
   Compiling form_urlencoded v1.2.2
   Compiling futures-io v0.3.34
   Compiling equivalent v1.0.2
   Compiling slab v0.4.12
   Compiling futures-task v0.3.34
   Compiling scopeguard v1.2.0
   Compiling lock_api v0.4.14
   Compiling hashbrown v0.17.1
   Compiling indexmap v2.14.2
   Compiling thiserror v2.0.21
   Compiling crossbeam-utils v0.8.23
   Compiling digest v0.10.7
   Compiling either v1.18.0
   Compiling serde_json v1.0.151
   Compiling icu_normalizer v2.3.0
   Compiling allocator-api2 v0.2.21
   Compiling foldhash v0.1.5
   Compiling futures-util v0.3.34
   Compiling hashbrown v0.15.5
   Compiling idna_adapter v1.2.2
   Compiling crc-catalog v2.5.0
   Compiling ryu v1.0.23
   Compiling parking v2.2.1
   Compiling event-listener v5.4.2
   Compiling crc v3.4.0
   Compiling idna v1.1.0
   Compiling hashlink v0.10.0
   Compiling parking_lot_core v0.9.12
   Compiling spin v0.9.9
   Compiling mio v1.2.4
   Compiling socket2 v0.6.5
   Compiling parking_lot v0.12.5
   Compiling url v2.5.8
   Compiling futures-channel v0.3.34
   Compiling crossbeam-queue v0.3.14
   Compiling tokio-stream v0.1.19
   Compiling futures-intrusive v0.5.0
   Compiling libsqlite3-sys v0.30.1
   Compiling sha2 v0.10.9
   Compiling hex v0.4.3
   Compiling sqlx-core v0.8.6
   Compiling atoi v2.0.0
   Compiling futures-executor v0.3.34
   Compiling serde_urlencoded v0.7.1
   Compiling flume v0.11.1
   Compiling base64 v0.22.1
   Compiling sqlx-sqlite v0.8.6
   Compiling sqlx-macros-core v0.8.6
   Compiling sqlx-macros v0.8.6
   Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-plugin-api)
   Compiling nix v0.30.1
   Compiling sqlx v0.8.6
   Compiling rand_core v0.10.1
   Compiling zeroize v1.9.0
   Compiling getrandom v0.4.3
   Compiling vte v0.15.0
   Compiling uuid v1.27.0
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-shim)
   Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-protocol)
   Compiling foreign-types-shared v0.1.1
   Compiling foreign-types v0.3.2
   Compiling openssl-sys v0.9.117
   Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-mesh)
   Compiling openssl v0.10.81
   Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/ssh)
   Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/mesh)
   Compiling zerocopy v0.8.60
   Compiling untrusted v0.9.0
   Compiling ring v0.17.14
   Compiling rustls-pki-types v1.15.1
   Compiling http v1.5.0
   Compiling tinyvec v1.13.3
   Compiling cpufeatures v0.3.1
   Compiling chacha20 v0.10.2
   Compiling rustls-webpki v0.103.15
   Compiling ppv-lite86 v0.2.21
   Compiling rand v0.10.3
   Compiling rustls v0.23.45
   Compiling half v2.7.1
   Compiling rand_pcg v0.10.2
   Compiling lru-slab v0.1.3
   Compiling rustc-hash v2.1.3
   Compiling quinn-udp v0.5.16
   Compiling getrandom v0.3.4
   Compiling tokio-openssl v0.6.5
   Compiling num-conv v0.2.2
   Compiling minimal-lexical v0.2.1
   Compiling time-core v0.1.9
   Compiling regex-syntax v0.8.11
   Compiling regex-automata v0.4.18
   Compiling quinn-proto v0.11.19
   Compiling time-macros v0.2.32
   Compiling nom v7.1.3
   Compiling quinn v0.11.12
   Compiling rand_core v0.9.5
   Compiling http-body v1.1.0
   Compiling deranged v0.5.8
   Compiling powerfmt v0.2.1
   Compiling rand_chacha v0.9.0
   Compiling thiserror v1.0.69
   Compiling rusticata-macros v4.1.0
   Compiling httparse v1.10.1
   Compiling time v0.3.55
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/host-facts)
   Compiling tokio-util v0.7.19
   Compiling tower-service v0.3.3
   Compiling data-encoding v2.11.1
   Compiling asn1-rs v0.6.2
   Compiling rand v0.9.5
   Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/remote)
   Compiling num-integer v0.1.47
   Compiling fnv v1.0.7
   Compiling atomic-waker v1.1.2
   Compiling httpdate v1.0.3
   Compiling try-lock v0.2.5
   Compiling base64 v0.21.7
   Compiling lazy_static v1.5.1
   Compiling want v0.3.2
   Compiling base64urlsafedata v0.5.5
   Compiling h2 v0.4.19
   Compiling num-bigint v0.4.8
   Compiling unicase v2.10.0
   Compiling tower-layer v0.3.3
   Compiling mime v0.3.17
   Compiling mime_guess v2.0.5
   Compiling der-parser v9.0.0
   Compiling oid-registry v0.7.1
   Compiling http-body-util v0.1.5
   Compiling infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/release)
   Compiling hyper v1.11.1
   Compiling sha1 v0.10.7
   Compiling sync_wrapper v1.0.2
   Compiling tungstenite v0.29.0
   Compiling x509-parser v0.16.0
   Compiling hyper-util v0.1.21
   Compiling webauthn-attestation-ca v0.5.5
   Compiling webauthn-rs-proto v0.5.5
   Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-agent)
   Compiling serde_cbor_2 v0.13.0
   Compiling rand_chacha v0.3.1
   Compiling hex-conservative v0.2.3
   Compiling base64ct v1.8.3
   Compiling password-hash v0.5.0
   Compiling bitcoin_hashes v0.14.101
   Compiling rand v0.8.8
   Compiling webauthn-rs-core v0.5.5
   Compiling arc-swap v1.9.2
   Compiling tokio-tungstenite v0.29.0
   Compiling fs-err v3.3.2
   Compiling axum-core v0.5.6
   Compiling tower v0.5.3
   Compiling sharded-slab v0.1.7
   Compiling matchers v0.2.0
   Compiling unicode-normalization v0.1.25
   Compiling blake2 v0.10.6
   Compiling tracing-serde v0.2.0
   Compiling tracing-log v0.2.0
   Compiling serde_path_to_error v0.1.20
   Compiling thread_local v1.1.10
   Compiling http-range-header v0.4.2
   Compiling matchit v0.8.4
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-server)
   Compiling nu-ansi-term v0.50.3
   Compiling axum v0.8.9
   Compiling tracing-subscriber v0.3.23
   Compiling tower-http v0.6.11
   Compiling bip39 v2.2.2
   Compiling argon2 v0.5.3
   Compiling webauthn-rs v0.5.5
   Compiling axum-server v0.8.0
   Compiling clap v4.6.7
   Compiling infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/backup)
   Compiling infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/relay)
   Compiling inout v0.1.4
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal)
   Compiling cipher v0.4.4
   Compiling universal-hash v0.5.1
   Compiling opaque-debug v0.3.1
   Compiling polyval v0.6.2
   Compiling vt100 v0.16.2
   Compiling ghash v0.5.1
   Compiling ctr v0.9.2
   Compiling aes v0.8.4
   Compiling hmac v0.12.1
   Compiling aead v0.5.2
   Compiling aes-gcm v0.10.3
   Compiling hkdf v0.12.4
   Compiling crossbeam-epoch v0.9.21
   Compiling crossbeam-deque v0.8.8
   Compiling plotters-backend v0.3.7
   Compiling ciborium-io v0.2.2
   Compiling ciborium-ll v0.2.2
   Compiling plotters-svg v0.3.7
   Compiling rayon-core v1.13.0
   Compiling itertools v0.13.0
   Compiling same-file v1.0.6
   Compiling cast v0.3.0
   Compiling criterion-plot v0.6.0
   Compiling walkdir v2.5.0
   Compiling rayon v1.12.0
   Compiling plotters v0.3.7
   Compiling ciborium v0.2.2
   Compiling regex v1.13.1
   Compiling tinytemplate v1.2.1
   Compiling oorandom v11.1.5
   Compiling anes v0.1.6
   Compiling criterion v0.7.0
    Finished `test` profile [unoptimized + debuginfo] target(s) in 4m 49s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal-d549e36661370196)

running 65 tests
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok
test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok
test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok
test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test status_tests::custom_named_server_service_is_reported_as_running ... ok
test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok
test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok

test result: ok. 65 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.27s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/agent_daemon-5de2ce691037a6fb)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.83s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/agent_queues-e091edc68b27f96c)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.52s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/agent_review-d94b1e14e60e4ef2)

running 8 tests
test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 14.93s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/agent_sessions-02290b123f5f2fd1)

running 3 tests
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok
test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok
test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.84s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/idle_canary-26b2a47f3626ff86)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.27s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/remote_output-174b9538baf046d1)

running 1 test
test remote_refusal_matches_its_declared_cli_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/session_bounds_review-72c64f17fd25b658)

running 1 test
test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.98s

     Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/session_exit_events-11a4cce005fc09ec)

running 1 test
test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.01s

     Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/session_retention-2365452bec4dac67)

running 1 test
test bounded_owned_exit_reconnects_as_ended_with_status ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.73s

     Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/setup_output-0aeb77f16924cef7)

running 1 test
test setup_output_keeps_legacy_and_versioned_readers ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/shim-c81baaf26e3012d1)

running 13 tests
test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok
test unowned_normal_exit_retires_promptly_and_records_status ... ok
test double_fork_survives_parent_death ... ok
test detached_shell_exit_reaps_shim_within_one_second ... ok
test disallowed_signal_only_disconnects_peer ... ok
test replacement_connection_and_malformed_limit ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test real_shell_reconnect_resize_and_delivered_exit ... ok
test attached_backpressure_and_detached_progress ... ok
test delivered_exit_cannot_release_another_owning_window ... ok
test owned_exit_releases_promptly_on_window_close ... ok
test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.24s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/ssh_askpass-617ca478b5d79487)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.12s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/vt_credit-0a8dc350571af348)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.29s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/vt_reconnect-ecf739816bc14d42)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.33s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_agent-dc304b9d51d0941a)

running 86 tests
test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok
test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok
test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok
test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks
test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok
test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok
test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok
test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok
test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok
test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok
test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok
test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok
test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok
test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok
test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok
test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok
test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok
test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok

test result: ok. 74 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 11.03s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/transport-02d53fbe758b717f)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_mesh-25b71fd0307aac40)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/default_arrow-6d2e8df0e7b48da6)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/properties-cb03b103616f12c2)

running 14 tests
test directional_grants_union_and_minimal_updates ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test names_versions_and_backend_status ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.29s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/rotation_time-961162d4330c2fec)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_plugin_api-c495c2150d66af78)

running 20 tests
test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok
test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok
test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok
test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok
test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok
test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok
test action::tests::registry_rejects_inconsistent_json_schemas ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test release_version::tests::accepts_only_worker_version_forms ... ok
test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::public_dispatch_cannot_call_a_machine_control_action ... ok
test tests::operator_presentation_cannot_follow_a_private_control_action ... ok
test tests::machine_actions_are_declared_without_entering_human_discovery ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok
test tests::notifications_are_declared_json_bounded_and_drained_once ... ok

test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/routing_review-b99b0b882dabc235)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_plugin_backup-a417bdd50ad1b333)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_plugin_host_facts-4f71949982aad5d8)

running 13 tests
test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok
test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::configured_memory_floor_refuses_with_current_host_counters ... ok
test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_plugin_mesh-1b760e879d6cc016)

running 25 tests
test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok
test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok
test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok
test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok
test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing.
test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok
test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok
test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok
test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok
test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok
test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok
test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok
test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok
test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok
test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok
test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok
test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok
test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok

test result: ok. 17 passed; 0 failed; 8 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/configuration-836876ba6734f0d1)

running 4 tests
test edition_default_is_explicit_and_build_selected ... ok
test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok
test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok
test large_valid_port_policy_is_split_without_a_port_count_cap ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.37s

     Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/kernel-8886a63e9998e503)

running 6 tests
test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/restart_route_ownership-915aa90068a8947f)

running 1 test
test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/review_endpoint_transaction-466627b0ed41f23e)

running 1 test
test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/review_ingress_translation-bd8664555dc4f00b)

running 2 tests
test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/review_local_delivery-b93d5857cea9a210)

running 2 tests
test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/review_restart_routes-2842f5c26f6abc6e)

running 1 test
test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/review_route_inventory-0efd1dc3b9824c23)

running 2 tests
test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/review_route_scope-2cbe953ad2ece6af)

running 1 test
test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/review_shutdown_budget-cb0fcfe1b2aad42f)

running 1 test
test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/review_shutdown_restart-c5e07544297f612a)

running 3 tests
test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof.
test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.
test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.

test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/settings.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/settings-0d4e5c1ccc396650)

running 1 test
test default_switch_requires_owner_freshness_and_the_preview_revision ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/store.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/store-653d928dd28e0534)

running 5 tests
test key_replacement_preserves_identity_and_addresses_after_restart ... ok
test absent_discovery_preserves_the_last_known_endpoint ... ok
test required_server_membership_cannot_be_deleted ... ok
test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok
test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.63s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_plugin_relay-d765ce907b6d6285)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_plugin_release-d9a3a22170648e3d)

running 8 tests
test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency
test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok
test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok
test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok
test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok
test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok
test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok
test latest::tests::cancellation_joins_verification ... ok

test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.55s

     Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/review_pool-7342401812584e29)

running 1 test
test pending_channel_writers_preserve_authority_read_capacity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.59s

     Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/review_restart-433d5f6159022764)

running 2 tests
test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification
test restarted_latest_reclaims_metadata_after_process_stop ... ok

test result: ok. 1 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_plugin_remote-befabe8c66488616)

running 12 tests
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.08s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_plugin_ssh-8fc5a3d5ae8e8da5)

running 13 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 12 filtered out; finished in 0.00s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 12 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/auth_order-a6672937b409eb18)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/build_removal-ea54acad90939da0)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.52s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/concurrency-84194037b61b4a88)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test component_off_retires_a_real_native_helper ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/config_isolation-7ef0e56361e7afa9)

running 2 tests
test synthetic_master_socket_is_private_at_creation ... ok
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/credentials-d8295318c2cb85c8)

running 3 tests
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/diagnostics-07214f0a23810c1c)

running 8 tests
test every_failed_step_names_the_step_and_a_next_action ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test status_mapping_preserves_authentication_and_missing_payload_classification ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/event_metadata-44d697ac35cff957)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/foreground-a7c134dfcb5c5797)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/host_trust-956578b69494d660)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/install-c9a4eb681da6c6e1)

running 30 tests
test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.79s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/model-8d8a118fb482cb01)

running 5 tests
test consent_and_credential_references_are_the_only_request_authority ... ok
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/payload_source.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/payload_source-2b9cf9e8f172fa9d)

running 2 tests
test verification_failure_names_step_and_stops_before_upload ... ok
test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/probe_check-4c243b7c35682a6f)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/process-52eb00630d90c109)

running 5 tests
test completed_helper_retires_descendants_with_closed_pipes ... ok
test cancellation_retires_the_helper_descendant_too ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/proxy_policy-ca5da5ebac2b936e)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/real_ssh-7e667740bdea77a4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/single_connection-824b96a985bd76a6)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/source_completeness-221723904e9d35a3)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/trust_round2-78f0ff3b67dbad9b)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_server-e66837f90a21069b)

running 368 tests
test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions
test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok
test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok
test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok
test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok
test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok
test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok
test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket has been running for over 60 seconds
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok
test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope
test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok
test release_build_tests::release_build_marker_is_explicit ... ok
test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok
test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok
test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok
test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark
test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement
test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok
test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok
test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok
test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope
test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok
test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok
test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok
test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification
test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok
test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok
test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok
test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok
test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok
test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok
test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok
test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok

test result: ok. 329 passed; 0 failed; 39 ignored; 0 measured; 0 filtered out; finished in 209.46s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/catalog_startup-7dd8be68f0697857)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/enrollment-32f61b19a7c9b610)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test concurrent_redemption_has_one_winner_and_one_certificate ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.14s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/mesh_parser-13fd59a4a8708f05)

running 2 tests
test review_grant_parser_rejects_unknown_nested_port_fields ... ok
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/mesh_review_plugin-1de3bc1351e8739c)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/mesh_review_policy-44ce3d3efaec58dc)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/mesh_review_role_scope-4848c1545d27cd89)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/plugin_host_review-e125600348cb05bb)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_disable_answers_inflight_call ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.50s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/plugin_settings_review-f9f86b6508eec089)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.34s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/remote_plugin_contract-467d546d48fb6a49)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.24s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_shim-6198daaedaec1ac5)

running 87 tests
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok
test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok
test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok
test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok
test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test locale::tests::invalid_shell_expressions_are_ignored ... ok
test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement

running 1 test
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test pty::child_locale_tests::spawned_login_shell_receives_selected_locale_without_other_host_variables ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 86 filtered out; finished in 0.00s

test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 74 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 33.52s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/detach-f17510b824ed2469)

running 2 tests
test detached_child_restores_default_signals_without_changing_parent ... ok
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.03s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/mouse-0d16f77afbdea7cb)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s

     Running tests/process_exit_descriptor.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/process_exit_descriptor-67dfefbd2451d374)

running 2 tests
test invalid_pid_never_creates_a_descriptor ... ok
test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_backup

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_relay

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_release

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   ├── infraternal-fuzz v0.1.0
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0 (*)
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-mesh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   ├── infraternal-plugin-release v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-mesh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   ├── infraternal-fuzz v0.1.0 (*)
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-mesh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-mesh v0.1.0 (*)
         ├── infraternal-plugin-release v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-mesh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   ├── hyper v1.11.1
         │   │   ├── axum v0.8.9
         │   │   │   ├── infraternal-fuzz v0.1.0
         │   │   │   └── infraternal-server v0.1.0
         │   │   │       ├── infraternal v0.1.0
         │   │   │       └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── axum-server v0.8.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── hyper-util v0.1.21
         │   │   │   ├── axum v0.8.9 (*)
         │   │   │   ├── axum-server v0.8.0 (*)
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   │   ├── infraternal v0.1.0 (*)
         │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal v0.1.0 (*)
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-mesh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   └── infraternal-plugin-mesh v0.1.0
             │   │   │       ├── infraternal v0.1.0 (*)
             │   │   │       ├── infraternal-agent v0.1.0 (*)
             │   │   │       ├── infraternal-fuzz v0.1.0 (*)
             │   │   │       └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-backup v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   │   ├── infraternal-plugin-relay v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-release v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   ├── infraternal-plugin-release v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:197:1
    │  
197 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
198 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   ├── infraternal-fuzz v0.1.0 (*)
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-mesh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │       └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-backup v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-relay v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-release v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-mesh v0.1.0 (*)
              ├── infraternal-plugin-release v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:199:1
    │  
199 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
201 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:202:1
    │  
202 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:204:1
    │  
204 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
205 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
206 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:248:1
    │  
248 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
249 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-mesh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-backup v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-relay v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-release v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-release v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-release v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │   │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── (dev) infraternal v0.1.0 (*)
      │       ├── (dev) infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:251:1
    │  
251 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
252 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │       ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-release v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:254:1
    │  
254 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
255 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   ├── infraternal v0.1.0 (*)
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0
      │       │   └── infraternal-server v0.1.0
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── infraternal-fuzz v0.1.0 (*)
      │       ├── infraternal-fuzz v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:256:1
    │  
256 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
257 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   ├── infraternal v0.1.0 (*)
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal v0.1.0 (*)
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-fuzz v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-backup v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-relay v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-release v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   ├── infraternal-plugin-release v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   ├── infraternal-fuzz v0.1.0 (*)
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:314:1
    │  
314 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
315 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-release v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   ├── hyper v1.11.1
      │           │   │   ├── axum v0.8.9 (*)
      │           │   │   ├── axum-server v0.8.0 (*)
      │           │   │   ├── hyper-util v0.1.21
      │           │   │   │   ├── axum v0.8.9 (*)
      │           │   │   │   ├── axum-server v0.8.0 (*)
      │           │   │   │   ├── infraternal v0.1.0 (*)
      │           │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── (dev) infraternal v0.1.0 (*)
      │           ├── (dev) infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-mesh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-backup v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-relay v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-release v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
   Compiling proc-macro2 v1.0.107
   Compiling quote v1.0.47
   Compiling unicode-ident v1.0.26
   Compiling libc v0.2.190
   Compiling syn v3.0.6
   Compiling syn v2.0.119
   Compiling cfg-if v1.0.5
   Compiling synstructure v0.14.0
   Compiling zerofrom-derive v0.1.8
   Compiling yoke-derive v0.8.4
   Compiling displaydoc v0.2.7
   Compiling serde v1.0.229
   Compiling shlex v2.0.1
   Compiling find-msvc-tools v0.1.14
   Compiling zerovec-derive v0.11.6
   Compiling cc v1.6.0
   Compiling serde_derive v1.0.229
   Compiling autocfg v1.5.1
   Compiling serde_core v1.0.229
   Compiling pin-project-lite v0.2.17
   Compiling version_check v0.9.5
   Compiling generic-array v0.14.7
   Compiling tracing-attributes v0.1.31
   Compiling pkg-config v0.3.34
   Compiling bytes v1.12.1
   Compiling vcpkg v0.2.15
   Compiling icu_normalizer_data v2.3.0
   Compiling once_cell v1.21.4
   Compiling memchr v2.8.3
   Compiling icu_properties_data v2.3.0
   Compiling itoa v1.0.18
   Compiling log v0.4.34
   Compiling tracing-core v0.1.36
   Compiling futures-core v0.3.34
   Compiling zerofrom v0.1.8
   Compiling stable_deref_trait v1.2.1
   Compiling yoke v0.8.3
   Compiling socket2 v0.6.5
   Compiling errno v0.3.14
   Compiling smallvec v1.16.2
   Compiling signal-hook-registry v1.4.8
   Compiling tracing v0.1.44
   Compiling tokio-macros v2.7.2
   Compiling mio v1.2.4
   Compiling zerovec v0.11.8
   Compiling tokio v1.53.2
   Compiling futures-sink v0.3.34
   Compiling thiserror v2.0.21
   Compiling subtle v2.6.1
   Compiling parking_lot_core v0.9.12
   Compiling slab v0.4.12
   Compiling thiserror-impl v2.0.21
   Compiling zmij v1.0.23
   Compiling typenum v1.20.1
   Compiling tinystr v0.8.4
   Compiling num-traits v0.2.19
   Compiling crossbeam-utils v0.8.23
   Compiling writeable v0.6.4
   Compiling litemap v0.8.3
   Compiling icu_locale_core v2.3.0
   Compiling potential_utf v0.1.6
   Compiling zerotrie v0.2.5
   Compiling utf8_iter v1.0.4
   Compiling icu_collections v2.3.0
   Compiling icu_provider v2.3.1
   Compiling block-buffer v0.10.4
   Compiling crypto-common v0.1.7
   Compiling equivalent v1.0.2
   Compiling percent-encoding v2.3.2
   Compiling digest v0.10.7
   Compiling scopeguard v1.2.0
   Compiling lock_api v0.4.14
   Compiling icu_properties v2.3.0
   Compiling icu_normalizer v2.3.0
   Compiling form_urlencoded v1.2.2
   Compiling libsqlite3-sys v0.30.1
   Compiling futures-macro v0.3.34
   Compiling cpufeatures v0.2.17
   Compiling futures-io v0.3.34
   Compiling futures-task v0.3.34
   Compiling hashbrown v0.17.1
   Compiling futures-util v0.3.34
   Compiling indexmap v2.14.2
   Compiling idna_adapter v1.2.2
   Compiling idna v1.1.0
   Compiling serde_json v1.0.151
   Compiling allocator-api2 v0.2.21
   Compiling foldhash v0.1.5
   Compiling hashbrown v0.15.5
   Compiling url v2.5.8
   Compiling parking_lot v0.12.5
   Compiling futures-channel v0.3.34
   Compiling openssl-src v300.6.1+3.6.3
   Compiling cfg_aliases v0.2.2
   Compiling parking v2.2.1
   Compiling crc-catalog v2.5.0
   Compiling crc v3.4.0
   Compiling event-listener v5.4.2
   Compiling sha2 v0.10.9
   Compiling openssl-sys v0.9.117
   Compiling futures-intrusive v0.5.0
   Compiling crossbeam-queue v0.3.14
   Compiling tokio-stream v0.1.19
   Compiling hashlink v0.10.0
   Compiling either v1.18.0
   Compiling spin v0.9.9
   Compiling ryu v1.0.23
   Compiling rand_core v0.10.1
   Compiling zerocopy v0.8.60
   Compiling heck v0.5.0
   Compiling bitflags v2.13.2
   Compiling base64 v0.22.1
   Compiling sqlx-core v0.8.6
   Compiling serde_urlencoded v0.7.1
   Compiling flume v0.11.1
   Compiling atoi v2.0.0
   Compiling futures-executor v0.3.34
   Compiling zerocopy-derive v0.8.60
   Compiling getrandom v0.4.3
   Compiling sqlx-sqlite v0.8.6
   Compiling getrandom v0.2.17
   Compiling hex v0.4.3
   Compiling dotenvy v0.15.7
   Compiling sqlx-macros-core v0.8.6
   Compiling sqlx-macros v0.8.6
   Compiling http v1.5.0
   Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-plugin-api)
   Compiling sqlx v0.8.6
   Compiling ppv-lite86 v0.2.21
   Compiling memoffset v0.9.1
   Compiling getrandom v0.3.4
   Compiling openssl v0.10.81
   Compiling foreign-types-shared v0.1.1
   Compiling foreign-types v0.3.2
   Compiling nix v0.30.1
   Compiling zeroize v1.9.0
   Compiling ring v0.17.14
   Compiling openssl-macros v0.1.1
   Compiling httparse v1.10.1
   Compiling num-conv v0.2.2
   Compiling thiserror v1.0.69
   Compiling minimal-lexical v0.2.1
   Compiling arrayvec v0.7.8
   Compiling time-core v0.1.9
   Compiling time-macros v0.2.32
   Compiling nom v7.1.3
   Compiling rand_core v0.9.5
   Compiling http-body v1.1.0
   Compiling uuid v1.27.0
   Compiling thiserror-impl v1.0.69
   Compiling synstructure v0.13.2
   Compiling untrusted v0.9.0
   Compiling deranged v0.5.8
   Compiling powerfmt v0.2.1
   Compiling time v0.3.55
   Compiling asn1-rs-derive v0.5.1
   Compiling rand_chacha v0.9.0
   Compiling rusticata-macros v4.1.0
   Compiling rustls-pki-types v1.15.1
   Compiling tokio-util v0.7.19
   Compiling asn1-rs-impl v0.2.0
   Compiling cpufeatures v0.3.1
   Compiling tower-service v0.3.3
   Compiling data-encoding v2.11.1
   Compiling rustls v0.23.45
   Compiling tinyvec v1.13.3
   Compiling chacha20 v0.10.2
   Compiling asn1-rs v0.6.2
   Compiling rustls-webpki v0.103.15
   Compiling rand v0.9.5
   Compiling rand_core v0.6.4
   Compiling quinn-udp v0.5.16
   Compiling num-integer v0.1.47
   Compiling try-lock v0.2.5
   Compiling pastey v0.1.1
   Compiling tokio-openssl v0.6.5
   Compiling httpdate v1.0.3
   Compiling base64 v0.21.7
   Compiling lazy_static v1.5.1
   Compiling fnv v1.0.7
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-shim)
   Compiling atomic-waker v1.1.2
   Compiling oid-registry v0.7.1
   Compiling h2 v0.4.19
   Compiling base64urlsafedata v0.5.5
   Compiling want v0.3.2
   Compiling num-bigint v0.4.8
   Compiling rand v0.10.3
   Compiling vte v0.15.0
   Compiling rand_pcg v0.10.2
   Compiling quinn v0.11.12
   Compiling mime v0.3.17
   Compiling unicase v2.10.0
   Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-protocol)
   Compiling rustc-hash v2.1.3
   Compiling webauthn-attestation-ca v0.5.5
   Compiling rustversion v1.0.23
   Compiling lru-slab v0.1.3
   Compiling tower-layer v0.3.3
   Compiling quinn-proto v0.11.19
   Compiling mime_guess v2.0.5
   Compiling der-parser v9.0.0
   Compiling hyper v1.11.1
   Compiling http-body-util v0.1.5
   Compiling half v2.7.1
   Compiling sha1 v0.10.7
   Compiling fs-err v3.3.2
   Compiling webauthn-rs-core v0.5.5
   Compiling sync_wrapper v1.0.2
   Compiling utf8parse v0.2.2
   Compiling regex-syntax v0.8.11
   Compiling regex-automata v0.4.18
   Compiling anstyle-parse v1.0.0
   Compiling tungstenite v0.29.0
   Compiling serde_cbor_2 v0.13.0
   Compiling x509-parser v0.16.0
   Compiling hyper-util v0.1.21
   Compiling webauthn-rs-proto v0.5.5
   Compiling rand_chacha v0.3.1
   Compiling hex-conservative v0.2.3
   Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-mesh)
   Compiling colorchoice v1.0.5
   Compiling base64ct v1.8.3
   Compiling is_terminal_polyfill v1.70.2
   Compiling anstyle v1.0.14
   Compiling anstyle-query v1.1.5
   Compiling anstream v1.0.0
   Compiling password-hash v0.5.0
   Compiling bitcoin_hashes v0.14.101
   Compiling rand v0.8.8
   Compiling arc-swap v1.9.2
   Compiling tokio-tungstenite v0.29.0
   Compiling matchers v0.2.0
   Compiling axum-core v0.5.6
   Compiling tower v0.5.3
   Compiling sharded-slab v0.1.7
   Compiling unicode-normalization v0.1.25
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/host-facts)
   Compiling blake2 v0.10.6
   Compiling tracing-serde v0.2.0
   Compiling tracing-log v0.2.0
   Compiling serde_path_to_error v0.1.20
   Compiling thread_local v1.1.10
   Compiling http-range-header v0.4.2
   Compiling clap_lex v1.1.1
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-server)
   Compiling nu-ansi-term v0.50.3
   Compiling matchit v0.8.4
   Compiling strsim v0.11.1
   Compiling clap_builder v4.6.7
   Compiling axum v0.8.9
   Compiling tracing-subscriber v0.3.23
   Compiling tower-http v0.6.11
   Compiling argon2 v0.5.3
   Compiling bip39 v2.2.2
   Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/ssh)
   Compiling infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/release)
   Compiling clap_derive v4.6.7
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal)
   Compiling clap v4.6.7
   Compiling infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/relay)
   Compiling infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/backup)
   Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/remote)
   Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/mesh)
   Compiling webauthn-rs v0.5.5
   Compiling axum-server v0.8.0
   Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-agent)
    Finished `release` profile [optimized] target(s) in 11m 52s
/home/kayg/.cache/codex-scratch/access-rules-v2/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 21857264 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Spec v2 finished as documentation; integration gate remains blocked. Head dcec7b2d325837414593eaa8eb2027b43b10424e on access-rules-v2 is pushed. Reports + spec only: four documentation paths differ from b0691640, no product code/decisions/dependencies/budgets changed. Finding dispositions: 57 resolved in draft, 2 accepted P2 limitations, 6 owner-dependent findings = all 65 IDs, exactly matching source severities (33 P0, 27 P1, 5 P2). Seven owner questions are copied verbatim below. Draft repairs are not runtime proof or owner approval. Evidence and self-review: docs/design/access-rules.md, canonical grammar/JSON, 22 examples, verification log and exhaustive trace table. 10000 quote/token round trips had 0 failures; 3/3 invalid delimiter cases and 6/6 structural JSON negatives refused. All three reports remain byte-identical to the supplied refs. Final-head scripts/verify fast exited 1: fmt, VT native fmt, CLI compile-out, clippy, workspace tests and cargo-deny PASS; static builds FAIL. The stripped x86_64 musl binary is 21,857,264 bytes versus 16,404,816 maximum, 5,452,448 over, exactly the round-one reports’ unchanged-source result. Rust failure stops the dispatcher before aarch64 and TypeScript; no TypeScript source was touched. No host-load test failure needed the baseline exception. Passing this gate requires the D243 size-reduction/integration work from the orchestrator; this documentation-only brief does not authorize product fixes or raising the budget. Run machine: infraternal-dev; CPUWeight=10000 scope, CARGO_BUILD_JOBS=2, job-specific scratch target and TRACER_TEST_PORT=4386. Timing lines in the mandatory transcript are incidental gate output, not performance evidence; no benchmarks or remote lab hosts used. Previous superseded-head runs were stopped after specification corrections; the transcript below is the complete final-head run. Job scratch/build output is being deleted after preserving this record. Issue stays open. Owner questions (verbatim): 1. **Q1 — Should one access-rule language also replace D252's three headings?** Recommendation: keep Roles, Network access and Login access as headings; share the sentence/body/evaluator and offer an All filter. This achieves one model without changing settled names. 2. **Q2 — How should a browser outside the mesh name a local-service tunnel requester?** Recommendation: declare a narrow Roles action, `Open service tunnel`, checked for the person/token and final service, as the browser equivalent of a reach check; do not pretend the browser is a machine. This changes v1 safety property 7's universal reach requirement; refuse these tunnels until decided. 3. **Q3 — Is exact username matching sufficient when a local account is shared or replaced?** Recommendation: require verified personal account identity/generation for the own-username rule, excluding shared accounts; retain D235's automatic exact-name path only where that validation succeeds, and use explicit named-account rules otherwise. This tightens D235's username-only default; refuse uncertain matching until decided. 4. **Q4 — Should boot enrollment wait for separate admission before defaults apply?** Recommendation: approve boot as a one-use, one-hour image offer, confirm its requester key, then quarantine the enrolled host until an administrator previews admission. Keep ordinary D237 joins unchanged. PXE has no settled decision yet; this resolves v1's “no other access” promise without weakening it. 5. **Q5 — Should D154's own-session built-in yield to login revocation?** Recommendation: yes; split view and end, keep safe status/end metadata, and stop live output/input plus the underlying login when access is lost. Historical output requires separate permission. This clarifies “always” against D242 and D240. 6. **Q6 — Should access-widening identity-provider additions wait for review?** Recommendation: yes; apply removals immediately, stage additions and preview the combined effective diff before activation. This adds an explicit apply boundary to D154/D235's read-only synced groups; do not apply unreviewed widening while the question is open. 7. **Q7 — Which outage behavior wins when D166 and D242 conflict?** Recommendation: replace indefinite offline mesh authorization with bounded fail-closed access leases, align direct and mesh paths, and show pending removal until all enforcement points acknowledge or leases expire. Propose a maximum of 60 seconds, subject to owner approval and perf-VM propagation/availability measurements; do not claim instantaneous global revocation. This requires amending D166/D242, not merely changing text in this draft. Final-head gate output (verbatim, complete): ```text Running as unit: run-p831581-i13412881.scope; invocation ID: f8b1ce9cec1e4201acc0bdeda43e6273 METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=299.61 p99_ms=315.38 result=PASS ==> fmt ==> VT native fmt ==> CLI plugin compile-out disabled CLI plugin dependencies: absent from normal dependency graph Finished `test` profile [unoptimized + debuginfo] target(s) in 0.18s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal-d0028d263474a180) running 24 tests test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test status_tests::custom_named_server_service_is_reported_as_running ... ok test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s ==> clippy Compiling openssl-sys v0.9.117 Checking infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/ssh) Checking infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-shim) Checking infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-mesh) Checking infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-plugin-api) Checking infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/backup) Checking infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/relay) Compiling openssl v0.10.81 Compiling tokio-openssl v0.6.5 Compiling webauthn-attestation-ca v0.5.5 Compiling webauthn-rs-core v0.5.5 Checking infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/mesh) Checking infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/remote) Checking infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-agent) Checking webauthn-rs v0.5.5 Checking axum-server v0.8.0 Checking infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-server) Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal) Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/fuzz) Finished `dev` profile [unoptimized + debuginfo] target(s) in 6m 03s ==> test Compiling memchr v2.8.3 Compiling serde_core v1.0.229 Compiling getrandom v0.2.17 Compiling typenum v1.20.1 Compiling generic-array v0.14.7 Compiling serde v1.0.229 Compiling futures-core v0.3.34 Compiling once_cell v1.21.4 Compiling zerofrom v0.1.8 Compiling stable_deref_trait v1.2.1 Compiling yoke v0.8.3 Compiling rand_core v0.6.4 Compiling crypto-common v0.1.7 Compiling zerovec v0.11.8 Compiling writeable v0.6.4 Compiling log v0.4.34 Compiling litemap v0.8.3 Compiling tinystr v0.8.4 Compiling subtle v2.6.1 Compiling icu_locale_core v2.3.0 Compiling potential_utf v0.1.6 Compiling zerotrie v0.2.5 Compiling tracing-core v0.1.36 Compiling utf8_iter v1.0.4 Compiling icu_provider v2.3.1 Compiling icu_collections v2.3.0 Compiling block-buffer v0.10.4 Compiling icu_normalizer_data v2.3.0 Compiling cpufeatures v0.2.17 Compiling smallvec v1.16.2 Compiling icu_properties_data v2.3.0 Compiling tracing v0.1.44 Compiling percent-encoding v2.3.2 Compiling tokio v1.53.2 Compiling icu_properties v2.3.0 Compiling num-traits v0.2.19 Compiling futures-sink v0.3.34 Compiling form_urlencoded v1.2.2 Compiling futures-io v0.3.34 Compiling equivalent v1.0.2 Compiling slab v0.4.12 Compiling futures-task v0.3.34 Compiling scopeguard v1.2.0 Compiling lock_api v0.4.14 Compiling hashbrown v0.17.1 Compiling indexmap v2.14.2 Compiling thiserror v2.0.21 Compiling crossbeam-utils v0.8.23 Compiling digest v0.10.7 Compiling either v1.18.0 Compiling serde_json v1.0.151 Compiling icu_normalizer v2.3.0 Compiling allocator-api2 v0.2.21 Compiling foldhash v0.1.5 Compiling futures-util v0.3.34 Compiling hashbrown v0.15.5 Compiling idna_adapter v1.2.2 Compiling crc-catalog v2.5.0 Compiling ryu v1.0.23 Compiling parking v2.2.1 Compiling event-listener v5.4.2 Compiling crc v3.4.0 Compiling idna v1.1.0 Compiling hashlink v0.10.0 Compiling parking_lot_core v0.9.12 Compiling spin v0.9.9 Compiling mio v1.2.4 Compiling socket2 v0.6.5 Compiling parking_lot v0.12.5 Compiling url v2.5.8 Compiling futures-channel v0.3.34 Compiling crossbeam-queue v0.3.14 Compiling tokio-stream v0.1.19 Compiling futures-intrusive v0.5.0 Compiling libsqlite3-sys v0.30.1 Compiling sha2 v0.10.9 Compiling hex v0.4.3 Compiling sqlx-core v0.8.6 Compiling atoi v2.0.0 Compiling futures-executor v0.3.34 Compiling serde_urlencoded v0.7.1 Compiling flume v0.11.1 Compiling base64 v0.22.1 Compiling sqlx-sqlite v0.8.6 Compiling sqlx-macros-core v0.8.6 Compiling sqlx-macros v0.8.6 Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-plugin-api) Compiling nix v0.30.1 Compiling sqlx v0.8.6 Compiling rand_core v0.10.1 Compiling zeroize v1.9.0 Compiling getrandom v0.4.3 Compiling vte v0.15.0 Compiling uuid v1.27.0 Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-shim) Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-protocol) Compiling foreign-types-shared v0.1.1 Compiling foreign-types v0.3.2 Compiling openssl-sys v0.9.117 Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-mesh) Compiling openssl v0.10.81 Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/ssh) Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/mesh) Compiling zerocopy v0.8.60 Compiling untrusted v0.9.0 Compiling ring v0.17.14 Compiling rustls-pki-types v1.15.1 Compiling http v1.5.0 Compiling tinyvec v1.13.3 Compiling cpufeatures v0.3.1 Compiling chacha20 v0.10.2 Compiling rustls-webpki v0.103.15 Compiling ppv-lite86 v0.2.21 Compiling rand v0.10.3 Compiling rustls v0.23.45 Compiling half v2.7.1 Compiling rand_pcg v0.10.2 Compiling lru-slab v0.1.3 Compiling rustc-hash v2.1.3 Compiling quinn-udp v0.5.16 Compiling getrandom v0.3.4 Compiling tokio-openssl v0.6.5 Compiling num-conv v0.2.2 Compiling minimal-lexical v0.2.1 Compiling time-core v0.1.9 Compiling regex-syntax v0.8.11 Compiling regex-automata v0.4.18 Compiling quinn-proto v0.11.19 Compiling time-macros v0.2.32 Compiling nom v7.1.3 Compiling quinn v0.11.12 Compiling rand_core v0.9.5 Compiling http-body v1.1.0 Compiling deranged v0.5.8 Compiling powerfmt v0.2.1 Compiling rand_chacha v0.9.0 Compiling thiserror v1.0.69 Compiling rusticata-macros v4.1.0 Compiling httparse v1.10.1 Compiling time v0.3.55 Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/host-facts) Compiling tokio-util v0.7.19 Compiling tower-service v0.3.3 Compiling data-encoding v2.11.1 Compiling asn1-rs v0.6.2 Compiling rand v0.9.5 Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/remote) Compiling num-integer v0.1.47 Compiling fnv v1.0.7 Compiling atomic-waker v1.1.2 Compiling httpdate v1.0.3 Compiling try-lock v0.2.5 Compiling base64 v0.21.7 Compiling lazy_static v1.5.1 Compiling want v0.3.2 Compiling base64urlsafedata v0.5.5 Compiling h2 v0.4.19 Compiling num-bigint v0.4.8 Compiling unicase v2.10.0 Compiling tower-layer v0.3.3 Compiling mime v0.3.17 Compiling mime_guess v2.0.5 Compiling der-parser v9.0.0 Compiling oid-registry v0.7.1 Compiling http-body-util v0.1.5 Compiling infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/release) Compiling hyper v1.11.1 Compiling sha1 v0.10.7 Compiling sync_wrapper v1.0.2 Compiling tungstenite v0.29.0 Compiling x509-parser v0.16.0 Compiling hyper-util v0.1.21 Compiling webauthn-attestation-ca v0.5.5 Compiling webauthn-rs-proto v0.5.5 Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-agent) Compiling serde_cbor_2 v0.13.0 Compiling rand_chacha v0.3.1 Compiling hex-conservative v0.2.3 Compiling base64ct v1.8.3 Compiling password-hash v0.5.0 Compiling bitcoin_hashes v0.14.101 Compiling rand v0.8.8 Compiling webauthn-rs-core v0.5.5 Compiling arc-swap v1.9.2 Compiling tokio-tungstenite v0.29.0 Compiling fs-err v3.3.2 Compiling axum-core v0.5.6 Compiling tower v0.5.3 Compiling sharded-slab v0.1.7 Compiling matchers v0.2.0 Compiling unicode-normalization v0.1.25 Compiling blake2 v0.10.6 Compiling tracing-serde v0.2.0 Compiling tracing-log v0.2.0 Compiling serde_path_to_error v0.1.20 Compiling thread_local v1.1.10 Compiling http-range-header v0.4.2 Compiling matchit v0.8.4 Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-server) Compiling nu-ansi-term v0.50.3 Compiling axum v0.8.9 Compiling tracing-subscriber v0.3.23 Compiling tower-http v0.6.11 Compiling bip39 v2.2.2 Compiling argon2 v0.5.3 Compiling webauthn-rs v0.5.5 Compiling axum-server v0.8.0 Compiling clap v4.6.7 Compiling infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/backup) Compiling infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/relay) Compiling inout v0.1.4 Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal) Compiling cipher v0.4.4 Compiling universal-hash v0.5.1 Compiling opaque-debug v0.3.1 Compiling polyval v0.6.2 Compiling vt100 v0.16.2 Compiling ghash v0.5.1 Compiling ctr v0.9.2 Compiling aes v0.8.4 Compiling hmac v0.12.1 Compiling aead v0.5.2 Compiling aes-gcm v0.10.3 Compiling hkdf v0.12.4 Compiling crossbeam-epoch v0.9.21 Compiling crossbeam-deque v0.8.8 Compiling plotters-backend v0.3.7 Compiling ciborium-io v0.2.2 Compiling ciborium-ll v0.2.2 Compiling plotters-svg v0.3.7 Compiling rayon-core v1.13.0 Compiling itertools v0.13.0 Compiling same-file v1.0.6 Compiling cast v0.3.0 Compiling criterion-plot v0.6.0 Compiling walkdir v2.5.0 Compiling rayon v1.12.0 Compiling plotters v0.3.7 Compiling ciborium v0.2.2 Compiling regex v1.13.1 Compiling tinytemplate v1.2.1 Compiling oorandom v11.1.5 Compiling anes v0.1.6 Compiling criterion v0.7.0 Finished `test` profile [unoptimized + debuginfo] target(s) in 4m 49s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal-d549e36661370196) running 65 tests test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test status_tests::custom_named_server_service_is_reported_as_running ... ok test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test result: ok. 65 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.27s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/agent_daemon-5de2ce691037a6fb) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.83s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/agent_queues-e091edc68b27f96c) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.52s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/agent_review-d94b1e14e60e4ef2) running 8 tests test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 14.93s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/agent_sessions-02290b123f5f2fd1) running 3 tests test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.84s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/idle_canary-26b2a47f3626ff86) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.27s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/remote_output-174b9538baf046d1) running 1 test test remote_refusal_matches_its_declared_cli_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/session_bounds_review-72c64f17fd25b658) running 1 test test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.98s Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/session_exit_events-11a4cce005fc09ec) running 1 test test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.01s Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/session_retention-2365452bec4dac67) running 1 test test bounded_owned_exit_reconnects_as_ended_with_status ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.73s Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/setup_output-0aeb77f16924cef7) running 1 test test setup_output_keeps_legacy_and_versioned_readers ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/shim-c81baaf26e3012d1) running 13 tests test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok test unowned_normal_exit_retires_promptly_and_records_status ... ok test double_fork_survives_parent_death ... ok test detached_shell_exit_reaps_shim_within_one_second ... ok test disallowed_signal_only_disconnects_peer ... ok test replacement_connection_and_malformed_limit ... ok active test user_scope_survives_parent_unit_stop ... ok test real_shell_reconnect_resize_and_delivered_exit ... ok test attached_backpressure_and_detached_progress ... ok test delivered_exit_cannot_release_another_owning_window ... ok test owned_exit_releases_promptly_on_window_close ... ok test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.24s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/ssh_askpass-617ca478b5d79487) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.12s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/vt_credit-0a8dc350571af348) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.29s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/vt_reconnect-ecf739816bc14d42) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.33s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_agent-dc304b9d51d0941a) running 86 tests test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000 test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok test result: ok. 74 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 11.03s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/transport-02d53fbe758b717f) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_mesh-25b71fd0307aac40) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/default_arrow-6d2e8df0e7b48da6) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/properties-cb03b103616f12c2) running 14 tests test directional_grants_union_and_minimal_updates ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test overlaps_are_reported_without_silent_range_changes ... ok test names_versions_and_backend_status ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test addresses_are_unique_stable_and_not_recycled ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.29s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/rotation_time-961162d4330c2fec) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_plugin_api-c495c2150d66af78) running 20 tests test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok test action::tests::registry_rejects_inconsistent_json_schemas ... ok test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test release_version::tests::accepts_only_worker_version_forms ... ok test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::public_dispatch_cannot_call_a_machine_control_action ... ok test tests::operator_presentation_cannot_follow_a_private_control_action ... ok test tests::machine_actions_are_declared_without_entering_human_discovery ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test tests::notifications_are_declared_json_bounded_and_drained_once ... ok test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/routing_review-b99b0b882dabc235) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_plugin_backup-a417bdd50ad1b333) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_plugin_host_facts-4f71949982aad5d8) running 13 tests test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::configured_memory_floor_refuses_with_current_host_counters ... ok test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_plugin_mesh-1b760e879d6cc016) running 25 tests test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing. test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok test result: ok. 17 passed; 0 failed; 8 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/configuration-836876ba6734f0d1) running 4 tests test edition_default_is_explicit_and_build_selected ... ok test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok test large_valid_port_policy_is_split_without_a_port_count_cap ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.37s Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/kernel-8886a63e9998e503) running 6 tests test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/restart_route_ownership-915aa90068a8947f) running 1 test test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/review_endpoint_transaction-466627b0ed41f23e) running 1 test test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/review_ingress_translation-bd8664555dc4f00b) running 2 tests test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/review_local_delivery-b93d5857cea9a210) running 2 tests test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/review_restart_routes-2842f5c26f6abc6e) running 1 test test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/review_route_inventory-0efd1dc3b9824c23) running 2 tests test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/review_route_scope-2cbe953ad2ece6af) running 1 test test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/review_shutdown_budget-cb0fcfe1b2aad42f) running 1 test test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/review_shutdown_restart-c5e07544297f612a) running 3 tests test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof. test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/settings.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/settings-0d4e5c1ccc396650) running 1 test test default_switch_requires_owner_freshness_and_the_preview_revision ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/store.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/store-653d928dd28e0534) running 5 tests test key_replacement_preserves_identity_and_addresses_after_restart ... ok test absent_discovery_preserves_the_last_known_endpoint ... ok test required_server_membership_cannot_be_deleted ... ok test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.63s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_plugin_relay-d765ce907b6d6285) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_plugin_release-d9a3a22170648e3d) running 8 tests test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok test latest::tests::cancellation_joins_verification ... ok test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.55s Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/review_pool-7342401812584e29) running 1 test test pending_channel_writers_preserve_authority_read_capacity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.59s Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/review_restart-433d5f6159022764) running 2 tests test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification test restarted_latest_reclaims_metadata_after_process_stop ... ok test result: ok. 1 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.05s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_plugin_remote-befabe8c66488616) running 12 tests test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.08s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_plugin_ssh-8fc5a3d5ae8e8da5) running 13 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 12 filtered out; finished in 0.00s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 12 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/auth_order-a6672937b409eb18) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/build_removal-ea54acad90939da0) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.52s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/concurrency-84194037b61b4a88) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test component_off_retires_a_real_native_helper ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/config_isolation-7ef0e56361e7afa9) running 2 tests test synthetic_master_socket_is_private_at_creation ... ok test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/credentials-d8295318c2cb85c8) running 3 tests test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/diagnostics-07214f0a23810c1c) running 8 tests test every_failed_step_names_the_step_and_a_next_action ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test status_mapping_preserves_authentication_and_missing_payload_classification ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/event_metadata-44d697ac35cff957) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/foreground-a7c134dfcb5c5797) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/host_trust-956578b69494d660) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/install-c9a4eb681da6c6e1) running 30 tests test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test refused_previous_service_stop_only_removes_staging ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.79s Running tests/model.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/model-8d8a118fb482cb01) running 5 tests test consent_and_credential_references_are_the_only_request_authority ... ok test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/payload_source.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/payload_source-2b9cf9e8f172fa9d) running 2 tests test verification_failure_names_step_and_stops_before_upload ... ok test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/probe_check-4c243b7c35682a6f) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s Running tests/process.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/process-52eb00630d90c109) running 5 tests test completed_helper_retires_descendants_with_closed_pipes ... ok test cancellation_retires_the_helper_descendant_too ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/proxy_policy-ca5da5ebac2b936e) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/real_ssh-7e667740bdea77a4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/single_connection-824b96a985bd76a6) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/source_completeness-221723904e9d35a3) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/trust_round2-78f0ff3b67dbad9b) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_server-e66837f90a21069b) running 368 tests test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket has been running for over 60 seconds test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok test release_build_tests::release_build_marker_is_explicit ... ok test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test result: ok. 329 passed; 0 failed; 39 ignored; 0 measured; 0 filtered out; finished in 209.46s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/catalog_startup-7dd8be68f0697857) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/enrollment-32f61b19a7c9b610) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test concurrent_redemption_has_one_winner_and_one_certificate ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.14s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/mesh_parser-13fd59a4a8708f05) running 2 tests test review_grant_parser_rejects_unknown_nested_port_fields ... ok test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/mesh_review_plugin-1de3bc1351e8739c) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/mesh_review_policy-44ce3d3efaec58dc) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/mesh_review_role_scope-4848c1545d27cd89) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/plugin_host_review-e125600348cb05bb) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_disable_answers_inflight_call ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.50s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/plugin_settings_review-f9f86b6508eec089) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.34s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/remote_plugin_contract-467d546d48fb6a49) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.24s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/infraternal_shim-6198daaedaec1ac5) running 87 tests test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::golden::every_frozen_message ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok test frame::checks::tests::golden_and_fragmented ... ok test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test locale::tests::invalid_shell_expressions_are_ignored ... ok test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement running 1 test test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test pty::child_locale_tests::spawned_login_shell_receives_selected_locale_without_other_host_variables ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 86 filtered out; finished in 0.00s test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 74 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 33.52s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/detach-f17510b824ed2469) running 2 tests test detached_child_restores_default_signals_without_changing_parent ... ok test closed_standard_descriptors_become_dev_null ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.03s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/mouse-0d16f77afbdea7cb) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s Running tests/process_exit_descriptor.rs (/home/kayg/.cache/codex-scratch/access-rules-v2/target/debug/deps/process_exit_descriptor-67dfefbd2451d374) running 2 tests test invalid_pid_never_creates_a_descriptor ... ok test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_backup running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_relay running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_release running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ ├── hyper v1.11.1 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:197:1 │ 197 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 198 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:199:1 │ 199 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 201 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:202:1 │ 202 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:204:1 │ 204 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 205 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 206 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:248:1 │ 248 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 249 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:251:1 │ 251 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 252 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:254:1 │ 254 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 255 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:256:1 │ 256 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 257 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v2/Cargo.lock:314:1 │ 314 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 315 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Compiling proc-macro2 v1.0.107 Compiling quote v1.0.47 Compiling unicode-ident v1.0.26 Compiling libc v0.2.190 Compiling syn v3.0.6 Compiling syn v2.0.119 Compiling cfg-if v1.0.5 Compiling synstructure v0.14.0 Compiling zerofrom-derive v0.1.8 Compiling yoke-derive v0.8.4 Compiling displaydoc v0.2.7 Compiling serde v1.0.229 Compiling shlex v2.0.1 Compiling find-msvc-tools v0.1.14 Compiling zerovec-derive v0.11.6 Compiling cc v1.6.0 Compiling serde_derive v1.0.229 Compiling autocfg v1.5.1 Compiling serde_core v1.0.229 Compiling pin-project-lite v0.2.17 Compiling version_check v0.9.5 Compiling generic-array v0.14.7 Compiling tracing-attributes v0.1.31 Compiling pkg-config v0.3.34 Compiling bytes v1.12.1 Compiling vcpkg v0.2.15 Compiling icu_normalizer_data v2.3.0 Compiling once_cell v1.21.4 Compiling memchr v2.8.3 Compiling icu_properties_data v2.3.0 Compiling itoa v1.0.18 Compiling log v0.4.34 Compiling tracing-core v0.1.36 Compiling futures-core v0.3.34 Compiling zerofrom v0.1.8 Compiling stable_deref_trait v1.2.1 Compiling yoke v0.8.3 Compiling socket2 v0.6.5 Compiling errno v0.3.14 Compiling smallvec v1.16.2 Compiling signal-hook-registry v1.4.8 Compiling tracing v0.1.44 Compiling tokio-macros v2.7.2 Compiling mio v1.2.4 Compiling zerovec v0.11.8 Compiling tokio v1.53.2 Compiling futures-sink v0.3.34 Compiling thiserror v2.0.21 Compiling subtle v2.6.1 Compiling parking_lot_core v0.9.12 Compiling slab v0.4.12 Compiling thiserror-impl v2.0.21 Compiling zmij v1.0.23 Compiling typenum v1.20.1 Compiling tinystr v0.8.4 Compiling num-traits v0.2.19 Compiling crossbeam-utils v0.8.23 Compiling writeable v0.6.4 Compiling litemap v0.8.3 Compiling icu_locale_core v2.3.0 Compiling potential_utf v0.1.6 Compiling zerotrie v0.2.5 Compiling utf8_iter v1.0.4 Compiling icu_collections v2.3.0 Compiling icu_provider v2.3.1 Compiling block-buffer v0.10.4 Compiling crypto-common v0.1.7 Compiling equivalent v1.0.2 Compiling percent-encoding v2.3.2 Compiling digest v0.10.7 Compiling scopeguard v1.2.0 Compiling lock_api v0.4.14 Compiling icu_properties v2.3.0 Compiling icu_normalizer v2.3.0 Compiling form_urlencoded v1.2.2 Compiling libsqlite3-sys v0.30.1 Compiling futures-macro v0.3.34 Compiling cpufeatures v0.2.17 Compiling futures-io v0.3.34 Compiling futures-task v0.3.34 Compiling hashbrown v0.17.1 Compiling futures-util v0.3.34 Compiling indexmap v2.14.2 Compiling idna_adapter v1.2.2 Compiling idna v1.1.0 Compiling serde_json v1.0.151 Compiling allocator-api2 v0.2.21 Compiling foldhash v0.1.5 Compiling hashbrown v0.15.5 Compiling url v2.5.8 Compiling parking_lot v0.12.5 Compiling futures-channel v0.3.34 Compiling openssl-src v300.6.1+3.6.3 Compiling cfg_aliases v0.2.2 Compiling parking v2.2.1 Compiling crc-catalog v2.5.0 Compiling crc v3.4.0 Compiling event-listener v5.4.2 Compiling sha2 v0.10.9 Compiling openssl-sys v0.9.117 Compiling futures-intrusive v0.5.0 Compiling crossbeam-queue v0.3.14 Compiling tokio-stream v0.1.19 Compiling hashlink v0.10.0 Compiling either v1.18.0 Compiling spin v0.9.9 Compiling ryu v1.0.23 Compiling rand_core v0.10.1 Compiling zerocopy v0.8.60 Compiling heck v0.5.0 Compiling bitflags v2.13.2 Compiling base64 v0.22.1 Compiling sqlx-core v0.8.6 Compiling serde_urlencoded v0.7.1 Compiling flume v0.11.1 Compiling atoi v2.0.0 Compiling futures-executor v0.3.34 Compiling zerocopy-derive v0.8.60 Compiling getrandom v0.4.3 Compiling sqlx-sqlite v0.8.6 Compiling getrandom v0.2.17 Compiling hex v0.4.3 Compiling dotenvy v0.15.7 Compiling sqlx-macros-core v0.8.6 Compiling sqlx-macros v0.8.6 Compiling http v1.5.0 Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-plugin-api) Compiling sqlx v0.8.6 Compiling ppv-lite86 v0.2.21 Compiling memoffset v0.9.1 Compiling getrandom v0.3.4 Compiling openssl v0.10.81 Compiling foreign-types-shared v0.1.1 Compiling foreign-types v0.3.2 Compiling nix v0.30.1 Compiling zeroize v1.9.0 Compiling ring v0.17.14 Compiling openssl-macros v0.1.1 Compiling httparse v1.10.1 Compiling num-conv v0.2.2 Compiling thiserror v1.0.69 Compiling minimal-lexical v0.2.1 Compiling arrayvec v0.7.8 Compiling time-core v0.1.9 Compiling time-macros v0.2.32 Compiling nom v7.1.3 Compiling rand_core v0.9.5 Compiling http-body v1.1.0 Compiling uuid v1.27.0 Compiling thiserror-impl v1.0.69 Compiling synstructure v0.13.2 Compiling untrusted v0.9.0 Compiling deranged v0.5.8 Compiling powerfmt v0.2.1 Compiling time v0.3.55 Compiling asn1-rs-derive v0.5.1 Compiling rand_chacha v0.9.0 Compiling rusticata-macros v4.1.0 Compiling rustls-pki-types v1.15.1 Compiling tokio-util v0.7.19 Compiling asn1-rs-impl v0.2.0 Compiling cpufeatures v0.3.1 Compiling tower-service v0.3.3 Compiling data-encoding v2.11.1 Compiling rustls v0.23.45 Compiling tinyvec v1.13.3 Compiling chacha20 v0.10.2 Compiling asn1-rs v0.6.2 Compiling rustls-webpki v0.103.15 Compiling rand v0.9.5 Compiling rand_core v0.6.4 Compiling quinn-udp v0.5.16 Compiling num-integer v0.1.47 Compiling try-lock v0.2.5 Compiling pastey v0.1.1 Compiling tokio-openssl v0.6.5 Compiling httpdate v1.0.3 Compiling base64 v0.21.7 Compiling lazy_static v1.5.1 Compiling fnv v1.0.7 Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-shim) Compiling atomic-waker v1.1.2 Compiling oid-registry v0.7.1 Compiling h2 v0.4.19 Compiling base64urlsafedata v0.5.5 Compiling want v0.3.2 Compiling num-bigint v0.4.8 Compiling rand v0.10.3 Compiling vte v0.15.0 Compiling rand_pcg v0.10.2 Compiling quinn v0.11.12 Compiling mime v0.3.17 Compiling unicase v2.10.0 Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-protocol) Compiling rustc-hash v2.1.3 Compiling webauthn-attestation-ca v0.5.5 Compiling rustversion v1.0.23 Compiling lru-slab v0.1.3 Compiling tower-layer v0.3.3 Compiling quinn-proto v0.11.19 Compiling mime_guess v2.0.5 Compiling der-parser v9.0.0 Compiling hyper v1.11.1 Compiling http-body-util v0.1.5 Compiling half v2.7.1 Compiling sha1 v0.10.7 Compiling fs-err v3.3.2 Compiling webauthn-rs-core v0.5.5 Compiling sync_wrapper v1.0.2 Compiling utf8parse v0.2.2 Compiling regex-syntax v0.8.11 Compiling regex-automata v0.4.18 Compiling anstyle-parse v1.0.0 Compiling tungstenite v0.29.0 Compiling serde_cbor_2 v0.13.0 Compiling x509-parser v0.16.0 Compiling hyper-util v0.1.21 Compiling webauthn-rs-proto v0.5.5 Compiling rand_chacha v0.3.1 Compiling hex-conservative v0.2.3 Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-mesh) Compiling colorchoice v1.0.5 Compiling base64ct v1.8.3 Compiling is_terminal_polyfill v1.70.2 Compiling anstyle v1.0.14 Compiling anstyle-query v1.1.5 Compiling anstream v1.0.0 Compiling password-hash v0.5.0 Compiling bitcoin_hashes v0.14.101 Compiling rand v0.8.8 Compiling arc-swap v1.9.2 Compiling tokio-tungstenite v0.29.0 Compiling matchers v0.2.0 Compiling axum-core v0.5.6 Compiling tower v0.5.3 Compiling sharded-slab v0.1.7 Compiling unicode-normalization v0.1.25 Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/host-facts) Compiling blake2 v0.10.6 Compiling tracing-serde v0.2.0 Compiling tracing-log v0.2.0 Compiling serde_path_to_error v0.1.20 Compiling thread_local v1.1.10 Compiling http-range-header v0.4.2 Compiling clap_lex v1.1.1 Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-server) Compiling nu-ansi-term v0.50.3 Compiling matchit v0.8.4 Compiling strsim v0.11.1 Compiling clap_builder v4.6.7 Compiling axum v0.8.9 Compiling tracing-subscriber v0.3.23 Compiling tower-http v0.6.11 Compiling argon2 v0.5.3 Compiling bip39 v2.2.2 Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/ssh) Compiling infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/release) Compiling clap_derive v4.6.7 Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal) Compiling clap v4.6.7 Compiling infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/relay) Compiling infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/backup) Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/remote) Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/plugins/mesh) Compiling webauthn-rs v0.5.5 Compiling axum-server v0.8.0 Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v2/crates/infraternal-agent) Finished `release` profile [optimized] target(s) in 11m 52s /home/kayg/.cache/codex-scratch/access-rules-v2/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 21857264 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented

2026-10-12 13:10:50 +00:00

Author

Owner

Starting round 2 soundness verification on access-rules-r2-soundness, base dcec7b2d32 (v2 spec). Read #186 history and parent #147 (zero comments), repository contract and required decisions. Will first disposition all 65 round-1 IDs, then test new soundness seams under working Q1-Q7 answers. Report only in docs/design/access-rules-verification/round2-soundness.md; spec unchanged. Branch push is explicitly authorized by job brief. No deployment or performance claims.

Starting round 2 soundness verification on access-rules-r2-soundness, base dcec7b2d325837414593eaa8eb2027b43b10424e (v2 spec). Read #186 history and parent #147 (zero comments), repository contract and required decisions. Will first disposition all 65 round-1 IDs, then test new soundness seams under working Q1-Q7 answers. Report only in docs/design/access-rules-verification/round2-soundness.md; spec unchanged. Branch push is explicitly authorized by job brief. No deployment or performance claims.

kayg commented

2026-10-12 13:10:58 +00:00

Author

Owner

Starting round 2 coverage on branch access-rules-r2-coverage, base dcec7b2d32. Read the v2 spec in full, required project docs and decisions, #186 history, and parent #147 (0 comments). I am reviewing the round-one finding reports before writing docs/design/access-rules-verification/round2-coverage.md. Spec remains unchanged.

Starting round 2 coverage on branch access-rules-r2-coverage, base dcec7b2d325837414593eaa8eb2027b43b10424e. Read the v2 spec in full, required project docs and decisions, #186 history, and parent #147 (0 comments). I am reviewing the round-one finding reports before writing docs/design/access-rules-verification/round2-coverage.md. Spec remains unchanged.

kayg commented

2026-10-12 13:13:33 +00:00

Author

Owner

Starting round 2 surface verification on access-rules-r2-surfaces, base SHA dcec7b2d325837414593eaa8eb2027b43b10424e (the specified v2 head). Read all 28 comments on #186 and all comments on parent #147 (zero), the complete v2 spec, required repository docs, and the requested decisions. I will verify all 65 round-one IDs, test a scratch parser/printer, and record the cross-surface examples and any new findings. Documentation only; no deployment or product changes.

Starting round 2 surface verification on `access-rules-r2-surfaces`, base SHA `dcec7b2d325837414593eaa8eb2027b43b10424e` (the specified v2 head). Read all 28 comments on #186 and all comments on parent #147 (zero), the complete v2 spec, required repository docs, and the requested decisions. I will verify all 65 round-one IDs, test a scratch parser/printer, and record the cross-surface examples and any new findings. Documentation only; no deployment or product changes.

kayg commented

2026-10-12 13:18:32 +00:00

Author

Owner

Step 1 committed and pushed: 0234d43c. docs/design/access-rules-verification/round2-soundness.md replays all 65 round-1 IDs with named scenarios. Automated exact-ID coverage passes (65 unique, no missing/extraneous). Correct replay tally after checking table: 55 closed, 6 partial, 2 open, 2 accepted limitations; the initial prose tally will be corrected in the next atomic step. S18 remains P0 under working Q7 (offline cached rules vs D242); F-SURF-13 remains P2 under working Q1 (three headings vs one list). Six partial closures concern typed multi-operand actions, Q2 service targets and explicit D28 assurance. Full milestone gate is running; docs-only per-commit diff check passes.

Step 1 committed and pushed: 0234d43c. docs/design/access-rules-verification/round2-soundness.md replays all 65 round-1 IDs with named scenarios. Automated exact-ID coverage passes (65 unique, no missing/extraneous). Correct replay tally after checking table: 55 closed, 6 partial, 2 open, 2 accepted limitations; the initial prose tally will be corrected in the next atomic step. S18 remains P0 under working Q7 (offline cached rules vs D242); F-SURF-13 remains P2 under working Q1 (three headings vs one list). Six partial closures concern typed multi-operand actions, Q2 service targets and explicit D28 assurance. Full milestone gate is running; docs-only per-commit diff check passes.

kayg commented

2026-10-12 13:19:03 +00:00

Author

Owner

Step 2 committed and pushed: b24c453b00. Ten new findings (0 P0, 10 P1, 0 P2) in docs/design/access-rules-verification/round2-soundness.md; each has scenario, model evidence, failure and smallest repair. Per-finding evidence:
R2S-01 P1: Conditional management can manufacture unconditional authority; see matching subsection.
R2S-02 P1: The owner intersection cannot literally pass machine reach twice; see matching subsection.
R2S-03 P1: Relational targets have no token/AI principal rule; see matching subsection.
R2S-04 P1: Confirmed personal account does not identify whose account; see matching subsection.
R2S-05 P1: IdP event freshness is distinct from server revision freshness; see matching subsection.
R2S-06 P1: Shared session checks mention owner login but omit owner role loss; see matching subsection.
R2S-07 P1: Live session view and historical output use the same target; see matching subsection.
R2S-08 P1: One target cannot hold multiple authority-bearing action operands; see matching subsection.
R2S-09 P1: Request approval is not the D28 surface assurance check; see matching subsection.
R2S-10 P1: Working Q2 has no person-service target contract; see matching subsection.
Retained S18 P0 and F-SURF-13 P2 are not recounted as new. git diff --check passes; no product changes. Full gate remains active.

Step 2 committed and pushed: b24c453b00d947f99367a2f7c8611d91c28e51e1. Ten new findings (0 P0, 10 P1, 0 P2) in docs/design/access-rules-verification/round2-soundness.md; each has scenario, model evidence, failure and smallest repair. Per-finding evidence: R2S-01 P1: Conditional management can manufacture unconditional authority; see matching subsection. R2S-02 P1: The owner intersection cannot literally pass machine reach twice; see matching subsection. R2S-03 P1: Relational targets have no token/AI principal rule; see matching subsection. R2S-04 P1: Confirmed personal account does not identify whose account; see matching subsection. R2S-05 P1: IdP event freshness is distinct from server revision freshness; see matching subsection. R2S-06 P1: Shared session checks mention owner login but omit owner role loss; see matching subsection. R2S-07 P1: Live session view and historical output use the same target; see matching subsection. R2S-08 P1: One target cannot hold multiple authority-bearing action operands; see matching subsection. R2S-09 P1: Request approval is not the D28 surface assurance check; see matching subsection. R2S-10 P1: Working Q2 has no person-service target contract; see matching subsection. Retained S18 P0 and F-SURF-13 P2 are not recounted as new. git diff --check passes; no product changes. Full gate remains active.

kayg commented

2026-10-12 13:19:43 +00:00

Author

Owner

Step 1 committed and pushed as 0555e2e9896dcd4a740e24d62a4bf326601eafdc: canonical grammar/RuleBodyV2 review and scenario dispositions for all 65 round-one IDs. The scratch probe passed 10,000 generated rules, 16 hostile-name classes, and refused 13/13 malformed inputs; 65 IDs are unique, with 59 closed and 6 not closed/partial under the supplied answers. git diff --check passed.

Findings with evidence: S18 remains open because the v2 Q7 recommendation removes D166's indefinite offline behavior and omits the agreed machine count and enterprise-only lease option; S24 remains open because browser tunnels are refused although Q2 says to check a person opening a service; F-SURF-13 does not meet Q1's one-list answer; F-SURF-12 has shared check/result forms but no exact CRUD contracts or diff prose. AR-13 and AR-14 remain the two explicit limitations from D154 and D180.

Step 1 committed and pushed as `0555e2e9896dcd4a740e24d62a4bf326601eafdc`: canonical grammar/RuleBodyV2 review and scenario dispositions for all 65 round-one IDs. The scratch probe passed 10,000 generated rules, 16 hostile-name classes, and refused 13/13 malformed inputs; 65 IDs are unique, with 59 closed and 6 not closed/partial under the supplied answers. `git diff --check` passed. Findings with evidence: S18 remains open because the v2 Q7 recommendation removes D166's indefinite offline behavior and omits the agreed machine count and enterprise-only lease option; S24 remains open because browser tunnels are refused although Q2 says to check a person opening a service; F-SURF-13 does not meet Q1's one-list answer; F-SURF-12 has shared check/result forms but no exact CRUD contracts or diff prose. AR-13 and AR-14 remain the two explicit limitations from D154 and D180.

kayg commented

2026-10-12 13:22:32 +00:00

Author

Owner

Step 3 committed and pushed: bf642acddb. Report coverage/self-review complete: 65 original IDs (55 closed, 6 partial, 2 open, 2 accepted limitations); 10 new P1 findings; retained S18 P0 and F-SURF-13 P2. Compatibility coverage reduces 12 subjects x 7 verbs x 21 target classes x 128 ending subsets (225792 symbolic shapes, not runtime tests) to explicit allow/refuse predicates. Includes every inherited safety property and requested lifecycle/host/network scenario with positive cases. Integrity assertions and git diff --check pass. Final-head full gate will run after the active milestone gate; no code or performance measurements.

Step 3 committed and pushed: bf642acddb848afa0ad290aaa673a0066cddc2dd. Report coverage/self-review complete: 65 original IDs (55 closed, 6 partial, 2 open, 2 accepted limitations); 10 new P1 findings; retained S18 P0 and F-SURF-13 P2. Compatibility coverage reduces 12 subjects x 7 verbs x 21 target classes x 128 ending subsets (225792 symbolic shapes, not runtime tests) to explicit allow/refuse predicates. Includes every inherited safety property and requested lifecycle/host/network scenario with positive cases. Integrity assertions and git diff --check pass. Final-head full gate will run after the active milestone gate; no code or performance measurements.

kayg commented

2026-10-12 13:23:08 +00:00

Author

Owner

Step 1 committed and pushed as f79570f8e7: added scenario-level dispositions for all 65 round-one IDs and mapped 24 permission-bearing capabilities. Evidence: docs/design/access-rules-verification/round2-coverage.md. git diff --check passed; no implementation or spec changes.

Step 1 committed and pushed as f79570f8e786c2b6110016ad30471aebfbfd6316: added scenario-level dispositions for all 65 round-one IDs and mapped 24 permission-bearing capabilities. Evidence: docs/design/access-rules-verification/round2-coverage.md. git diff --check passed; no implementation or spec changes.

kayg commented

2026-10-12 13:24:31 +00:00

Author

Owner

Further decided-feature check committed and pushed: R2S-11 P1 in docs/design/access-rules-verification/round2-soundness.md. D237 Q17c same-owner personal-machine reach has no stage-one network selector/dependency expansion. Alice's two nodes plus a third require four extra directed named rules; ownership transfer does not adjust those rules. Proposed explicit visible same-current-owner relation, never implicit ownership access. New totals 0 P0/11 P1/0 P2; retained S18 P0 and F-SURF-13 P2. Source spec unchanged; diff check passes. Final-head gate follows milestone.

kayg commented

2026-10-12 13:24:58 +00:00

Author

Owner

Step 2 committed and pushed as 38e0bc1798. Added nine organization trials (13–19 rules each), cases that held up, and ten new findings. Evidence is in docs/design/access-rules-verification/round2-coverage.md; git diff --check passed.

Findings with scenario evidence:

R2-C01 P0: Nina's first IdP sign-in matches the Everyone login row before her staged Engineers membership is reviewed.
R2-C02 P2: Priya still sees three Settings headings although Q1 expects one People/Machines-filtered list.
R2-C03 P1: Priya's browser request to db-01/postgres is refused because no person-level open-service rule exists.
R2-C04 P1: Omar can name db-01 TCP 8443 but cannot select its discovered HTTPS service as the reach condition.
R2-C05 P1: Ortiz can reach lab-lan but cannot express Approve route against a network target in the sentence grammar.
R2-C06 P1: Priya's attempt body names Kayg/restart-staging while its context names terminal/root/prod-01; v2 does not require them to agree.
R2-C07 P1: Alice's named session share has no explicit Share session action defining who may create or revoke Bob's access.
R2-C08 P2: PXE-enrolled lab-01 has no specified persistent Inbox item for its admission preview.
R2-C09 P2: lab-01 through lab-20 need up to 20 one-use offers and admission previews for the same image.
R2-C10 P1: three offline machines expose the conflict between retained D166 behavior, the proposed global 60-second lease, and the required pending count.

The spec remains unchanged; no implementation or performance claim was added.

Step 2 committed and pushed as 38e0bc179865d553f86b18fdcbab4e6f1f8e9aa3. Added nine organization trials (13–19 rules each), cases that held up, and ten new findings. Evidence is in docs/design/access-rules-verification/round2-coverage.md; git diff --check passed. Findings with scenario evidence: - R2-C01 P0: Nina's first IdP sign-in matches the Everyone login row before her staged Engineers membership is reviewed. - R2-C02 P2: Priya still sees three Settings headings although Q1 expects one People/Machines-filtered list. - R2-C03 P1: Priya's browser request to db-01/postgres is refused because no person-level open-service rule exists. - R2-C04 P1: Omar can name db-01 TCP 8443 but cannot select its discovered HTTPS service as the reach condition. - R2-C05 P1: Ortiz can reach lab-lan but cannot express Approve route against a network target in the sentence grammar. - R2-C06 P1: Priya's attempt body names Kayg/restart-staging while its context names terminal/root/prod-01; v2 does not require them to agree. - R2-C07 P1: Alice's named session share has no explicit Share session action defining who may create or revoke Bob's access. - R2-C08 P2: PXE-enrolled lab-01 has no specified persistent Inbox item for its admission preview. - R2-C09 P2: lab-01 through lab-20 need up to 20 one-use offers and admission previews for the same image. - R2-C10 P1: three offline machines expose the conflict between retained D166 behavior, the proposed global 60-second lease, and the required pending count. The spec remains unchanged; no implementation or performance claim was added.

kayg commented

2026-10-12 13:30:43 +00:00

Author

Owner

Step committed and pushed: 261f4d4765. R2S-12 P1, docs/design/access-rules-verification/round2-soundness.md: stock PXE has no installer-generated requester key before the first image, while v2 requires a key-bound claim before every rule-authorized image response. Specify authority-free bootstrap or keyless offer-attempt followed by separately confirmed single enrollment key; retain atomic claim/deadline/quarantine. New totals 0 P0/12 P1/0 P2 plus retained S18 P0/F-SURF-13 P2. Diff check passes. Current gate was started before this documentation-only correction; final-head invocation must be refreshed.

Step committed and pushed: 261f4d4765f212511aadbda51d2a2727493d98cc. R2S-12 P1, docs/design/access-rules-verification/round2-soundness.md: stock PXE has no installer-generated requester key before the first image, while v2 requires a key-bound claim before every rule-authorized image response. Specify authority-free bootstrap or keyless offer-attempt followed by separately confirmed single enrollment key; retain atomic claim/deadline/quarantine. New totals 0 P0/12 P1/0 P2 plus retained S18 P0/F-SURF-13 P2. Diff check passes. Current gate was started before this documentation-only correction; final-head invocation must be refreshed.

kayg commented

2026-10-12 13:35:22 +00:00

Author

Owner

Final-head gate on 261f4d47 hit a non-waivable shim failure while milestone static compilation overlapped: crates/infraternal/tests/shim.rs attached_backpressure_and_detached_progress: attached producer never stalled at head 1265 (minimum 1832); 12 passed/1 failed. Milestone passed this same unchanged test. No product sources differ from base dcec7b2d. This test is not one of the #118 permitted baseline exceptions; will not waive it. Waiting for own active static build to finish, then rerun the focused test and full final gate without own heavy build overlap. Supplemental ts_verify_fast passes: protocol final suite 36 pass/0 fail/34462 assertions. No timings claimed as evidence.

Final-head gate on 261f4d47 hit a non-waivable shim failure while milestone static compilation overlapped: crates/infraternal/tests/shim.rs attached_backpressure_and_detached_progress: attached producer never stalled at head 1265 (minimum 1832); 12 passed/1 failed. Milestone passed this same unchanged test. No product sources differ from base dcec7b2d. This test is not one of the #118 permitted baseline exceptions; will not waive it. Waiting for own active static build to finish, then rerun the focused test and full final gate without own heavy build overlap. Supplemental ts_verify_fast passes: protocol final suite 36 pass/0 fail/34462 assertions. No timings claimed as evidence.

kayg commented

2026-10-12 13:35:50 +00:00

Author

Owner

Owner answers 2026-10-12 (18:4x IST) to the spec-v2 questions:

Q1: one list of sentences, filterable by people or machines (no three headings). Editing is a sentence builder: every recognised word (who, verb, where, endings) is a dropdown that offers only valid choices (people, groups, machines, tags, accounts, ports...).
Q2: agreed — "open services" checked for the person.
Q3: owner asked for a plainer explanation (pending).
Q4: agreed — PXE-installed machines wait in the Inbox (quarantined) until approved with a preview.
Q5: agreed — losing access ends live input/output at once; metadata stays; past output needs a rule.
Q6: agreed — IdP removals instant; widening additions staged for approval.
Q7: agreed with the orchestrator, not the job: keep D166 offline operation; removals apply on reconnect; show "removal pending on N machines"; strict leases only as an enterprise option, measured first.
Round 2 (running) already assumes these answers.

Owner answers 2026-10-12 (18:4x IST) to the spec-v2 questions: - Q1: one list of sentences, filterable by people or machines (no three headings). Editing is a sentence builder: every recognised word (who, verb, where, endings) is a dropdown that offers only valid choices (people, groups, machines, tags, accounts, ports...). - Q2: agreed — "open services" checked for the person. - Q3: owner asked for a plainer explanation (pending). - Q4: agreed — PXE-installed machines wait in the Inbox (quarantined) until approved with a preview. - Q5: agreed — losing access ends live input/output at once; metadata stays; past output needs a rule. - Q6: agreed — IdP removals instant; widening additions staged for approval. - Q7: agreed with the orchestrator, not the job: keep D166 offline operation; removals apply on reconnect; show "removal pending on N machines"; strict leases only as an enterprise option, measured first. Round 2 (running) already assumes these answers.

kayg commented

2026-10-12 13:35:54 +00:00

Author

Owner

Step 2 complete. Commit/push: 935dba854a. docs/design/access-rules-verification/round2-surfaces.md now maps all 12 fixture rules across app, Mesh, CLI, HTTP, MCP and future WebMCP; audits all 65 round-one IDs; and records 12 new findings (P0 0, P1 4, P2 8). JSON fixture checks: 12/12 body/sentence equality; 10,000 generated parser round trips, 19 hostile-name classes, 14/14 malformed cases refused. The individual findings and evidence lines follow.

Step 2 complete. Commit/push: 935dba854a535562b93e13433b6696627890d265. `docs/design/access-rules-verification/round2-surfaces.md` now maps all 12 fixture rules across app, Mesh, CLI, HTTP, MCP and future WebMCP; audits all 65 round-one IDs; and records 12 new findings (P0 0, P1 4, P2 8). JSON fixture checks: 12/12 body/sentence equality; 10,000 generated parser round trips, 19 hostile-name classes, 14/14 malformed cases refused. The individual findings and evidence lines follow.

kayg commented

2026-10-12 13:35:56 +00:00

Author

Owner

F2-SURF-01 (P2): Q1's one Access list conflicts with v2's three headings. Scenario and smallest change: report lines 339–345. Evidence: one-list/People/Machines filter requirement versus Roles, Network access and Login access headings.

kayg commented

2026-10-12 13:35:58 +00:00

Author

Owner

F2-SURF-02 (P1): Q2's person-level “open service” operation cannot be expressed by the v2 grammar. Scenario and smallest change: report lines 346–352. Evidence: browser local-service tunnel is refused because the browser is not a mesh machine.

kayg commented

2026-10-12 13:35:59 +00:00

Author

Owner

F2-SURF-03 (P1): past session output has no permission target distinct from live session view. Scenario and smallest change: report lines 353–359. Evidence: Q5 requires a separate history rule while the grammar only names session/recording views.

kayg commented

2026-10-12 13:36:01 +00:00

Author

Owner

F2-SURF-04 (P1): HTTP/MCP/WebMCP list and mutation action schemas are unspecified. Scenario and smallest change: report lines 360–366; candidate cross-surface contracts at lines 287–333.

kayg commented

2026-10-12 13:36:03 +00:00

Author

Owner

F2-SURF-05 (P2): the PXE quarantine path does not clearly create the Q4 Inbox item with preview. Scenario and smallest change: report lines 367–373. Evidence: general machine approval mentions Inbox; boot admission flow does not tie itself to it.

kayg commented

2026-10-12 13:36:04 +00:00

Author

Owner

F2-SURF-06 (P1): v2's bounded-lease Q7 recommendation conflicts with the supplied D166 outage answer. Scenario and smallest change: report lines 374–380. Evidence: 12 offline machines; need “removal pending on N machines” and enterprise-only strict leases.

kayg commented

2026-10-12 13:36:05 +00:00

Author

Owner

F2-SURF-07 (P2): inline shell input is not safe for every quoted name. Scenario and smallest change: report lines 381–387. Evidence: sentence quoting is not shell quoting; propose sentence-file/stdin input.

kayg commented

2026-10-12 13:36:06 +00:00

Author

Owner

F2-SURF-08 (P2): human why/diff text has no exact shared template. Scenario and smallest change: report lines 388–394. Evidence: generic missing-check prose does not name the attempted sentence and differs by route.

kayg commented

2026-10-12 13:36:07 +00:00

Author

Owner

F2-SURF-09 (P2): the default own-username sentence is hard to read aloud. Scenario and rewrite: report lines 395–401. Proposed wording: “Everyone can log in as themselves on all admitted hosts.”

kayg commented

2026-10-12 13:36:09 +00:00

Author

Owner

F2-SURF-10 (P2): v2 does not pin the Unicode data release for Cc/Cf/Zl/Zp classification. Scenario and smallest change: report lines 402–408. Evidence: parsers can disagree on raw-label canonicality across database versions.

kayg commented

2026-10-12 13:36:10 +00:00

Author

Owner

F2-SURF-11 (P2): v2 EBNF permits an empty quoted name while prose/schema require nonempty. Scenario and smallest change: report lines 409–415. The scratch parser now refuses empty names.

kayg commented

2026-10-12 13:36:11 +00:00

Author

Owner

F2-SURF-12 (P2): editor duration input has no shared grammar although stored deadlines are absolute UTC. Scenario and smallest change: report lines 416–422. Evidence: “may accept 2 hours” leaves surface behavior undefined.

kayg commented

2026-10-12 13:38:51 +00:00

Author

Owner

Owner answer Q3 (2026-10-12): "their own username" name matching stays ON by default in the community edition and OFF by default in the enterprise edition (enterprise uses linked/confirmed accounts only). Owner asked for the confirmation (linking) flow to be shown concretely and mocked.

kayg commented

2026-10-12 13:41:20 +00:00

Author

Owner

Gate status on 261f4d4765: milestone Rust rows pass except static size; static binary 21857264 bytes vs 16404816 maximum (5452448 over), identical to prior v2/round-1 source results. First final-head run also hit the shim producer-progress timeout during own static overlap. Reran the exact compiled workspace test after build completion: passed (verbatim below). The focused cargo package invocation began redundant feature-specific compilation and was stopped before tests; it is not test evidence. Full final-head rerun is now active without own static overlap. Supplemental TypeScript gate passes. No #118 exception or waiver used.

Running as unit: run-p1529160-i14110432.scope; invocation ID: 94c0dad26f3147ab9d1c2b4a1eee1b99

running 1 test
test attached_backpressure_and_detached_progress ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 12 filtered out; finished in 0.59s

Gate status on 261f4d4765f212511aadbda51d2a2727493d98cc: milestone Rust rows pass except static size; static binary 21857264 bytes vs 16404816 maximum (5452448 over), identical to prior v2/round-1 source results. First final-head run also hit the shim producer-progress timeout during own static overlap. Reran the exact compiled workspace test after build completion: passed (verbatim below). The focused cargo package invocation began redundant feature-specific compilation and was stopped before tests; it is not test evidence. Full final-head rerun is now active without own static overlap. Supplemental TypeScript gate passes. No #118 exception or waiver used. ```text Running as unit: run-p1529160-i14110432.scope; invocation ID: 94c0dad26f3147ab9d1c2b4a1eee1b99 running 1 test test attached_backpressure_and_detached_progress ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 12 filtered out; finished in 0.59s ```

kayg commented

2026-10-12 13:43:44 +00:00

Author

Owner

Owner answer L1 (2026-10-12): replace the D235 linking flow with (a) + (b): (a) every ordinary account on a machine the person added counts as that person (community default; off in enterprise, consistent with Q3); (b) otherwise, when in doubt, the first ssh asks for a standard device-code sign-in ("Sign in to infraternal: open /device and enter code XXXX-XXX", passkey to confirm; also infraternal login), single-use and short-lived, listed in the person's sessions and revocable. Supersedes the D235 Q2a linking UI (description + QR + pick-the-code); to be recorded as an amendment with the access-rules decision.

Owner answer L1 (2026-10-12): replace the D235 linking flow with (a) + (b): (a) every ordinary account on a machine the person added counts as that person (community default; off in enterprise, consistent with Q3); (b) otherwise, when in doubt, the first ssh asks for a standard device-code sign-in ("Sign in to infraternal: open <server>/device and enter code XXXX-XXX", passkey to confirm; also `infraternal login`), single-use and short-lived, listed in the person's sessions and revocable. Supersedes the D235 Q2a linking UI (description + QR + pick-the-code); to be recorded as an amendment with the access-rules decision.

kayg commented

2026-10-12 13:52:06 +00:00

Author

Owner

Round 2 soundness design review finished; integration gate blocked only by existing static size.

Head: 261f4d4765; branch access-rules-r2-soundness, pushed. Report: docs/design/access-rules-verification/round2-soundness.md. Only this report differs from dcec7b2d; source spec/decisions/product code unchanged. No deployment.

All 65 round-1 IDs replayed: 55 closed under stated working answers, 6 partial, 2 open, 2 accepted limitations. New findings: 0 P0 / 12 P1 / 0 P2. Retained unresolved originals: S18 P0 and F-SURF-13 P2. Distinct unresolved/new total: 1 P0 / 12 P1 / 1 P2 = 14; partial replays are not counted twice. Every new entry has named scenario, model statement, failure and minimal repair.

Top five:

S18 P0: working Q7 keeps D166 offline cached authority, so D242 global at-once cut-off cannot hold; explicitly show pending removal until reconnect, optional strict enterprise leases.
R2S-01 P1: temporary/approved management can create lasting self-access; clarify delegation/lifetime dependencies versus authority merely to edit during the time window.
R2S-08 P1: one target cannot print all authority-bearing operands for layout copy, backup destination, commands or rule edits; add strict declared printable operand records.
R2S-06 P1: shared-session concrete checks name owner login but omit owner action loss; bind exact underlying operation and live owner rights, not login alone.
R2S-04 P1: confirmed personal account must bind the requesting person ID, not merely be nonshared with a matching username.

Coverage: every subject/verb/target/ending class reduced through explicit predicates (225792 symbolic class combinations, not executed tests), every requested lifecycle/network/host boundary, all 8 inherited safety properties, identical adapter permission semantics and cases that held. Self-review/integrity assertions pass: 65 unique source IDs, 12 unique new P1 entries with evidence fields, 8 properties; git diff --check passes.

Final-head scripts/verify fast: exit 1, fmt/native fmt/CLI compile-out/clippy/workspace tests/cargo-deny PASS; static builds FAIL. x86_64 musl binary 21857264 bytes vs 16404816 maximum (5452448 over), identical to prior v2/round-1 unchanged-source reports. Rust dispatcher stops before aarch64/TypeScript. Supplemental ts_verify_fast exit 0; checksums, compilers, unit tests, production build, transfer byte budget, Rust/TS differential and protocol tests pass (final protocol suite: 36 pass, 0 fail, 34462 assertions). No budget changed; passing full gate needs D243 size work from orchestrator/integration.

A previous final-head run hit attached_backpressure_and_detached_progress during own static-build overlap. Exact compiled test rerun passed; refreshed full final-head workspace tests all pass. No #118 exception/waiver or baseline claim used. Superseded cf13e594 gate stopped after final documentation correction. Runs use infraternal-dev, weighted own scope, job scratch target and TRACER_TEST_PORT=4286. Incidental timing lines in mandatory transcripts are not performance evidence; no benchmark/lab host used.

Final gate summary verbatim:

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Complete final-head transcript and supplemental TypeScript transcript follow in numbered comments, verbatim. Job scratch/build output will be deleted after recording. Issue remains open.

Round 2 soundness design review finished; integration gate blocked only by existing static size. Head: 261f4d4765f212511aadbda51d2a2727493d98cc; branch access-rules-r2-soundness, pushed. Report: docs/design/access-rules-verification/round2-soundness.md. Only this report differs from dcec7b2d; source spec/decisions/product code unchanged. No deployment. All 65 round-1 IDs replayed: 55 closed under stated working answers, 6 partial, 2 open, 2 accepted limitations. New findings: 0 P0 / 12 P1 / 0 P2. Retained unresolved originals: S18 P0 and F-SURF-13 P2. Distinct unresolved/new total: 1 P0 / 12 P1 / 1 P2 = 14; partial replays are not counted twice. Every new entry has named scenario, model statement, failure and minimal repair. Top five: 1. S18 P0: working Q7 keeps D166 offline cached authority, so D242 global at-once cut-off cannot hold; explicitly show pending removal until reconnect, optional strict enterprise leases. 2. R2S-01 P1: temporary/approved management can create lasting self-access; clarify delegation/lifetime dependencies versus authority merely to edit during the time window. 3. R2S-08 P1: one target cannot print all authority-bearing operands for layout copy, backup destination, commands or rule edits; add strict declared printable operand records. 4. R2S-06 P1: shared-session concrete checks name owner login but omit owner action loss; bind exact underlying operation and live owner rights, not login alone. 5. R2S-04 P1: confirmed personal account must bind the requesting person ID, not merely be nonshared with a matching username. Coverage: every subject/verb/target/ending class reduced through explicit predicates (225792 symbolic class combinations, not executed tests), every requested lifecycle/network/host boundary, all 8 inherited safety properties, identical adapter permission semantics and cases that held. Self-review/integrity assertions pass: 65 unique source IDs, 12 unique new P1 entries with evidence fields, 8 properties; git diff --check passes. Final-head scripts/verify fast: exit 1, fmt/native fmt/CLI compile-out/clippy/workspace tests/cargo-deny PASS; static builds FAIL. x86_64 musl binary 21857264 bytes vs 16404816 maximum (5452448 over), identical to prior v2/round-1 unchanged-source reports. Rust dispatcher stops before aarch64/TypeScript. Supplemental ts_verify_fast exit 0; checksums, compilers, unit tests, production build, transfer byte budget, Rust/TS differential and protocol tests pass (final protocol suite: 36 pass, 0 fail, 34462 assertions). No budget changed; passing full gate needs D243 size work from orchestrator/integration. A previous final-head run hit attached_backpressure_and_detached_progress during own static-build overlap. Exact compiled test rerun passed; refreshed full final-head workspace tests all pass. No #118 exception/waiver or baseline claim used. Superseded cf13e594 gate stopped after final documentation correction. Runs use infraternal-dev, weighted own scope, job scratch target and TRACER_TEST_PORT=4286. Incidental timing lines in mandatory transcripts are not performance evidence; no benchmark/lab host used. Final gate summary verbatim: ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ``` Complete final-head transcript and supplemental TypeScript transcript follow in numbered comments, verbatim. Job scratch/build output will be deleted after recording. Issue remains open.

kayg commented

2026-10-12 13:52:27 +00:00

Author

Owner

gate-final transcript 1/6; head 261f4d4765. Verbatim output; incidental timing lines are not performance evidence.

Running as unit: run-p1537334-i14118606.scope; invocation ID: c99ce9d27fbb4a78a71b43efa0ec8357
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=301.45 p99_ms=307.52 result=PASS

==> fmt

==> VT native fmt

==> CLI plugin compile-out
disabled CLI plugin dependencies: absent from normal dependency graph
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.37s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal-d0028d263474a180)

running 24 tests
test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok
test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok
test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok
test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok
test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok
test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok
test status_tests::custom_named_server_service_is_reported_as_running ... ok
test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok

test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s


==> clippy
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 2.62s

==> test
    Finished `test` profile [unoptimized + debuginfo] target(s) in 1.13s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal-d549e36661370196)

running 65 tests
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok
test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok
test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test status_tests::custom_named_server_service_is_reported_as_running ... ok
test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok
test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok

test result: ok. 65 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.19s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/agent_daemon-5de2ce691037a6fb)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.73s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/agent_queues-e091edc68b27f96c)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.44s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/agent_review-d94b1e14e60e4ef2)

running 8 tests
test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.81s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/agent_sessions-02290b123f5f2fd1)

running 3 tests
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok
test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok
test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.70s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/idle_canary-26b2a47f3626ff86)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.23s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/remote_output-174b9538baf046d1)

running 1 test
test remote_refusal_matches_its_declared_cli_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/session_bounds_review-72c64f17fd25b658)

running 1 test
test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.06s

     Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/session_exit_events-11a4cce005fc09ec)

running 1 test
test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.44s

     Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/session_retention-2365452bec4dac67)

running 1 test
test bounded_owned_exit_reconnects_as_ended_with_status ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.77s

     Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/setup_output-0aeb77f16924cef7)

running 1 test
test setup_output_keeps_legacy_and_versioned_readers ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/shim-c81baaf26e3012d1)

running 13 tests
test detached_shell_exit_reaps_shim_within_one_second ... ok
test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok
test unowned_normal_exit_retires_promptly_and_records_status ... ok
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test replacement_connection_and_malformed_limit ... ok
active
test real_shell_reconnect_resize_and_delivered_exit ... ok
test delivered_exit_cannot_release_another_owning_window ... ok
test user_scope_survives_parent_unit_stop ... ok
test owned_exit_releases_promptly_on_window_close ... ok
test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok
test attached_backpressure_and_detached_progress ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.42s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/ssh_askpass-617ca478b5d79487)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.15s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/vt_credit-0a8dc350571af348)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.78s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/vt_reconnect-ecf739816bc14d42)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.64s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_agent-dc304b9d51d0941a)

running 86 tests
test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000
test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok
test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks
test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok
test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok
test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok
test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok
test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok
test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok
test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok
test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok
test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok
test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok
test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok
test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope
test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok
test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok

test result: ok. 74 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 11.04s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/transport-02d53fbe758b717f)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_mesh-25b71fd0307aac40)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/default_arrow-6d2e8df0e7b48da6)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/properties-cb03b103616f12c2)

running 14 tests
test overlaps_are_reported_without_silent_range_changes ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test directional_grants_union_and_minimal_updates ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.58s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/rotation_time-961162d4330c2fec)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_plugin_api-c495c2150d66af78)

running 20 tests
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok
test action::tests::registry_rejects_inconsistent_json_schemas ... ok
test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok
test release_version::tests::accepts_only_worker_version_forms ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok
test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok
test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok
test tests::machine_actions_are_declared_without_entering_human_discovery ... ok
test tests::notifications_are_declared_json_bounded_and_drained_once ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok
test tests::operator_presentation_cannot_follow_a_private_control_action ... ok
test tests::public_dispatch_cannot_call_a_machine_control_action ... ok
test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok

test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/routing_review-b99b0b882dabc235)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_plugin_backup-a417bdd50ad1b333)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_plugin_host_facts-4f71949982aad5d8)

running 13 tests
test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::configured_memory_floor_refuses_with_current_host_counters ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok
test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_plugin_mesh-1b760e879d6cc016)

running 25 tests
test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing.
test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok
test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok
test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok
test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok
test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok
test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok
test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok
test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok
test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok
test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok
test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok
test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok
test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok
test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok
test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok
test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok
test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok

test result: ok. 17 passed; 0 failed; 8 ignored; 0 measured; 0 filtered out; finished in 0.19s

     Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/configuration-836876ba6734f0d1)

running 4 tests
test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok
test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok
test edition_default_is_explicit_and_build_selected ... ok
test large_valid_port_policy_is_split_without_a_port_count_cap ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s

     Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/kernel-8886a63e9998e503)

running 6 tests
test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/restart_route_ownership-915aa90068a8947f)

running 1 test
test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/review_endpoint_transaction-466627b0ed41f23e)

running 1 test
test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/review_ingress_translation-bd8664555dc4f00b)

running 2 tests
test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/review_local_delivery-b93d5857cea9a210)

running 2 tests
test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/review_restart_routes-2842f5c26f6abc6e)

running 1 test
test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/review_route_inventory-0efd1dc3b9824c23)

running 2 tests
test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/review_route_scope-2cbe953ad2ece6af)

running 1 test
test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/review_shutdown_budget-cb0fcfe1b2aad42f)

running 1 test
test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/review_shutdown_restart-c5e07544297f612a)

running 3 tests
test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof.
test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.

gate-final transcript 1/6; head 261f4d4765f212511aadbda51d2a2727493d98cc. Verbatim output; incidental timing lines are not performance evidence. ```text Running as unit: run-p1537334-i14118606.scope; invocation ID: c99ce9d27fbb4a78a71b43efa0ec8357 METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=301.45 p99_ms=307.52 result=PASS ==> fmt ==> VT native fmt ==> CLI plugin compile-out disabled CLI plugin dependencies: absent from normal dependency graph Finished `test` profile [unoptimized + debuginfo] target(s) in 0.37s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal-d0028d263474a180) running 24 tests test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok test status_tests::custom_named_server_service_is_reported_as_running ... ok test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s ==> clippy Finished `dev` profile [unoptimized + debuginfo] target(s) in 2.62s ==> test Finished `test` profile [unoptimized + debuginfo] target(s) in 1.13s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal-d549e36661370196) running 65 tests test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test status_tests::custom_named_server_service_is_reported_as_running ... ok test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test result: ok. 65 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.19s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/agent_daemon-5de2ce691037a6fb) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.73s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/agent_queues-e091edc68b27f96c) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.44s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/agent_review-d94b1e14e60e4ef2) running 8 tests test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.81s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/agent_sessions-02290b123f5f2fd1) running 3 tests test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.70s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/idle_canary-26b2a47f3626ff86) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.23s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/remote_output-174b9538baf046d1) running 1 test test remote_refusal_matches_its_declared_cli_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/session_bounds_review-72c64f17fd25b658) running 1 test test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.06s Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/session_exit_events-11a4cce005fc09ec) running 1 test test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.44s Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/session_retention-2365452bec4dac67) running 1 test test bounded_owned_exit_reconnects_as_ended_with_status ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.77s Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/setup_output-0aeb77f16924cef7) running 1 test test setup_output_keeps_legacy_and_versioned_readers ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/shim-c81baaf26e3012d1) running 13 tests test detached_shell_exit_reaps_shim_within_one_second ... ok test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok test unowned_normal_exit_retires_promptly_and_records_status ... ok test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test replacement_connection_and_malformed_limit ... ok active test real_shell_reconnect_resize_and_delivered_exit ... ok test delivered_exit_cannot_release_another_owning_window ... ok test user_scope_survives_parent_unit_stop ... ok test owned_exit_releases_promptly_on_window_close ... ok test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok test attached_backpressure_and_detached_progress ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.42s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/ssh_askpass-617ca478b5d79487) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.15s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/vt_credit-0a8dc350571af348) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.78s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/vt_reconnect-ecf739816bc14d42) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.64s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_agent-dc304b9d51d0941a) running 86 tests test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000 test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok test result: ok. 74 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 11.04s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/transport-02d53fbe758b717f) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_mesh-25b71fd0307aac40) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/default_arrow-6d2e8df0e7b48da6) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/properties-cb03b103616f12c2) running 14 tests test overlaps_are_reported_without_silent_range_changes ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test directional_grants_union_and_minimal_updates ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test addresses_are_unique_stable_and_not_recycled ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.58s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/rotation_time-961162d4330c2fec) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_plugin_api-c495c2150d66af78) running 20 tests test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok test action::tests::registry_rejects_inconsistent_json_schemas ... ok test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok test release_version::tests::accepts_only_worker_version_forms ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok test component_tests::component_declarations_cannot_create_servers ... ok test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok test tests::machine_actions_are_declared_without_entering_human_discovery ... ok test tests::notifications_are_declared_json_bounded_and_drained_once ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test tests::operator_presentation_cannot_follow_a_private_control_action ... ok test tests::public_dispatch_cannot_call_a_machine_control_action ... ok test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/routing_review-b99b0b882dabc235) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_plugin_backup-a417bdd50ad1b333) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_plugin_host_facts-4f71949982aad5d8) running 13 tests test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::configured_memory_floor_refuses_with_current_host_counters ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_plugin_mesh-1b760e879d6cc016) running 25 tests test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing. test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok test result: ok. 17 passed; 0 failed; 8 ignored; 0 measured; 0 filtered out; finished in 0.19s Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/configuration-836876ba6734f0d1) running 4 tests test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok test edition_default_is_explicit_and_build_selected ... ok test large_valid_port_policy_is_split_without_a_port_count_cap ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/kernel-8886a63e9998e503) running 6 tests test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/restart_route_ownership-915aa90068a8947f) running 1 test test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/review_endpoint_transaction-466627b0ed41f23e) running 1 test test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/review_ingress_translation-bd8664555dc4f00b) running 2 tests test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/review_local_delivery-b93d5857cea9a210) running 2 tests test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/review_restart_routes-2842f5c26f6abc6e) running 1 test test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/review_route_inventory-0efd1dc3b9824c23) running 2 tests test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/review_route_scope-2cbe953ad2ece6af) running 1 test test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/review_shutdown_budget-cb0fcfe1b2aad42f) running 1 test test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/review_shutdown_restart-c5e07544297f612a) running 3 tests test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof. test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. ```

kayg commented

2026-10-12 13:52:29 +00:00

Author

Owner

gate-final transcript 2/6; head 261f4d4765. Verbatim output; incidental timing lines are not performance evidence.

test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.

test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/settings.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/settings-0d4e5c1ccc396650)

running 1 test
test default_switch_requires_owner_freshness_and_the_preview_revision ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/store.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/store-653d928dd28e0534)

running 5 tests
test key_replacement_preserves_identity_and_addresses_after_restart ... ok
test required_server_membership_cannot_be_deleted ... ok
test absent_discovery_preserves_the_last_known_endpoint ... ok
test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok
test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.58s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_plugin_relay-d765ce907b6d6285)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_plugin_release-d9a3a22170648e3d)

running 8 tests
test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency
test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok
test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok
test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok
test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok
test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok
test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok
test latest::tests::cancellation_joins_verification ... ok

test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.56s

     Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/review_pool-7342401812584e29)

running 1 test
test pending_channel_writers_preserve_authority_read_capacity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.33s

     Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/review_restart-433d5f6159022764)

running 2 tests
test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification
test restarted_latest_reclaims_metadata_after_process_stop ... ok

test result: ok. 1 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.43s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_plugin_remote-befabe8c66488616)

running 12 tests
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.16s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_plugin_ssh-8fc5a3d5ae8e8da5)

running 13 tests
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 12 filtered out; finished in 0.00s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 12 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/auth_order-a6672937b409eb18)

running 6 tests
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/build_removal-ea54acad90939da0)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.88s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/concurrency-84194037b61b4a88)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test component_off_retires_a_real_native_helper ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/config_isolation-7ef0e56361e7afa9)

running 2 tests
test synthetic_master_socket_is_private_at_creation ... ok
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/credentials-d8295318c2cb85c8)

running 3 tests
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/diagnostics-07214f0a23810c1c)

running 8 tests
test every_failed_step_names_the_step_and_a_next_action ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test status_mapping_preserves_authentication_and_missing_payload_classification ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/event_metadata-44d697ac35cff957)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/foreground-a7c134dfcb5c5797)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/host_trust-956578b69494d660)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/install-c9a4eb681da6c6e1)

running 30 tests
test command_failure_names_upload_join_install_and_start_separately ... ok
test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.12s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/model-8d8a118fb482cb01)

running 5 tests
test consent_and_credential_references_are_the_only_request_authority ... ok
test addresses_never_become_options_or_shell_syntax ... ok
test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/payload_source.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/payload_source-2b9cf9e8f172fa9d)

running 2 tests
test verification_failure_names_step_and_stops_before_upload ... ok
test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/probe_check-4c243b7c35682a6f)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/process-52eb00630d90c109)

running 5 tests
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.21s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/proxy_policy-ca5da5ebac2b936e)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/real_ssh-7e667740bdea77a4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/single_connection-824b96a985bd76a6)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/source_completeness-221723904e9d35a3)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/trust_round2-78f0ff3b67dbad9b)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_server-e66837f90a21069b)

running 368 tests
test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions
test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok
test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok
test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok
test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok
test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok
test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission has been running for over 60 seconds
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait has been running for over 60 seconds
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait has been running for over 60 seconds
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day has been running for over 60 seconds
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed has been running for over 60 seconds
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch has been running for over 60 seconds
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions has been running for over 60 seconds
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope has been running for over 60 seconds
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once has been running for over 60 seconds
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once has been running for over 60 seconds
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket has been running for over 60 seconds
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies has been running for over 60 seconds
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies has been running for over 60 seconds
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok
test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok

gate-final transcript 2/6; head 261f4d4765f212511aadbda51d2a2727493d98cc. Verbatim output; incidental timing lines are not performance evidence. ```text test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/settings.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/settings-0d4e5c1ccc396650) running 1 test test default_switch_requires_owner_freshness_and_the_preview_revision ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/store.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/store-653d928dd28e0534) running 5 tests test key_replacement_preserves_identity_and_addresses_after_restart ... ok test required_server_membership_cannot_be_deleted ... ok test absent_discovery_preserves_the_last_known_endpoint ... ok test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.58s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_plugin_relay-d765ce907b6d6285) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_plugin_release-d9a3a22170648e3d) running 8 tests test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok test latest::tests::cancellation_joins_verification ... ok test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.56s Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/review_pool-7342401812584e29) running 1 test test pending_channel_writers_preserve_authority_read_capacity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.33s Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/review_restart-433d5f6159022764) running 2 tests test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification test restarted_latest_reclaims_metadata_after_process_stop ... ok test result: ok. 1 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.43s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_plugin_remote-befabe8c66488616) running 12 tests test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.16s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_plugin_ssh-8fc5a3d5ae8e8da5) running 13 tests test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 12 filtered out; finished in 0.00s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 12 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/auth_order-a6672937b409eb18) running 6 tests test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/build_removal-ea54acad90939da0) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.88s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/concurrency-84194037b61b4a88) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test component_off_retires_a_real_native_helper ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/config_isolation-7ef0e56361e7afa9) running 2 tests test synthetic_master_socket_is_private_at_creation ... ok test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/credentials-d8295318c2cb85c8) running 3 tests test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/diagnostics-07214f0a23810c1c) running 8 tests test every_failed_step_names_the_step_and_a_next_action ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test status_mapping_preserves_authentication_and_missing_payload_classification ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/event_metadata-44d697ac35cff957) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/foreground-a7c134dfcb5c5797) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/host_trust-956578b69494d660) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/install-c9a4eb681da6c6e1) running 30 tests test command_failure_names_upload_join_install_and_start_separately ... ok test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test refused_previous_service_stop_only_removes_staging ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.12s Running tests/model.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/model-8d8a118fb482cb01) running 5 tests test consent_and_credential_references_are_the_only_request_authority ... ok test addresses_never_become_options_or_shell_syntax ... ok test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/payload_source.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/payload_source-2b9cf9e8f172fa9d) running 2 tests test verification_failure_names_step_and_stops_before_upload ... ok test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/probe_check-4c243b7c35682a6f) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/process.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/process-52eb00630d90c109) running 5 tests test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.21s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/proxy_policy-ca5da5ebac2b936e) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/real_ssh-7e667740bdea77a4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/single_connection-824b96a985bd76a6) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/source_completeness-221723904e9d35a3) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/trust_round2-78f0ff3b67dbad9b) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::split_mux_header_preserves_trailing_close ... ok test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_server-e66837f90a21069b) running 368 tests test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission has been running for over 60 seconds test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait has been running for over 60 seconds test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait has been running for over 60 seconds test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day has been running for over 60 seconds test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed has been running for over 60 seconds test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch has been running for over 60 seconds test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions has been running for over 60 seconds test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope has been running for over 60 seconds test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once has been running for over 60 seconds test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once has been running for over 60 seconds test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket has been running for over 60 seconds test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies has been running for over 60 seconds test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies has been running for over 60 seconds test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok ```

kayg commented

2026-10-12 13:52:30 +00:00

Author

Owner

gate-final transcript 3/6; head 261f4d4765. Verbatim output; incidental timing lines are not performance evidence.

test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope
test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok
test release_build_tests::release_build_marker_is_explicit ... ok
test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok
test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark
test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement
test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok
test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok
test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok
test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok
test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok
test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok
test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification
test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok
test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok
test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok
test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok
test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok
test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok
test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok
test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok

test result: ok. 329 passed; 0 failed; 39 ignored; 0 measured; 0 filtered out; finished in 294.59s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/catalog_startup-7dd8be68f0697857)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/enrollment-32f61b19a7c9b610)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.65s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/mesh_parser-13fd59a4a8708f05)

running 2 tests
test review_grant_parser_rejects_unknown_nested_port_fields ... ok
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/mesh_review_plugin-1de3bc1351e8739c)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/mesh_review_policy-44ce3d3efaec58dc)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/mesh_review_role_scope-4848c1545d27cd89)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/plugin_host_review-e125600348cb05bb)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_disable_answers_inflight_call ... ok
test review_exited_worker_ends_its_subscriptions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.52s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/plugin_settings_review-f9f86b6508eec089)

running 3 tests
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.22s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/remote_plugin_contract-467d546d48fb6a49)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.86s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_shim-6198daaedaec1ac5)

running 87 tests
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok
test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok
test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok
test locale::tests::invalid_shell_expressions_are_ignored ... ok
test frame::checks::golden::every_frozen_message ... ok
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok
test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok
test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok

running 1 test
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test pty::child_locale_tests::spawned_login_shell_receives_selected_locale_without_other_host_variables ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 86 filtered out; finished in 0.01s

test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 74 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 55.93s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/detach-f17510b824ed2469)

running 2 tests
test detached_child_restores_default_signals_without_changing_parent ... ok
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.87s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/mouse-0d16f77afbdea7cb)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.63s

     Running tests/process_exit_descriptor.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/process_exit_descriptor-67dfefbd2451d374)

running 2 tests
test invalid_pid_never_creates_a_descriptor ... ok
test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_backup

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_relay

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_release

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   ├── infraternal-fuzz v0.1.0
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0 (*)
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-mesh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   ├── infraternal-plugin-release v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   └── infraternal-server v0.1.0 (*)

gate-final transcript 3/6; head 261f4d4765f212511aadbda51d2a2727493d98cc. Verbatim output; incidental timing lines are not performance evidence. ```text test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok test release_build_tests::release_build_marker_is_explicit ... ok test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test result: ok. 329 passed; 0 failed; 39 ignored; 0 measured; 0 filtered out; finished in 294.59s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/catalog_startup-7dd8be68f0697857) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/enrollment-32f61b19a7c9b610) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test concurrent_redemption_has_one_winner_and_one_certificate ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.65s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/mesh_parser-13fd59a4a8708f05) running 2 tests test review_grant_parser_rejects_unknown_nested_port_fields ... ok test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/mesh_review_plugin-1de3bc1351e8739c) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/mesh_review_policy-44ce3d3efaec58dc) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/mesh_review_role_scope-4848c1545d27cd89) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/plugin_host_review-e125600348cb05bb) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_disable_answers_inflight_call ... ok test review_exited_worker_ends_its_subscriptions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.52s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/plugin_settings_review-f9f86b6508eec089) running 3 tests test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.22s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/remote_plugin_contract-467d546d48fb6a49) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.86s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/infraternal_shim-6198daaedaec1ac5) running 87 tests test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok test locale::tests::invalid_shell_expressions_are_ignored ... ok test frame::checks::golden::every_frozen_message ... ok test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok running 1 test test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test pty::child_locale_tests::spawned_login_shell_receives_selected_locale_without_other_host_variables ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 86 filtered out; finished in 0.01s test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 74 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 55.93s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/detach-f17510b824ed2469) running 2 tests test detached_child_restores_default_signals_without_changing_parent ... ok test closed_standard_descriptors_become_dev_null ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.87s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/mouse-0d16f77afbdea7cb) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.63s Running tests/process_exit_descriptor.rs (/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/debug/deps/process_exit_descriptor-67dfefbd2451d374) running 2 tests test invalid_pid_never_creates_a_descriptor ... ok test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_backup running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_relay running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_release running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) ```

kayg commented

2026-10-12 13:52:32 +00:00

Author

Owner

gate-final transcript 4/6; head 261f4d4765. Verbatim output; incidental timing lines are not performance evidence.

     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-mesh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   ├── infraternal-fuzz v0.1.0 (*)
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-mesh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-mesh v0.1.0 (*)
         ├── infraternal-plugin-release v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-mesh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   ├── hyper v1.11.1
         │   │   ├── axum v0.8.9
         │   │   │   ├── infraternal-fuzz v0.1.0
         │   │   │   └── infraternal-server v0.1.0
         │   │   │       ├── infraternal v0.1.0
         │   │   │       └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── axum-server v0.8.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── hyper-util v0.1.21
         │   │   │   ├── axum v0.8.9 (*)
         │   │   │   ├── axum-server v0.8.0 (*)
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   │   ├── infraternal v0.1.0 (*)
         │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal v0.1.0 (*)
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-mesh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   └── infraternal-plugin-mesh v0.1.0
             │   │   │       ├── infraternal v0.1.0 (*)
             │   │   │       ├── infraternal-agent v0.1.0 (*)
             │   │   │       ├── infraternal-fuzz v0.1.0 (*)
             │   │   │       └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-backup v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   │   ├── infraternal-plugin-relay v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-release v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   ├── infraternal-plugin-release v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:197:1
    │  
197 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
198 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   ├── infraternal-fuzz v0.1.0 (*)
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-mesh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │       └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-backup v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-relay v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-release v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-mesh v0.1.0 (*)
              ├── infraternal-plugin-release v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:199:1
    │  
199 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
201 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:202:1
    │  
202 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:204:1
    │  
204 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
205 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
206 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)

gate-final transcript 4/6; head 261f4d4765f212511aadbda51d2a2727493d98cc. Verbatim output; incidental timing lines are not performance evidence. ```text │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ ├── hyper v1.11.1 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:197:1 │ 197 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 198 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:199:1 │ 199 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 201 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:202:1 │ 202 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:204:1 │ 204 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 205 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 206 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) ```

kayg commented

2026-10-12 13:52:34 +00:00

Author

Owner

gate-final transcript 5/6; head 261f4d4765. Verbatim output; incidental timing lines are not performance evidence.

      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:248:1
    │  
248 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
249 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-mesh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-backup v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-relay v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-release v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-release v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-release v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │   │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── (dev) infraternal v0.1.0 (*)
      │       ├── (dev) infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:251:1
    │  
251 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
252 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │       ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-release v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:254:1
    │

gate-final transcript 5/6; head 261f4d4765f212511aadbda51d2a2727493d98cc. Verbatim output; incidental timing lines are not performance evidence. ```text │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:248:1 │ 248 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 249 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:251:1 │ 251 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 252 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:254:1 │ ```

kayg commented

2026-10-12 13:52:35 +00:00

Author

Owner

gate-final transcript 6/6; head 261f4d4765. Verbatim output; incidental timing lines are not performance evidence.

254 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
255 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   ├── infraternal v0.1.0 (*)
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0
      │       │   └── infraternal-server v0.1.0
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── infraternal-fuzz v0.1.0 (*)
      │       ├── infraternal-fuzz v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:256:1
    │  
256 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
257 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   ├── infraternal v0.1.0 (*)
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal v0.1.0 (*)
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-fuzz v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-backup v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-relay v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-release v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   ├── infraternal-plugin-release v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   ├── infraternal-fuzz v0.1.0 (*)
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:314:1
    │  
314 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
315 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-release v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   ├── hyper v1.11.1
      │           │   │   ├── axum v0.8.9 (*)
      │           │   │   ├── axum-server v0.8.0 (*)
      │           │   │   ├── hyper-util v0.1.21
      │           │   │   │   ├── axum v0.8.9 (*)
      │           │   │   │   ├── axum-server v0.8.0 (*)
      │           │   │   │   ├── infraternal v0.1.0 (*)
      │           │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── (dev) infraternal v0.1.0 (*)
      │           ├── (dev) infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-mesh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-backup v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-relay v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-release v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
    Finished `release` profile [optimized] target(s) in 0.54s
/home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 21857264 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

gate-final transcript 6/6; head 261f4d4765f212511aadbda51d2a2727493d98cc. Verbatim output; incidental timing lines are not performance evidence. ```text 254 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 255 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:256:1 │ 256 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 257 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r2-soundness/Cargo.lock:314:1 │ 314 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 315 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Finished `release` profile [optimized] target(s) in 0.54s /home/kayg/.cache/codex-scratch/access-rules-r2-soundness/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 21857264 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented

2026-10-12 13:52:37 +00:00

Author

Owner

gate-ts transcript 1/1; head 261f4d4765. Verbatim output; incidental timing lines are not performance evidence.

Running as unit: run-p1438059-i14019331.scope; invocation ID: 55b9102348e2417888c573329a3e38b4

==> Vendored Ghostty artifact checksums
dist/ghostty-web.js: OK
dist/ghostty-vt.wasm: OK
dist/index.d.ts: OK

==> TypeScript protocol compiler

==> Tracer compiler, precompression and bundle transfer budget
bun install v1.4.2 (744846f84)

+ @types/bun@1.3.8
+ @types/node@22.19.0
+ @types/ws@8.5.10
+ playwright@1.61.1
+ typescript@5.9.3
+ ws@8.18.3
+ @scure/bip39@2.2.0
+ geist@1.7.2

38 packages installed [720.00ms]
$ bun x tsc --project tsconfig.json
bun test v1.4.2 (744846f84)

precompress.test.ts:
(pass) text sidecars round-trip deterministically; compressed formats remain identity [34.17ms]

browser-build.test.ts:
(pass) the browser renderer has no unresolved Vite Node-file shim request [34.38ms]

src/perf-detector.test.ts:
(pass) FrameDetector > estimates the refresh from the median and snaps it [3.17ms]
(pass) FrameDetector > nothing is a drop before the rate is known [0.12ms]
(pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.24ms]
(pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.29ms]
(pass) FrameDetector > the first frame after a pause is not an interval [0.12ms]
(pass) FrameDetector > fps, p95 and window read the ring [0.41ms]
(pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.41ms]
(pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.13ms]

src/canvas/recency.test.ts:
(pass) touch moves an item to the front and never duplicates it [0.32ms]
(pass) repeating the front item changes nothing [0.07ms]
(pass) the list is capped, so the oldest items fall off [0.06ms]
(pass) top skips items that are no longer live, without losing them [0.11ms]
(pass) recentRows: five used windows in reverse order of use, from 54 windows [0.24ms]
(pass) recentRows: a view with three windows and no use shows them in order [0.05ms]
(pass) recentRows: used windows lead, the rest fill up to five in window order [0.09ms]

src/canvas/windows/details-facts.test.ts:
(pass) host facts become plain-language details rows [1.05ms]
(pass) unknown optional host facts stay absent instead of appearing as placeholders [0.27ms]
(pass) extended info off: the machine tab shows only the essentials, ungrouped, and there is no More section [0.49ms]
(pass) extended info on: every fact sits under System, Resources or Access [0.34ms]
(pass) the header follows the machine's own facts, not the platform the host list guessed [0.22ms]
(pass) before facts arrive the host's platform names the header [0.10ms]
(pass) a reported system with no platform mark still names the header and shows no mark [0.09ms]

src/canvas/mesh/protocol.test.ts:
(pass) the server's own list becomes nodes, tags and grants, by name [1.08ms]
(pass) without `access` (today's server) the person may view and may not edit [0.48ms]
(pass) fields the server does not send are absent, never invented [0.30ms]
(pass) anything that is not a list is refused, whole [6.22ms]
(pass) a node's own tag list and the tag table agree even when a server sends only one [0.26ms]
(pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.38ms]
(pass) answers carry the new revision, and a create the new arrow's id [0.10ms]
(pass) endpoints go out as the server writes them: a node by id, a tag by name [0.13ms]

src/canvas/mesh/layout.test.ts:
(pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.78ms]
(pass) the layout is deterministic and does not depend on input order [7.61ms]
(pass) no two cards overlap, and every card lies inside the graph [10.66ms]
(pass) the sheet is wider than tall, roughly 16:10 [2.50ms]
(pass) a pinned node stays where it was put and the others do not move [4.30ms]
(pass) a pin beyond the sheet grows the graph [0.47ms]
(pass) a host's other tags do not move it; a tag nobody carries still has its node [0.32ms]
(pass) 1,000 nodes lay out in a few milliseconds [11.37ms]

src/canvas/layout/stops.test.ts:
(pass) a view that fits the viewport has one stop, centred [0.45ms]
(pass) a wide view has one stop per column and the last stop ends at the right edge [0.20ms]
(pass) a view taller than the viewport is scaled down so it fits [0.05ms]
(pass) nearestStop picks the stop whose centre is closest [0.23ms]
(pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.18ms]
(pass) a small graph keeps one stop per node column [0.13ms]
(pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.08ms]
(pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.10ms]

src/canvas/layout/grid.test.ts:
(pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.76ms]
(pass) closing the new half gives the layout back exactly, in the model [1.62ms]
(pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.53ms]
(pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.44ms]
(pass) split down in a group divides only the window's band: the partner window grows to keep its height [1.78ms]
(pass) closing the window split down gives its band back to the window above and to the partner [0.76ms]
(pass) a window split down in a plain column stacks under it and moves the windows below down [0.34ms]
(pass) new window right opens a full-size column after the whole group, never inside it [0.52ms]
(pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.15ms]
(pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.19ms]
(pass) random sequences of split right, split down, new window right and close never break the grid [55.68ms]
(pass) closing every window of a group returns the view to nothing, with no problem on the way [0.46ms]
(pass) a full-width band under a group moves nothing and extends the group by one band [0.16ms]
(pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.13ms]

src/canvas/layout/geometry.test.ts:
(pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.63ms]
(pass) a chain of neighbours is pushed in turn [0.24ms]
(pass) snapping rounds to whole cells [0.06ms]
(pass) reach follows grants through tags and keeps the relay [0.30ms]
(pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [1.66ms]
(pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.08ms]
(pass) a desktop column is the same alone and in a strip [0.03ms]

src/canvas/sessions/live-inventory.test.ts:
(pass) a host snapshot replaces cached session rows and keeps only live shims [2.62ms]
(pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.67ms]
(pass) inventory remembers a remote session and refuses a cross-host attach [0.55ms]
(pass) superseded status snapshots release records for sessions this device never opened [1.64ms]
(pass) superseding a sidecar preserves status for a window opened on this device [0.26ms]
(pass) a census predating a new shell does not permanently retire its confirmed live ID [0.22ms]
(pass) a final Close before the first positive census never revives a new ID [0.12ms]
(pass) a later absence retires a new ID after its first positive census [0.12ms]
(pass) another host's census cannot clear a new shell's census fence [0.11ms]
(pass) another host's close cannot clear a new shell's census fence [0.03ms]

src/canvas/sessions/details-live.test.ts:
(pass) a refused host facts action stops its recurring timer [1.59ms]
(pass) a detected operating system supplies the live popover mark [1.39ms]

src/canvas/sessions/live.test.ts:
(pass) an enrolled host opens by UUID and splits keep that authority [0.93ms]
(pass) unknown and ambiguous labels never open an embedded shell [0.11ms]
(pass) removed hosts disappear from inventory and cannot route a new shell [0.22ms]

src/canvas/sessions/gone-review.test.ts:
(pass) selecting a known gone session keeps its final exited state [0.34ms]
(pass) a known retired status survives repeated selection and generic ended answers [0.19ms]

src/canvas/sessions/open-refusal.test.ts:
(pass) memory refusal retains the reason and current counters [1.28ms]
(pass) legacy refusals still work and malformed counters never reach the message [0.62ms]
(pass) product copy names the host and counters and never renders untrusted server text [0.93ms]
(pass) oversized refusal JSON is ignored before parsing [0.23ms]

src/canvas/model/document.test.ts:
(pass) a document holds references and layout, never content [0.45ms]
(pass) a document survives JSON and rebuilds the same columns [0.59ms]
(pass) a target that no longer exists is dropped, and an emptied column with it [0.11ms]
(pass) parseDocument rejects anything that is not a document of this format [0.30ms]
(pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.18ms]
(pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.24ms]
(pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.40ms]
(pass) a plain view is saved without spans or bands, exactly as before D212 [0.09ms]

src/canvas/addhost/real.test.ts:
(pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.33ms]
(pass) parsing the server's data > the server key needs its public key and fingerprint [0.05ms]
(pass) parsing the server's data > an install command needs a lifetime [0.04ms]
(pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [3.00ms]
(pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [1.01ms]
(pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [1.19ms]
(pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.39ms]
(pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.28ms]
(pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.11ms]
(pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.29ms]
(pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.50ms]

src/canvas/addhost/authority.on-demand.test.ts:
(pass) CA wrapping matches the contract's HKDF domain and separates generations [3.79ms]

src/canvas/addhost/model.test.ts:
(pass) stagesOf > a host with no event is waiting everywhere [0.23ms]
(pass) stagesOf > check before sign-in is detecting how to sign in [0.18ms]
(pass) stagesOf > the sign-in report finishes detect and starts the system check [0.11ms]
(pass) stagesOf > install, facts and connect map to install, enrol and first session [0.16ms]
(pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.22ms]
(pass) stagesOf > an unsupported host fails the system check, after sign-in [0.06ms]
(pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.05ms]
(pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.06ms]
(pass) authLabel > names the method and a trusted network provider only [0.04ms]
(pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.12ms]
(pass) guideFor > each failure kind names its fix [0.08ms]
(pass) guideFor > mesh-policy words say possible, not certain [0.02ms]
(pass) parseTarget > reads user, host and port [0.16ms]
(pass) parseTarget > refuses what cannot name a host [0.03ms]
(pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [1.27ms]
(pass) parseSshConfig > recognises config text [0.06ms]
(pass) parseSshConfig > a hostname that is an option is dropped [0.04ms]
(pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.05ms]
(pass) plain words > no headline carries an arrow, an id or an API noun [0.68ms]
(pass) only a completed canonical host identity becomes terminal authority [0.14ms]
(pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.06ms]
(pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.04ms]
(pass) matchListed > a name that is exactly one host's id or address names that host [0.13ms]
(pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.02ms]
(pass) matchListed > a partial name that starts several hosts names none and waits [0.02ms]
(pass) matchListed > a new name that starts no host is neither named nor waiting [0.02ms]
(pass) install diagnostics name the failed step and public host error [0.07ms]
(pass) missing payload tells the operator the architecture and expected server path [0.03ms]
(pass) an already added host says so and offers opening its existing terminal [0.04ms]
(pass) release payload verification names the architecture step and plain reason [0.02ms]

src/canvas/addhost/wizard.test.ts:
(pass) a saved-key prompt completing after close never starts an SSH attempt [0.52ms]
(pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.32ms]
(pass) ready CA begins the requested installation mode without another prompt [0.16ms]
(pass) closing during CA confirmation never starts an SSH attempt [0.40ms]
(pass) a typed root login requires explicit consent before any installation [0.15ms]

../../packages/ui/src/spring.test.ts:
(pass) a missed frame does not stretch a settled spring [0.45ms]
(pass) motion follows elapsed time across frame rates and damping regimes [0.43ms]

chunk-classes.test.ts:
(pass) the first screen is critical, the canvas product module and what only it uses are deferred [1.80ms]
(pass) a chunk that both sides use stays critical [0.21ms]
(pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.18ms]

test/recovery-ui.test.ts:
(pass) compiled recovery UI mode off obeys its URL boundary [7.55ms]
(pass) compiled recovery UI mode preview obeys its URL boundary [4.55ms]
(pass) compiled recovery UI mode 1 obeys its URL boundary [3.70ms]

test/recovery-crypto.test.ts:
(pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [20.79ms]
(pass) 100 repeated wrapping operations generate independent salts and nonces [19.14ms]

test/recovery-rotation.test.ts:
(pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [18.91ms]
(pass) abandoned word acknowledgement uploads nothing [2.37ms]
(pass) settled acknowledgement cannot upload later (dismissed) [2.50ms]
(pass) settled acknowledgement cannot upload later (no acknowledgement) [2.95ms]

test/recovery-wait.test.ts:
(pass) server remaining wait 0s is accepted through the capability policy maximum [1.55ms]
(pass) server remaining wait 86400s is accepted through the capability policy maximum [1.20ms]
(pass) server remaining wait 90000s is accepted through the capability policy maximum [1.13ms]
(pass) server remaining wait 172800s is accepted through the capability policy maximum [1.44ms]
(pass) malformed or excessive remaining wait -1 is denied [1.42ms]
(pass) malformed or excessive remaining wait 0.5 is denied [1.24ms]
(pass) malformed or excessive remaining wait 172801 is denied [1.06ms]
(pass) malformed or excessive remaining wait 9007199254740992 is denied [1.14ms]
(pass) malformed or excessive remaining wait 90000 is denied [1.26ms]

 168 pass
 0 fail
 11332 expect() calls
Ran 168 tests across 26 files. [502.00ms]
$ bun run build.ts
built chunk-z93cxfvm.js, chunk-bcrmm064.js, chunk-3g02wn4t.js, chunk-bsv98wsj.js, chunk-bwan89r4.js, chunk-p4pq9b17.js, chunk-a895a34j.js, chunk-gtm292qm.js, chunk-9yp88qfm.js, chunk-z8ytdtwg.js, chunk-y42y8m47.js, chunk-5s6a3m50.js, main.js, chunk-969atqet.js, chunk-15nnyy73.js, chunk-vxv25w33.js, chunk-2xk5rt3w.js, chunk-ygz6v7t7.js, chunk-c1dgfc87.js, chunk-2j9jmw5g.js, chunk-yr0r38s4.js, chunk-8t7pe4ht.js, chunk-3w26dxrc.js, chunk-axbkkqp1.js, chunk-pag6ga69.js, chunk-p4mz2tv2.js, chunk-qm1x9vpy.js, chunk-nebstyp1.js, chunk-q1v7trkx.js, chunk-fc0b26s2.js, chunk-nzkjad9s.js, chunk-cr5fa70f.js, chunk-58qa542x.js, chunk-xd3xbfxf.js, chunk-jkykcgdz.js, chunk-akfzfbm0.js, chunk-0mfcs52z.js, chunk-q56hm25z.js, chunk-9xd3g65e.js, chunk-28rbcdd5.js, chunk-61xwpgvs.js, chunk-xmb398q7.js, chunk-433eyr4g.js, chunk-fef4qdz6.js, chunk-k07rsard.js, chunk-m9mmpzv9.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-8ycz0dzb.js, chunk-f2r0hhqc.js, chunk-2bcfkj59.js, chunk-1gmd2m5q.js, chunk-ycxxhz1d.js
deferred chunk-fc0b26s2.js: identity=97656 gzip=33161 brotli=29332 bytes
critical chunk-p4pq9b17.js: identity=707 gzip=368 brotli=306 bytes
onDemand chunk-qm1x9vpy.js: identity=2824 gzip=1387 brotli=1196 bytes
critical chunk-8t7pe4ht.js: identity=1104 gzip=666 brotli=604 bytes
critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-q56hm25z.js: identity=10693 gzip=4125 brotli=3760 bytes
critical chunk-pag6ga69.js: identity=707945 gzip=204703 brotli=165886 bytes
onDemand chunk-akfzfbm0.js: identity=7662 gzip=3395 brotli=2974 bytes
critical chunk-1gmd2m5q.js: identity=199 gzip=162 brotli=136 bytes
onDemand chunk-2bcfkj59.js: identity=1063 gzip=653 brotli=521 bytes
critical chunk-c1dgfc87.js: identity=590 gzip=327 brotli=319 bytes
onDemand chunk-m9mmpzv9.js: identity=2462 gzip=1108 brotli=935 bytes
onDemand chunk-cr5fa70f.js: identity=540 gzip=351 brotli=313 bytes
onDemand chunk-xmb398q7.js: identity=48283 gzip=15177 brotli=13468 bytes
onDemand chunk-3w26dxrc.js: identity=1026 gzip=623 brotli=498 bytes
critical faulty-terminal.worker.js: identity=1086 gzip=559 brotli=480 bytes
critical backdrop.worker.js: identity=243 gzip=212 brotli=165 bytes
onDemand chunk-xd3xbfxf.js: identity=5359 gzip=2579 brotli=2300 bytes
onDemand chunk-y42y8m47.js: identity=6265 gzip=2105 brotli=1862 bytes
onDemand chunk-q1v7trkx.js: identity=1616 gzip=866 brotli=739 bytes
onDemand chunk-5s6a3m50.js: identity=2108 gzip=1037 brotli=869 bytes
critical chunk-a895a34j.js: identity=88 gzip=88 brotli=74 bytes
critical chunk-vxv25w33.js: identity=5443 gzip=2605 brotli=2380 bytes
critical chunk-2xk5rt3w.js: identity=15859 gzip=6182 brotli=5484 bytes
critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes
critical chunk-bcrmm064.js: identity=4499 gzip=1856 brotli=1635 bytes
onDemand chunk-gtm292qm.js: identity=228 gzip=178 brotli=165 bytes
onDemand chunk-jkykcgdz.js: identity=4640 gzip=1932 brotli=1703 bytes
critical chunk-ycxxhz1d.js: identity=42395 gzip=14485 brotli=12991 bytes
onDemand chunk-fef4qdz6.js: identity=6773 gzip=3176 brotli=2888 bytes
onDemand chunk-p4mz2tv2.js: identity=6198 gzip=2792 brotli=2519 bytes
critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes
critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-15nnyy73.js: identity=2557 gzip=1180 brotli=1009 bytes
critical chunk-ygz6v7t7.js: identity=17627 gzip=6252 brotli=5569 bytes
critical chunk-2j9jmw5g.js: identity=2519 gzip=1008 brotli=876 bytes
onDemand chunk-k07rsard.js: identity=31922 gzip=12262 brotli=11075 bytes
critical chunk-yr0r38s4.js: identity=386 gzip=238 brotli=196 bytes
onDemand chunk-3g02wn4t.js: identity=5784 gzip=2189 brotli=1938 bytes
onDemand chunk-bwan89r4.js: identity=3891 gzip=1735 brotli=1516 bytes
onDemand chunk-0mfcs52z.js: identity=13384 gzip=5029 brotli=4504 bytes
deferred chunk-bsv98wsj.js: identity=43000 gzip=16583 brotli=14605 bytes
onDemand chunk-z8ytdtwg.js: identity=191 gzip=170 brotli=130 bytes
critical main.js: identity=111029 gzip=40357 brotli=34972 bytes
onDemand chunk-nzkjad9s.js: identity=1170 gzip=708 brotli=627 bytes
critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes
critical chunk-433eyr4g.js: identity=162 gzip=150 brotli=127 bytes
onDemand chunk-nebstyp1.js: identity=4575 gzip=2013 brotli=1781 bytes
critical chunk-8ycz0dzb.js: identity=9810 gzip=4016 brotli=3459 bytes
onDemand chunk-58qa542x.js: identity=11529 gzip=4656 brotli=4255 bytes
critical chunk-z93cxfvm.js: identity=21235 gzip=6857 brotli=6128 bytes
onDemand chunk-9yp88qfm.js: identity=2420 gzip=1199 brotli=1080 bytes
critical chunk-969atqet.js: identity=8377 gzip=3575 brotli=3180 bytes
JavaScript transfer, critical: identity=951648 gzip=294992/307200 brotli=245283/256000 bytes
JavaScript transfer, deferred: identity=140656 gzip=49744/51200 brotli=43937/45056 bytes
JavaScript transfer, onDemand: identity=185163 gzip=72625/20480 brotli=64625/18432 bytes
JavaScript transfer, onDemand largest chunk chunk-xmb398q7.js: gzip=15177/20480 brotli=13468/18432 bytes (class total gzip=72625 brotli=64625, not limited)
fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes
fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes
fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes
fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes
fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes
fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes
fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes
fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes
fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes
fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes
fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes
fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes
fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes
fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes
fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes
fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes
fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes
fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes
fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes
fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes
Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes

==> Rust stream oracle (for the differential test)

==> TypeScript protocol tests
bun test v1.4.2 (744846f84)

src/mesh-review-revocation.test.ts:
(pass) review forbidden event cancels pending snapshot publication [2.87ms]
(pass) subscription forbidden ends delivery before a late refresh rejection [1.67ms]
(pass) subscription not found ends delivery before a late refresh rejection [1.25ms]
(pass) subscription invalid input ends delivery before a late refresh rejection [1.22ms]
(pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.18ms]
(pass) synchronous subscription refusal releases the transport exactly once [0.29ms]

src/codec.test.ts:
(pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [8.38ms]
(pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.40ms]
(pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.42ms]
(pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.30ms]
(pass) split mux header preserves trailing Close [0.35ms]

src/mesh-review-paged-error.test.ts:
(pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [3.14ms]
(pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.19ms]
(pass) a newer paged event owns publication before an earlier refresh resumes [2.87ms]

src/mesh-review-refresh.test.ts:
(pass) review superseded refresh failure cannot replace authoritative resync [1.65ms]
(pass) superseded failure preserves a newer pending refresh [3.01ms]

src/stream.test.ts:
stream differential: 134 streams, 11439 schedules, zero divergences
(pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [4809.47ms]
(pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [16.84ms]

src/mesh.test.ts:
(pass) Mesh actions map to their typed action IDs and JSON inputs [2.85ms]
(pass) Mesh watch coalesces change bursts and never publishes an older revision [6.54ms]
(pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.21ms]

src/mesh-review-continuation.test.ts:
(pass) review continuation stops after stop [1.73ms]
(pass) review continuation stops after forbidden [1.48ms]
(pass) review continuation stops after superseded [1.28ms]

src/mesh-pagination.test.ts:
(pass) list assembles bounded pages using the same filter [0.40ms]
(pass) a changed revision discards earlier pages before assembling its restart [0.20ms]
(pass) malformed continuation is refused: {"revision":1,"offset":0} [0.24ms]
(pass) malformed continuation is refused: {"revision":2,"offset":1} [0.04ms]
(pass) malformed continuation is refused: {"revision":1,"offset":2} [0.02ms]
(pass) watch never publishes a partial page; withdrawn=false [2.03ms]
(pass) watch never publishes a partial page; withdrawn=true [1.29ms]
(pass) a superseding equal-revision resync wins over pending page assembly [1.76ms]

src/mesh-review-resync.test.ts:
(pass) review watch applies same-revision authoritative resync [0.34ms]
(pass) authoritative resync keeps priority over an equal-revision pending list [1.81ms]

src/mesh-vectors.test.ts:
(pass) every shared Mesh action vector passes through the typed client unchanged [4.58ms]
(pass) shared Mesh event vectors drive the typed watch adapter [8.16ms]

 36 pass
 0 fail
 34462 expect() calls
Ran 36 tests across 10 files. [4.93s]

gate-ts transcript 1/1; head 261f4d4765f212511aadbda51d2a2727493d98cc. Verbatim output; incidental timing lines are not performance evidence. ```text Running as unit: run-p1438059-i14019331.scope; invocation ID: 55b9102348e2417888c573329a3e38b4 ==> Vendored Ghostty artifact checksums dist/ghostty-web.js: OK dist/ghostty-vt.wasm: OK dist/index.d.ts: OK ==> TypeScript protocol compiler ==> Tracer compiler, precompression and bundle transfer budget bun install v1.4.2 (744846f84) + @types/bun@1.3.8 + @types/node@22.19.0 + @types/ws@8.5.10 + playwright@1.61.1 + typescript@5.9.3 + ws@8.18.3 + @scure/bip39@2.2.0 + geist@1.7.2 38 packages installed [720.00ms] $ bun x tsc --project tsconfig.json bun test v1.4.2 (744846f84) precompress.test.ts: (pass) text sidecars round-trip deterministically; compressed formats remain identity [34.17ms] browser-build.test.ts: (pass) the browser renderer has no unresolved Vite Node-file shim request [34.38ms] src/perf-detector.test.ts: (pass) FrameDetector > estimates the refresh from the median and snaps it [3.17ms] (pass) FrameDetector > nothing is a drop before the rate is known [0.12ms] (pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.24ms] (pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.29ms] (pass) FrameDetector > the first frame after a pause is not an interval [0.12ms] (pass) FrameDetector > fps, p95 and window read the ring [0.41ms] (pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.41ms] (pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.13ms] src/canvas/recency.test.ts: (pass) touch moves an item to the front and never duplicates it [0.32ms] (pass) repeating the front item changes nothing [0.07ms] (pass) the list is capped, so the oldest items fall off [0.06ms] (pass) top skips items that are no longer live, without losing them [0.11ms] (pass) recentRows: five used windows in reverse order of use, from 54 windows [0.24ms] (pass) recentRows: a view with three windows and no use shows them in order [0.05ms] (pass) recentRows: used windows lead, the rest fill up to five in window order [0.09ms] src/canvas/windows/details-facts.test.ts: (pass) host facts become plain-language details rows [1.05ms] (pass) unknown optional host facts stay absent instead of appearing as placeholders [0.27ms] (pass) extended info off: the machine tab shows only the essentials, ungrouped, and there is no More section [0.49ms] (pass) extended info on: every fact sits under System, Resources or Access [0.34ms] (pass) the header follows the machine's own facts, not the platform the host list guessed [0.22ms] (pass) before facts arrive the host's platform names the header [0.10ms] (pass) a reported system with no platform mark still names the header and shows no mark [0.09ms] src/canvas/mesh/protocol.test.ts: (pass) the server's own list becomes nodes, tags and grants, by name [1.08ms] (pass) without `access` (today's server) the person may view and may not edit [0.48ms] (pass) fields the server does not send are absent, never invented [0.30ms] (pass) anything that is not a list is refused, whole [6.22ms] (pass) a node's own tag list and the tag table agree even when a server sends only one [0.26ms] (pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.38ms] (pass) answers carry the new revision, and a create the new arrow's id [0.10ms] (pass) endpoints go out as the server writes them: a node by id, a tag by name [0.13ms] src/canvas/mesh/layout.test.ts: (pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.78ms] (pass) the layout is deterministic and does not depend on input order [7.61ms] (pass) no two cards overlap, and every card lies inside the graph [10.66ms] (pass) the sheet is wider than tall, roughly 16:10 [2.50ms] (pass) a pinned node stays where it was put and the others do not move [4.30ms] (pass) a pin beyond the sheet grows the graph [0.47ms] (pass) a host's other tags do not move it; a tag nobody carries still has its node [0.32ms] (pass) 1,000 nodes lay out in a few milliseconds [11.37ms] src/canvas/layout/stops.test.ts: (pass) a view that fits the viewport has one stop, centred [0.45ms] (pass) a wide view has one stop per column and the last stop ends at the right edge [0.20ms] (pass) a view taller than the viewport is scaled down so it fits [0.05ms] (pass) nearestStop picks the stop whose centre is closest [0.23ms] (pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.18ms] (pass) a small graph keeps one stop per node column [0.13ms] (pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.08ms] (pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.10ms] src/canvas/layout/grid.test.ts: (pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.76ms] (pass) closing the new half gives the layout back exactly, in the model [1.62ms] (pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.53ms] (pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.44ms] (pass) split down in a group divides only the window's band: the partner window grows to keep its height [1.78ms] (pass) closing the window split down gives its band back to the window above and to the partner [0.76ms] (pass) a window split down in a plain column stacks under it and moves the windows below down [0.34ms] (pass) new window right opens a full-size column after the whole group, never inside it [0.52ms] (pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.15ms] (pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.19ms] (pass) random sequences of split right, split down, new window right and close never break the grid [55.68ms] (pass) closing every window of a group returns the view to nothing, with no problem on the way [0.46ms] (pass) a full-width band under a group moves nothing and extends the group by one band [0.16ms] (pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.13ms] src/canvas/layout/geometry.test.ts: (pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.63ms] (pass) a chain of neighbours is pushed in turn [0.24ms] (pass) snapping rounds to whole cells [0.06ms] (pass) reach follows grants through tags and keeps the relay [0.30ms] (pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [1.66ms] (pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.08ms] (pass) a desktop column is the same alone and in a strip [0.03ms] src/canvas/sessions/live-inventory.test.ts: (pass) a host snapshot replaces cached session rows and keeps only live shims [2.62ms] (pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.67ms] (pass) inventory remembers a remote session and refuses a cross-host attach [0.55ms] (pass) superseded status snapshots release records for sessions this device never opened [1.64ms] (pass) superseding a sidecar preserves status for a window opened on this device [0.26ms] (pass) a census predating a new shell does not permanently retire its confirmed live ID [0.22ms] (pass) a final Close before the first positive census never revives a new ID [0.12ms] (pass) a later absence retires a new ID after its first positive census [0.12ms] (pass) another host's census cannot clear a new shell's census fence [0.11ms] (pass) another host's close cannot clear a new shell's census fence [0.03ms] src/canvas/sessions/details-live.test.ts: (pass) a refused host facts action stops its recurring timer [1.59ms] (pass) a detected operating system supplies the live popover mark [1.39ms] src/canvas/sessions/live.test.ts: (pass) an enrolled host opens by UUID and splits keep that authority [0.93ms] (pass) unknown and ambiguous labels never open an embedded shell [0.11ms] (pass) removed hosts disappear from inventory and cannot route a new shell [0.22ms] src/canvas/sessions/gone-review.test.ts: (pass) selecting a known gone session keeps its final exited state [0.34ms] (pass) a known retired status survives repeated selection and generic ended answers [0.19ms] src/canvas/sessions/open-refusal.test.ts: (pass) memory refusal retains the reason and current counters [1.28ms] (pass) legacy refusals still work and malformed counters never reach the message [0.62ms] (pass) product copy names the host and counters and never renders untrusted server text [0.93ms] (pass) oversized refusal JSON is ignored before parsing [0.23ms] src/canvas/model/document.test.ts: (pass) a document holds references and layout, never content [0.45ms] (pass) a document survives JSON and rebuilds the same columns [0.59ms] (pass) a target that no longer exists is dropped, and an emptied column with it [0.11ms] (pass) parseDocument rejects anything that is not a document of this format [0.30ms] (pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.18ms] (pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.24ms] (pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.40ms] (pass) a plain view is saved without spans or bands, exactly as before D212 [0.09ms] src/canvas/addhost/real.test.ts: (pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.33ms] (pass) parsing the server's data > the server key needs its public key and fingerprint [0.05ms] (pass) parsing the server's data > an install command needs a lifetime [0.04ms] (pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [3.00ms] (pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [1.01ms] (pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [1.19ms] (pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.39ms] (pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.28ms] (pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.11ms] (pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.29ms] (pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.50ms] src/canvas/addhost/authority.on-demand.test.ts: (pass) CA wrapping matches the contract's HKDF domain and separates generations [3.79ms] src/canvas/addhost/model.test.ts: (pass) stagesOf > a host with no event is waiting everywhere [0.23ms] (pass) stagesOf > check before sign-in is detecting how to sign in [0.18ms] (pass) stagesOf > the sign-in report finishes detect and starts the system check [0.11ms] (pass) stagesOf > install, facts and connect map to install, enrol and first session [0.16ms] (pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.22ms] (pass) stagesOf > an unsupported host fails the system check, after sign-in [0.06ms] (pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.05ms] (pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.06ms] (pass) authLabel > names the method and a trusted network provider only [0.04ms] (pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.12ms] (pass) guideFor > each failure kind names its fix [0.08ms] (pass) guideFor > mesh-policy words say possible, not certain [0.02ms] (pass) parseTarget > reads user, host and port [0.16ms] (pass) parseTarget > refuses what cannot name a host [0.03ms] (pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [1.27ms] (pass) parseSshConfig > recognises config text [0.06ms] (pass) parseSshConfig > a hostname that is an option is dropped [0.04ms] (pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.05ms] (pass) plain words > no headline carries an arrow, an id or an API noun [0.68ms] (pass) only a completed canonical host identity becomes terminal authority [0.14ms] (pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.06ms] (pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.04ms] (pass) matchListed > a name that is exactly one host's id or address names that host [0.13ms] (pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.02ms] (pass) matchListed > a partial name that starts several hosts names none and waits [0.02ms] (pass) matchListed > a new name that starts no host is neither named nor waiting [0.02ms] (pass) install diagnostics name the failed step and public host error [0.07ms] (pass) missing payload tells the operator the architecture and expected server path [0.03ms] (pass) an already added host says so and offers opening its existing terminal [0.04ms] (pass) release payload verification names the architecture step and plain reason [0.02ms] src/canvas/addhost/wizard.test.ts: (pass) a saved-key prompt completing after close never starts an SSH attempt [0.52ms] (pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.32ms] (pass) ready CA begins the requested installation mode without another prompt [0.16ms] (pass) closing during CA confirmation never starts an SSH attempt [0.40ms] (pass) a typed root login requires explicit consent before any installation [0.15ms] ../../packages/ui/src/spring.test.ts: (pass) a missed frame does not stretch a settled spring [0.45ms] (pass) motion follows elapsed time across frame rates and damping regimes [0.43ms] chunk-classes.test.ts: (pass) the first screen is critical, the canvas product module and what only it uses are deferred [1.80ms] (pass) a chunk that both sides use stays critical [0.21ms] (pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.18ms] test/recovery-ui.test.ts: (pass) compiled recovery UI mode off obeys its URL boundary [7.55ms] (pass) compiled recovery UI mode preview obeys its URL boundary [4.55ms] (pass) compiled recovery UI mode 1 obeys its URL boundary [3.70ms] test/recovery-crypto.test.ts: (pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [20.79ms] (pass) 100 repeated wrapping operations generate independent salts and nonces [19.14ms] test/recovery-rotation.test.ts: (pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [18.91ms] (pass) abandoned word acknowledgement uploads nothing [2.37ms] (pass) settled acknowledgement cannot upload later (dismissed) [2.50ms] (pass) settled acknowledgement cannot upload later (no acknowledgement) [2.95ms] test/recovery-wait.test.ts: (pass) server remaining wait 0s is accepted through the capability policy maximum [1.55ms] (pass) server remaining wait 86400s is accepted through the capability policy maximum [1.20ms] (pass) server remaining wait 90000s is accepted through the capability policy maximum [1.13ms] (pass) server remaining wait 172800s is accepted through the capability policy maximum [1.44ms] (pass) malformed or excessive remaining wait -1 is denied [1.42ms] (pass) malformed or excessive remaining wait 0.5 is denied [1.24ms] (pass) malformed or excessive remaining wait 172801 is denied [1.06ms] (pass) malformed or excessive remaining wait 9007199254740992 is denied [1.14ms] (pass) malformed or excessive remaining wait 90000 is denied [1.26ms] 168 pass 0 fail 11332 expect() calls Ran 168 tests across 26 files. [502.00ms] $ bun run build.ts built chunk-z93cxfvm.js, chunk-bcrmm064.js, chunk-3g02wn4t.js, chunk-bsv98wsj.js, chunk-bwan89r4.js, chunk-p4pq9b17.js, chunk-a895a34j.js, chunk-gtm292qm.js, chunk-9yp88qfm.js, chunk-z8ytdtwg.js, chunk-y42y8m47.js, chunk-5s6a3m50.js, main.js, chunk-969atqet.js, chunk-15nnyy73.js, chunk-vxv25w33.js, chunk-2xk5rt3w.js, chunk-ygz6v7t7.js, chunk-c1dgfc87.js, chunk-2j9jmw5g.js, chunk-yr0r38s4.js, chunk-8t7pe4ht.js, chunk-3w26dxrc.js, chunk-axbkkqp1.js, chunk-pag6ga69.js, chunk-p4mz2tv2.js, chunk-qm1x9vpy.js, chunk-nebstyp1.js, chunk-q1v7trkx.js, chunk-fc0b26s2.js, chunk-nzkjad9s.js, chunk-cr5fa70f.js, chunk-58qa542x.js, chunk-xd3xbfxf.js, chunk-jkykcgdz.js, chunk-akfzfbm0.js, chunk-0mfcs52z.js, chunk-q56hm25z.js, chunk-9xd3g65e.js, chunk-28rbcdd5.js, chunk-61xwpgvs.js, chunk-xmb398q7.js, chunk-433eyr4g.js, chunk-fef4qdz6.js, chunk-k07rsard.js, chunk-m9mmpzv9.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-8ycz0dzb.js, chunk-f2r0hhqc.js, chunk-2bcfkj59.js, chunk-1gmd2m5q.js, chunk-ycxxhz1d.js deferred chunk-fc0b26s2.js: identity=97656 gzip=33161 brotli=29332 bytes critical chunk-p4pq9b17.js: identity=707 gzip=368 brotli=306 bytes onDemand chunk-qm1x9vpy.js: identity=2824 gzip=1387 brotli=1196 bytes critical chunk-8t7pe4ht.js: identity=1104 gzip=666 brotli=604 bytes critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-q56hm25z.js: identity=10693 gzip=4125 brotli=3760 bytes critical chunk-pag6ga69.js: identity=707945 gzip=204703 brotli=165886 bytes onDemand chunk-akfzfbm0.js: identity=7662 gzip=3395 brotli=2974 bytes critical chunk-1gmd2m5q.js: identity=199 gzip=162 brotli=136 bytes onDemand chunk-2bcfkj59.js: identity=1063 gzip=653 brotli=521 bytes critical chunk-c1dgfc87.js: identity=590 gzip=327 brotli=319 bytes onDemand chunk-m9mmpzv9.js: identity=2462 gzip=1108 brotli=935 bytes onDemand chunk-cr5fa70f.js: identity=540 gzip=351 brotli=313 bytes onDemand chunk-xmb398q7.js: identity=48283 gzip=15177 brotli=13468 bytes onDemand chunk-3w26dxrc.js: identity=1026 gzip=623 brotli=498 bytes critical faulty-terminal.worker.js: identity=1086 gzip=559 brotli=480 bytes critical backdrop.worker.js: identity=243 gzip=212 brotli=165 bytes onDemand chunk-xd3xbfxf.js: identity=5359 gzip=2579 brotli=2300 bytes onDemand chunk-y42y8m47.js: identity=6265 gzip=2105 brotli=1862 bytes onDemand chunk-q1v7trkx.js: identity=1616 gzip=866 brotli=739 bytes onDemand chunk-5s6a3m50.js: identity=2108 gzip=1037 brotli=869 bytes critical chunk-a895a34j.js: identity=88 gzip=88 brotli=74 bytes critical chunk-vxv25w33.js: identity=5443 gzip=2605 brotli=2380 bytes critical chunk-2xk5rt3w.js: identity=15859 gzip=6182 brotli=5484 bytes critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes critical chunk-bcrmm064.js: identity=4499 gzip=1856 brotli=1635 bytes onDemand chunk-gtm292qm.js: identity=228 gzip=178 brotli=165 bytes onDemand chunk-jkykcgdz.js: identity=4640 gzip=1932 brotli=1703 bytes critical chunk-ycxxhz1d.js: identity=42395 gzip=14485 brotli=12991 bytes onDemand chunk-fef4qdz6.js: identity=6773 gzip=3176 brotli=2888 bytes onDemand chunk-p4mz2tv2.js: identity=6198 gzip=2792 brotli=2519 bytes critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-15nnyy73.js: identity=2557 gzip=1180 brotli=1009 bytes critical chunk-ygz6v7t7.js: identity=17627 gzip=6252 brotli=5569 bytes critical chunk-2j9jmw5g.js: identity=2519 gzip=1008 brotli=876 bytes onDemand chunk-k07rsard.js: identity=31922 gzip=12262 brotli=11075 bytes critical chunk-yr0r38s4.js: identity=386 gzip=238 brotli=196 bytes onDemand chunk-3g02wn4t.js: identity=5784 gzip=2189 brotli=1938 bytes onDemand chunk-bwan89r4.js: identity=3891 gzip=1735 brotli=1516 bytes onDemand chunk-0mfcs52z.js: identity=13384 gzip=5029 brotli=4504 bytes deferred chunk-bsv98wsj.js: identity=43000 gzip=16583 brotli=14605 bytes onDemand chunk-z8ytdtwg.js: identity=191 gzip=170 brotli=130 bytes critical main.js: identity=111029 gzip=40357 brotli=34972 bytes onDemand chunk-nzkjad9s.js: identity=1170 gzip=708 brotli=627 bytes critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes critical chunk-433eyr4g.js: identity=162 gzip=150 brotli=127 bytes onDemand chunk-nebstyp1.js: identity=4575 gzip=2013 brotli=1781 bytes critical chunk-8ycz0dzb.js: identity=9810 gzip=4016 brotli=3459 bytes onDemand chunk-58qa542x.js: identity=11529 gzip=4656 brotli=4255 bytes critical chunk-z93cxfvm.js: identity=21235 gzip=6857 brotli=6128 bytes onDemand chunk-9yp88qfm.js: identity=2420 gzip=1199 brotli=1080 bytes critical chunk-969atqet.js: identity=8377 gzip=3575 brotli=3180 bytes JavaScript transfer, critical: identity=951648 gzip=294992/307200 brotli=245283/256000 bytes JavaScript transfer, deferred: identity=140656 gzip=49744/51200 brotli=43937/45056 bytes JavaScript transfer, onDemand: identity=185163 gzip=72625/20480 brotli=64625/18432 bytes JavaScript transfer, onDemand largest chunk chunk-xmb398q7.js: gzip=15177/20480 brotli=13468/18432 bytes (class total gzip=72625 brotli=64625, not limited) fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes ==> Rust stream oracle (for the differential test) ==> TypeScript protocol tests bun test v1.4.2 (744846f84) src/mesh-review-revocation.test.ts: (pass) review forbidden event cancels pending snapshot publication [2.87ms] (pass) subscription forbidden ends delivery before a late refresh rejection [1.67ms] (pass) subscription not found ends delivery before a late refresh rejection [1.25ms] (pass) subscription invalid input ends delivery before a late refresh rejection [1.22ms] (pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.18ms] (pass) synchronous subscription refusal releases the transport exactly once [0.29ms] src/codec.test.ts: (pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [8.38ms] (pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.40ms] (pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.42ms] (pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.30ms] (pass) split mux header preserves trailing Close [0.35ms] src/mesh-review-paged-error.test.ts: (pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [3.14ms] (pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.19ms] (pass) a newer paged event owns publication before an earlier refresh resumes [2.87ms] src/mesh-review-refresh.test.ts: (pass) review superseded refresh failure cannot replace authoritative resync [1.65ms] (pass) superseded failure preserves a newer pending refresh [3.01ms] src/stream.test.ts: stream differential: 134 streams, 11439 schedules, zero divergences (pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [4809.47ms] (pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [16.84ms] src/mesh.test.ts: (pass) Mesh actions map to their typed action IDs and JSON inputs [2.85ms] (pass) Mesh watch coalesces change bursts and never publishes an older revision [6.54ms] (pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.21ms] src/mesh-review-continuation.test.ts: (pass) review continuation stops after stop [1.73ms] (pass) review continuation stops after forbidden [1.48ms] (pass) review continuation stops after superseded [1.28ms] src/mesh-pagination.test.ts: (pass) list assembles bounded pages using the same filter [0.40ms] (pass) a changed revision discards earlier pages before assembling its restart [0.20ms] (pass) malformed continuation is refused: {"revision":1,"offset":0} [0.24ms] (pass) malformed continuation is refused: {"revision":2,"offset":1} [0.04ms] (pass) malformed continuation is refused: {"revision":1,"offset":2} [0.02ms] (pass) watch never publishes a partial page; withdrawn=false [2.03ms] (pass) watch never publishes a partial page; withdrawn=true [1.29ms] (pass) a superseding equal-revision resync wins over pending page assembly [1.76ms] src/mesh-review-resync.test.ts: (pass) review watch applies same-revision authoritative resync [0.34ms] (pass) authoritative resync keeps priority over an equal-revision pending list [1.81ms] src/mesh-vectors.test.ts: (pass) every shared Mesh action vector passes through the typed client unchanged [4.58ms] (pass) shared Mesh event vectors drive the typed watch adapter [8.16ms] 36 pass 0 fail 34462 expect() calls Ran 36 tests across 10 files. [4.93s] ```

kayg commented

2026-10-12 14:17:46 +00:00

Author

Owner

Corrected the closing organization-count range to match the nine listed profiles: 13–19 rules. Commit 4e038168 is pushed to access-rules-r2-coverage; git diff --check passes.

Corrected the closing organization-count range to match the nine listed profiles: 13–19 rules. Commit 4e038168 is pushed to access-rules-r2-coverage; git diff --check passes.

kayg commented

2026-10-12 14:18:59 +00:00

Author

Owner

Finish: branch access-rules-r2-surfaces is pushed at 935dba854a. Report: docs/design/access-rules-verification/round2-surfaces.md. It audits all 65 round-one IDs (59 closed under Q1–Q7 answers; 6 not closed/partial) and records 12 new findings: P0 0, P1 4, P2 8. The scratch parser/printer passed 12 examples, 10,000 generated round trips, 19 hostile-name classes, and refused 14/14 malformed inputs.

Top five findings:

F2-SURF-02 (P1): the working Q2 answer's person-level open-service operation cannot be written or checked.
F2-SURF-03 (P1): past session output lacks a permission target separate from live view.
F2-SURF-04 (P1): HTTP/MCP/WebMCP list and mutation contracts are absent.
F2-SURF-06 (P1): v2's lease recommendation conflicts with the Q7 D166 offline answer and omits the pending-machine count.
F2-SURF-01 (P2): Q1's one list with People/Machines filters conflicts with v2's three headings.

Required gate: scripts/verify fast returned exit 1. Its final output was:

binary exceeds the 16404816-byte size budget: 21857264 bytes
PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816)

The full parallel test run had two auth failures: server_setup_terminal_echo_and_resume_preserve_offsets_once and socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap. Each passed when rerun individually (1/1); the full test row still failed. No product source changed in this design review. The static binary size remains over budget. The issue remains open.

Finish: branch access-rules-r2-surfaces is pushed at 935dba854a535562b93e13433b6696627890d265. Report: docs/design/access-rules-verification/round2-surfaces.md. It audits all 65 round-one IDs (59 closed under Q1–Q7 answers; 6 not closed/partial) and records 12 new findings: P0 0, P1 4, P2 8. The scratch parser/printer passed 12 examples, 10,000 generated round trips, 19 hostile-name classes, and refused 14/14 malformed inputs. Top five findings: - F2-SURF-02 (P1): the working Q2 answer's person-level open-service operation cannot be written or checked. - F2-SURF-03 (P1): past session output lacks a permission target separate from live view. - F2-SURF-04 (P1): HTTP/MCP/WebMCP list and mutation contracts are absent. - F2-SURF-06 (P1): v2's lease recommendation conflicts with the Q7 D166 offline answer and omits the pending-machine count. - F2-SURF-01 (P2): Q1's one list with People/Machines filters conflicts with v2's three headings. Required gate: scripts/verify fast returned exit 1. Its final output was: binary exceeds the 16404816-byte size budget: 21857264 bytes PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816) +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | FAIL (101) | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ The full parallel test run had two auth failures: server_setup_terminal_echo_and_resume_preserve_offsets_once and socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap. Each passed when rerun individually (1/1); the full test row still failed. No product source changed in this design review. The static binary size remains over budget. The issue remains open.

kayg commented

2026-10-12 14:30:29 +00:00

Author

Owner

Round-two coverage is complete at head 4e03816857. Report: docs/design/access-rules-verification/round2-coverage.md. It traces all 65 round-one IDs, maps 24 permission-bearing capabilities, trials nine organizations with 13–19 rules each, and records 10 new findings: P0 1, P1 6, P2 3.

Top five findings:

R2-C01 (P0): a newly provisioned IdP identity can match the Everyone login row before staged group additions are approved.
R2-C03 (P1): the Q2 person-level Open service operation has no active sentence rule, so an allowed browser request is refused.
R2-C04 (P1): machine reach cannot select a discovered service as allowed by D164.
R2-C05 (P1): route actions cannot consistently name their network target in the canonical sentence and schema.
R2-C06 (P1): an access-check body can name a different actor/action/target from its authenticated context, leaving one request with two meanings.

scripts/verify fast exited 1 on the static binary size budget. The report is the only file changed by this branch. TypeScript verification was run separately because the Rust failure stops the fast script; it passed, including the 134-stream / 11,439-schedule differential with zero divergences and 36 protocol tests.

Final Rust gate output:

    Finished `release` profile [optimized] target(s) in 1.02s
/home/kayg/.cache/codex-scratch/access-rules-r2-coverage/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 21857264 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Round-two coverage is complete at head 4e03816857aa1fce40fecfe0adeec53cbcfbd166. Report: docs/design/access-rules-verification/round2-coverage.md. It traces all 65 round-one IDs, maps 24 permission-bearing capabilities, trials nine organizations with 13–19 rules each, and records 10 new findings: P0 1, P1 6, P2 3. Top five findings: - R2-C01 (P0): a newly provisioned IdP identity can match the Everyone login row before staged group additions are approved. - R2-C03 (P1): the Q2 person-level Open service operation has no active sentence rule, so an allowed browser request is refused. - R2-C04 (P1): machine reach cannot select a discovered service as allowed by D164. - R2-C05 (P1): route actions cannot consistently name their network target in the canonical sentence and schema. - R2-C06 (P1): an access-check body can name a different actor/action/target from its authenticated context, leaving one request with two meanings. `scripts/verify fast` exited 1 on the static binary size budget. The report is the only file changed by this branch. TypeScript verification was run separately because the Rust failure stops the fast script; it passed, including the 134-stream / 11,439-schedule differential with zero divergences and 36 protocol tests. Final Rust gate output: ``` Finished `release` profile [optimized] target(s) in 1.02s /home/kayg/.cache/codex-scratch/access-rules-r2-coverage/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 21857264 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented

2026-10-12 14:34:10 +00:00

Author

Owner

Starting spec v3 on access-rules-v3, base dcec7b2d32 from origin/access-rules-v2 as explicitly requested. Read all 68 comments on #186 and parent #147 (zero comments), CLAUDE, DECISIONS, ARCHITECTURE and PROCESS. Continuing the three round-two reports and owner Q1–Q7/L1 answers. Documentation only; import reports unchanged, fold semantic repairs, align grammar/JSON and trace every finding. Push authorized by this brief; no deploy or product code.

Starting spec v3 on access-rules-v3, base dcec7b2d325837414593eaa8eb2027b43b10424e from origin/access-rules-v2 as explicitly requested. Read all 68 comments on #186 and parent #147 (zero comments), CLAUDE, DECISIONS, ARCHITECTURE and PROCESS. Continuing the three round-two reports and owner Q1–Q7/L1 answers. Documentation only; import reports unchanged, fold semantic repairs, align grammar/JSON and trace every finding. Push authorized by this brief; no deploy or product code.

kayg commented

2026-10-12 14:42:48 +00:00

Author

Owner

Steps committed/pushed: 736d8b4a imported three round-two reports byte-identically; 87042fd6 folds owner Q1–Q7/L1 and D253 plus semantic/grammar repairs; 2053d89a defines strict request/mutation/assurance surfaces. Evidence: docs/design/access-rules.md. New/reactivated IdP identities remain pending outside Everyone; provider ordering cancels stale additions; permanent edits require unconditional authority; delegate source reach evaluated once. Trace folding now covers 99 distinct IDs (65 round one + 34 new round two), with retained IDs counted once. No new owner questions so far. Documentation checks pass; milestone full gate is compiling unchanged sources in job scratch.

Steps committed/pushed: 736d8b4a imported three round-two reports byte-identically; 87042fd6 folds owner Q1–Q7/L1 and D253 plus semantic/grammar repairs; 2053d89a defines strict request/mutation/assurance surfaces. Evidence: docs/design/access-rules.md. New/reactivated IdP identities remain pending outside Everyone; provider ordering cancels stale additions; permanent edits require unconditional authority; delegate source reach evaluated once. Trace folding now covers 99 distinct IDs (65 round one + 34 new round two), with retained IDs counted once. No new owner questions so far. Documentation checks pass; milestone full gate is compiling unchanged sources in job scratch.

kayg commented

2026-10-12 14:51:04 +00:00

Author

Owner

Trace/evidence step committed and pushed: 1b5c0a53, 99/99 distinct IDs/severities match all six source reports: 34 P0, 49 P1, 16 P2; 96 specified resolutions, 3 explicit P2 limitations (AR-13, AR-14, R2-C09), 0 open P0/P1. V3 design probe: 33/33 grammar examples, 7/7 new sentence/body schema pairs, 10000 quote/token round trips (0 failures, 19 known hostile-name classes), 10/10 structural and 7/7 delimiter negatives refused; not a full validator, Unicode conformance or runtime authorization proof. All three round-two imports remain byte-identical. Self-review correction a19a80f9 preserves owner L1 exactly: ordinary accounts on machines added by that person, using verified enrollment provenance rather than mutable ownership labels; enterprise inference off. No new owner questions: None. Full gate still compiling unchanged native sources.

Trace/evidence step committed and pushed: 1b5c0a53, 99/99 distinct IDs/severities match all six source reports: 34 P0, 49 P1, 16 P2; 96 specified resolutions, 3 explicit P2 limitations (AR-13, AR-14, R2-C09), 0 open P0/P1. V3 design probe: 33/33 grammar examples, 7/7 new sentence/body schema pairs, 10000 quote/token round trips (0 failures, 19 known hostile-name classes), 10/10 structural and 7/7 delimiter negatives refused; not a full validator, Unicode conformance or runtime authorization proof. All three round-two imports remain byte-identical. Self-review correction a19a80f9 preserves owner L1 exactly: ordinary accounts on machines added by that person, using verified enrollment provenance rather than mutable ownership labels; enterprise inference off. No new owner questions: None. Full gate still compiling unchanged native sources.

kayg commented

2026-10-12 14:55:53 +00:00

Author

Owner

Self-review completed at pushed head d7c6c4c8: source diff is exactly docs/design/access-rules.md plus three unchanged round-two reports. Added the visible owner-only Share session/Revoke session share built-in with per-request exact body/live dependencies; no broad manage or recipient wildcard. L1 correction uses verified adding-person provenance, not a personal-machine-only restriction. Canonical examples/schema pairs and 99-ID trace probe still pass; all owner Q1–Q7/L1 answers are settled and no new question is introduced. Reviewer checklists: round-two soundness lifecycle/compatibility, coverage 24 capabilities/nine profiles, surfaces adapters/lexical forms, PROCESS §2, and TASTE shared UI requirement. No implementation/mockup/screenshots/performance claims. Milestone gate is in native tests, final-head invocation follows sequentially.

Self-review completed at pushed head d7c6c4c8: source diff is exactly docs/design/access-rules.md plus three unchanged round-two reports. Added the visible owner-only Share session/Revoke session share built-in with per-request exact body/live dependencies; no broad manage or recipient wildcard. L1 correction uses verified adding-person provenance, not a personal-machine-only restriction. Canonical examples/schema pairs and 99-ID trace probe still pass; all owner Q1–Q7/L1 answers are settled and no new question is introduced. Reviewer checklists: round-two soundness lifecycle/compatibility, coverage 24 capabilities/nine profiles, surfaces adapters/lexical forms, PROCESS §2, and TASTE shared UI requirement. No implementation/mockup/screenshots/performance claims. Milestone gate is in native tests, final-head invocation follows sequentially.

kayg commented

2026-10-12 15:05:16 +00:00

Author

Owner

Final self-review clarification committed/pushed as cb80a825: parent #147/D209/D210 require fresh request-bound passkey proof for table/Map rule saves even when the addition is widening rather than destructive. Explicitly preserved that in the shared action contract, with server-verified interactive/automation provenance. Counts remain 99 findings (96 written resolutions, 3 accepted P2 limits); no new owner questions. V3 probe and diff checks pass; native tests/dependency checks pass in the milestone gate, static build now running.

Final self-review clarification committed/pushed as cb80a825: parent #147/D209/D210 require fresh request-bound passkey proof for table/Map rule saves even when the addition is widening rather than destructive. Explicitly preserved that in the shared action contract, with server-verified interactive/automation provenance. Counts remain 99 findings (96 written resolutions, 3 accepted P2 limits); no new owner questions. V3 probe and diff checks pass; native tests/dependency checks pass in the milestone gate, static build now running.

kayg commented

2026-10-12 15:13:09 +00:00

Author

Owner

PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 21857264 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Gate blocker: milestone scripts/verify fast exits 1 only on the unchanged static size row: 21857264 bytes vs 16404816 maximum (5452448 over), same result as spec v2 and all round-two reviews. fmt, VT native fmt, CLI compile-out, clippy, native tests and cargo-deny PASS. No product sources differ from dcec7b2d; only four documentation paths changed. Passing this row needs the development/integration binary-size work (D243), outside this documentation-only brief; no budget or product code was changed. Final-head run at cb80a825 is now active after milestone completion. An early queued final run unexpectedly ran cached tests during the static build and was stopped (143); it is not final evidence. Verbatim milestone tail: ```text PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 21857264 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented

2026-10-12 15:19:27 +00:00

Author

Owner

Access mockup round 2 is on branch mockup-access-r2 (head 66e5afb1, based on mockup-mesh-r1). Mock only, against the test double, with the MOCKUP / TEST DOUBLE badges. Owner decision L1 applied: the account flow is a device-code "sign in", never "link".

URLs (preview build, INFRATERNAL_CLUSTERS_PREVIEW=1), all start with /?mock=1&proto=clusters&scene=1&mesh=r1&access=r2:

Settings -> Access: open the Settings view, the Access window (the list). Add &edition=ee for the enterprise edition (rules only, no own-username default, "with approval" available). &access-filter=people|machines|all picks a chip.
Settings -> Account (Signed-in terminals) is the Account window of the same Settings view.
Terminal text: &signin=terminal then open nix-cache in Console. Browser page: &signin=page, &signin=typed (code filled), &signin=done, &signin=refused.
Inbox: &inbox=access, open the sidebar.
Mesh: fly to Mesh; select an arrow (details with "Edit" and "Remove rule"), or the "why can't" icon.

Captures (apps/tracer/captures/access-r2/, <name>-<desktop|phone|small>-<ink|paper>.png; desktop 1440x900, phone 393x852, small 375x667):

a1-a7 the list: all, end of list, People, Machines, "Allow only rules" confirm, rules-only state, enterprise
b1-b16 builder: who, verb, account, where narrowed, preview, endings, widening, machine verbs, EE mark (community) and approval (enterprise), row menu, edit
c1-c3 removal: confirm, confirm with "Removal pending on 2 machines (offline) — applies when they reconnect.", the pending row
d1-d9 sign in: terminal, page, done, wrong code, "Not me", terminal and page side by side (d3), Account list (community, enterprise), sign-out confirm
e1-e5 Mesh: arrow details, edit in the builder, why answers
f1-f2 Inbox: machine waiting, people waiting (both with a preview)

Gates: bun run check clean, bun test src 186 pass, bun run build && bun run transfer-budget.ts green with no mock strings in dist, capture spec 12 tests x 4 plus 1 x 2 passing. scripts/verify fast: the TypeScript side is fine; the Rust gate fails on test (101) and the static binary size (21857264 > 16404816 baseline+allowance), which this branch does not touch.

Design questions (recommendation first):

One list or three headings (Q1)? Recommend one list with Defaults / Your rules / Built in, as built; Roles and Login rows read the same as network rows.
The "from" ending: the spec limits it to boot. Recommend keeping it boot only (the builder offers it only there); offering it on reach would need a source-machine meaning the spec does not define.
Times in sentences: shown in local time ("until Thu 15 Oct, 16:22") while the stored rule is one UTC instant. Recommend local time in the sentence and the UTC instant in the row's tooltip.
When the widening line shows: now for any rule that names a group, a tag, every machine, Everyone or any account. Recommend that; a single named person on a single machine shows only the preview line.
Enterprise-only endings in the community edition: shown greyed with an "EE" mark and the reason ("Needs the enterprise edition"). Recommend that over hiding them, so people learn it exists; a disabled row always says why.
Two-way arrows: two rows (two sentences), as the spec says. Removing one direction keeps the other. Recommend two rows; the arrow details show the second sentence in the subtitle.
A removal pending on machines that are away: the row stays dimmed with the note until they reconnect. Recommend adding no "remove anyway" action: the server has already removed it, and the row only reports.
Sign-in lifetime: a signed-in terminal stays until signed out in Settings -> Account. Recommend an expiry (for example 30 days, shown in the row) so a forgotten sign-in does not stay forever.
AI agent as "who": drawn as a user chip with an initial and its own colour, with the source "never more than Kayg". Recommend a distinct AI mark in the chip once we have one; the words "AI agent" appear in the group heading of the builder.
Where the builder opens: an anchored card on every size (full width on a phone). Recommend keeping it a card; a full sheet would hide the list the person is editing.

Access mockup round 2 is on branch `mockup-access-r2` (head 66e5afb1, based on `mockup-mesh-r1`). Mock only, against the test double, with the MOCKUP / TEST DOUBLE badges. Owner decision L1 applied: the account flow is a device-code "sign in", never "link". URLs (preview build, `INFRATERNAL_CLUSTERS_PREVIEW=1`), all start with `/?mock=1&proto=clusters&scene=1&mesh=r1&access=r2`: - Settings -> Access: open the Settings view, the Access window (the list). Add `&edition=ee` for the enterprise edition (rules only, no own-username default, "with approval" available). `&access-filter=people|machines|all` picks a chip. - Settings -> Account (Signed-in terminals) is the Account window of the same Settings view. - Terminal text: `&signin=terminal` then open nix-cache in Console. Browser page: `&signin=page`, `&signin=typed` (code filled), `&signin=done`, `&signin=refused`. - Inbox: `&inbox=access`, open the sidebar. - Mesh: fly to Mesh; select an arrow (details with "Edit" and "Remove rule"), or the "why can't" icon. Captures (`apps/tracer/captures/access-r2/`, `<name>-<desktop|phone|small>-<ink|paper>.png`; desktop 1440x900, phone 393x852, small 375x667): - a1-a7 the list: all, end of list, People, Machines, "Allow only rules" confirm, rules-only state, enterprise - b1-b16 builder: who, verb, account, where narrowed, preview, endings, widening, machine verbs, EE mark (community) and approval (enterprise), row menu, edit - c1-c3 removal: confirm, confirm with "Removal pending on 2 machines (offline) — applies when they reconnect.", the pending row - d1-d9 sign in: terminal, page, done, wrong code, "Not me", terminal and page side by side (d3), Account list (community, enterprise), sign-out confirm - e1-e5 Mesh: arrow details, edit in the builder, why answers - f1-f2 Inbox: machine waiting, people waiting (both with a preview) Gates: `bun run check` clean, `bun test src` 186 pass, `bun run build && bun run transfer-budget.ts` green with no mock strings in dist, capture spec 12 tests x 4 plus 1 x 2 passing. `scripts/verify fast`: the TypeScript side is fine; the Rust gate fails on `test` (101) and the static binary size (21857264 > 16404816 baseline+allowance), which this branch does not touch. Design questions (recommendation first): 1. One list or three headings (Q1)? Recommend one list with Defaults / Your rules / Built in, as built; Roles and Login rows read the same as network rows. 2. The "from" ending: the spec limits it to boot. Recommend keeping it boot only (the builder offers it only there); offering it on reach would need a source-machine meaning the spec does not define. 3. Times in sentences: shown in local time ("until Thu 15 Oct, 16:22") while the stored rule is one UTC instant. Recommend local time in the sentence and the UTC instant in the row's tooltip. 4. When the widening line shows: now for any rule that names a group, a tag, every machine, Everyone or any account. Recommend that; a single named person on a single machine shows only the preview line. 5. Enterprise-only endings in the community edition: shown greyed with an "EE" mark and the reason ("Needs the enterprise edition"). Recommend that over hiding them, so people learn it exists; a disabled row always says why. 6. Two-way arrows: two rows (two sentences), as the spec says. Removing one direction keeps the other. Recommend two rows; the arrow details show the second sentence in the subtitle. 7. A removal pending on machines that are away: the row stays dimmed with the note until they reconnect. Recommend adding no "remove anyway" action: the server has already removed it, and the row only reports. 8. Sign-in lifetime: a signed-in terminal stays until signed out in Settings -> Account. Recommend an expiry (for example 30 days, shown in the row) so a forgotten sign-in does not stay forever. 9. AI agent as "who": drawn as a user chip with an initial and its own colour, with the source "never more than Kayg". Recommend a distinct AI mark in the chip once we have one; the words "AI agent" appear in the group heading of the builder. 10. Where the builder opens: an anchored card on every size (full width on a phone). Recommend keeping it a card; a full sheet would hide the list the person is editing.

kayg commented

2026-10-12 15:22:27 +00:00

Author

Owner

Final-head attempt at b92e846d failed repeated_tiny_credit_pauses_preserve_shell_progress (agent_review wrapper for scripts/verify-agent-snapshot.py, #118 case), then terminated 143 before the remaining rows/summary. Detached origin/dev baseline ef6c61ec under job scratch passed the same Python harness under CPUWeight=10000; load average at baseline start 8.47 16.07 25.55 on infraternal-dev. All non-documentation sources match exactly (git diff HEAD origin/dev excluding docs/ and DECISIONS.md is empty), so baseline used a copy of the same freshly-built GNU binary, avoiding redundant compilation. Baseline passed, so no #118 failure waiver is claimed. Refreshing the full final-head gate. Build-host timing lines are mandatory gate output, not performance evidence.

Branch failure (verbatim):

---- repeated_tiny_credit_pauses_preserve_shell_progress stdout ----

thread 'repeated_tiny_credit_pauses_preserve_shell_progress' (2711841) panicked at crates/infraternal/tests/agent_review.rs:13:5:
scripts/verify-agent-snapshot.py:
catch-up 0: 12 MiB shell completed; 1-byte credit paused; funded Snapshot=372 bytes seq=12583538: PASS


note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    repeated_tiny_credit_pauses_preserve_shell_progress

test result: FAILED. 7 passed; 1 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.55s

error: test failed, to rerun pass `-p infraternal --test agent_review`

Baseline harness output (verbatim):

Running as unit: run-p2730557-i15311791.scope; invocation ID: fe010ad895014562b82d0b6cecc2eba9
catch-up 0: 12 MiB shell completed; 1-byte credit paused; funded Snapshot=372 bytes seq=12583538: PASS
catch-up 1: 12 MiB shell completed; 1-byte credit paused; funded Snapshot=372 bytes seq=25166709: PASS
catch-up 2: 12 MiB shell completed; 1-byte credit paused; funded Snapshot=372 bytes seq=37749880: PASS
initial ring-wrap attachment: Snapshot=372 bytes seq=50333045: PASS
four 12 MiB floods completed; three tiny-credit pauses and funded Snapshots; no Close needed: PASS

Final-head attempt at b92e846d failed repeated_tiny_credit_pauses_preserve_shell_progress (agent_review wrapper for scripts/verify-agent-snapshot.py, #118 case), then terminated 143 before the remaining rows/summary. Detached origin/dev baseline ef6c61ec under job scratch passed the same Python harness under CPUWeight=10000; load average at baseline start 8.47 16.07 25.55 on infraternal-dev. All non-documentation sources match exactly (git diff HEAD origin/dev excluding docs/ and DECISIONS.md is empty), so baseline used a copy of the same freshly-built GNU binary, avoiding redundant compilation. Baseline passed, so no #118 failure waiver is claimed. Refreshing the full final-head gate. Build-host timing lines are mandatory gate output, not performance evidence. Branch failure (verbatim): ```text ---- repeated_tiny_credit_pauses_preserve_shell_progress stdout ---- thread 'repeated_tiny_credit_pauses_preserve_shell_progress' (2711841) panicked at crates/infraternal/tests/agent_review.rs:13:5: scripts/verify-agent-snapshot.py: catch-up 0: 12 MiB shell completed; 1-byte credit paused; funded Snapshot=372 bytes seq=12583538: PASS note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace failures: repeated_tiny_credit_pauses_preserve_shell_progress test result: FAILED. 7 passed; 1 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.55s error: test failed, to rerun pass `-p infraternal --test agent_review` ``` Baseline harness output (verbatim): ```text Running as unit: run-p2730557-i15311791.scope; invocation ID: fe010ad895014562b82d0b6cecc2eba9 catch-up 0: 12 MiB shell completed; 1-byte credit paused; funded Snapshot=372 bytes seq=12583538: PASS catch-up 1: 12 MiB shell completed; 1-byte credit paused; funded Snapshot=372 bytes seq=25166709: PASS catch-up 2: 12 MiB shell completed; 1-byte credit paused; funded Snapshot=372 bytes seq=37749880: PASS initial ring-wrap attachment: Snapshot=372 bytes seq=50333045: PASS four 12 MiB floods completed; three tiny-credit pauses and funded Snapshots; no Close needed: PASS ```

kayg commented

2026-10-12 15:26:53 +00:00

Author

Owner

Owner answer Q8 (2026-10-12): signed-in terminals expire after 30 days unused by default, with an option to change the period and to turn expiry off, named in user-friendly language in Settings → Account.

kayg commented

2026-10-12 15:33:12 +00:00

Author

Owner

Owner decisions 2026-10-12 (AI agents in access rules):

Chip shape (a): one chip per AI-agent identity, e.g. [✦ Claude · kayg-mac] — AI-agent mark, name, machine shown quietly inside; one "on" in the sentence.
Identification: an AI agent signs in once with the same device-code flow ("Let "Claude Code" on kayg-mac act for you?", passkey), creating its own AI-agent token bound to the owner (never more than the owner), to the issuing machine's mesh identity (useless elsewhere), and to a self-reported, renamable label (not proof). All its actions are attributed to that identity; narrowed by rules; listed with signed-in terminals; same unused-expiry. Accepted limit: commands it runs inside the owner's own already signed-in terminal without its own token cannot be told apart from the owner; MCP connections always use their own sign-in.

Owner decisions 2026-10-12 (AI agents in access rules): - Chip shape (a): one chip per AI-agent identity, e.g. [✦ Claude · kayg-mac] — AI-agent mark, name, machine shown quietly inside; one "on" in the sentence. - Identification: an AI agent signs in once with the same device-code flow ("Let \"Claude Code\" on kayg-mac act for you?", passkey), creating its own AI-agent token bound to the owner (never more than the owner), to the issuing machine's mesh identity (useless elsewhere), and to a self-reported, renamable label (not proof). All its actions are attributed to that identity; narrowed by rules; listed with signed-in terminals; same unused-expiry. Accepted limit: commands it runs inside the owner's own already signed-in terminal without its own token cannot be told apart from the owner; MCP connections always use their own sign-in.

kayg commented

2026-10-12 15:37:27 +00:00

Author

Owner

Spec v3 finished as documentation on access-rules-v3, pushed head b92e846da9. Ready for independent verification; full fast gate remains blocked by existing binary size. No product code, owner decision file, dependency, budget or deployment changed.

Evidence: docs/design/access-rules.md (owner answers Q1–Q7/L1, D253, canonical V3 grammar/JSON, exact fixture pairs, surfaces and 99-row Finding → resolution table). Three round-two reports remain byte-identical to supplied origin refs. Source diff from dcec7b2d is exactly these four documentation paths. Eight atomic commits separate reports/model/surfaces/trace and self-review corrections. The final D253 clarification preserves one hour as a preview-time default, not a hard cap.

Counts: 99 distinct source IDs = 65 round one + 34 new round two; retained S18/F-SURF-13 counted once. Severity: P0 34, P1 49, P2 16. Written resolutions: 96; explicit accepted P2 limitations: AR-13, AR-14, R2-C09; open P0/P1: 0. S18 specifies the owner-selected D166 offline boundary rather than claiming instant global removal.

New owner questions (verbatim from spec): None new.

Design probe: 33/33 grammar examples, 7/7 new sentence/body schema-subset pairs, 10000 quote/token round trips (0 failures, 19 known hostile-name classes), 10/10 structural and 7/7 delimiter negatives refused; 99/99 unique source IDs/severities match. Not a production parser/full schema validator, Unicode 16.0 conformance, resolver, authorization proof or performance evidence. Self-review used round-two soundness/coverage/surfaces checklists, all nine profiles, PROCESS §2 and shared UI taste requirements. No UI was built; no screenshots or runtime measurements are claimed.

Final-head scripts/verify fast exits 1: fmt/native fmt/CLI compile-out/clippy/native tests/cargo-deny PASS; static builds FAIL. x86_64 binary 21857264 bytes vs 16404816 maximum (5452448 over), identical to the source-base reviews. aarch64/TypeScript dispatch was skipped after Rust failure; supplemental ts_verify_fast exits 0 (compiler/unit/production build/transfer budget/oracle/differential/protocol checks, including 36 final protocol tests). Size reduction/integration work is needed outside this docs-only brief; no budget waiver. The earlier snapshot-credit failure passed the detached dev harness and the final full run, so no #118 exception was used. Interrupted attempts are recorded above and are not final evidence. Build-host timing lines below are mandatory gate output, not performance measurements.

Final-head full fast-gate output, verbatim (exit 1):

Running as unit: run-p2752219-i15333453.scope; invocation ID: 6f0c5e3e9812412d9e089fbac95fc8e6
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=301.55 p99_ms=303.03 result=PASS

==> fmt

==> VT native fmt

==> CLI plugin compile-out
disabled CLI plugin dependencies: absent from normal dependency graph
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.16s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal-d0028d263474a180)

running 24 tests
test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok
test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok
test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok
test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok
test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok
test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok
test status_tests::custom_named_server_service_is_reported_as_running ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok
test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok
test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok

test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> clippy
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.58s

==> test
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.49s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal-d549e36661370196)

running 65 tests
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok
test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok
test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test status_tests::custom_named_server_service_is_reported_as_running ... ok
test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok
test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok

test result: ok. 65 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.09s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/agent_daemon-5de2ce691037a6fb)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.10s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/agent_queues-e091edc68b27f96c)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.56s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/agent_review-d94b1e14e60e4ef2)

running 8 tests
test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 14.82s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/agent_sessions-02290b123f5f2fd1)

running 3 tests
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok
test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok
test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.54s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/idle_canary-26b2a47f3626ff86)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.13s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/remote_output-174b9538baf046d1)

running 1 test
test remote_refusal_matches_its_declared_cli_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/session_bounds_review-72c64f17fd25b658)

running 1 test
test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.98s

     Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/session_exit_events-11a4cce005fc09ec)

running 1 test
test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.94s

     Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/session_retention-2365452bec4dac67)

running 1 test
test bounded_owned_exit_reconnects_as_ended_with_status ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.64s

     Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/setup_output-0aeb77f16924cef7)

running 1 test
test setup_output_keeps_legacy_and_versioned_readers ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/shim-c81baaf26e3012d1)

running 13 tests
test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok
test unowned_normal_exit_retires_promptly_and_records_status ... ok
test detached_shell_exit_reaps_shim_within_one_second ... ok
test double_fork_survives_parent_death ... ok
test disallowed_signal_only_disconnects_peer ... ok
test replacement_connection_and_malformed_limit ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test real_shell_reconnect_resize_and_delivered_exit ... ok
test attached_backpressure_and_detached_progress ... ok
test delivered_exit_cannot_release_another_owning_window ... ok
test owned_exit_releases_promptly_on_window_close ... ok
test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.21s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/ssh_askpass-617ca478b5d79487)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.14s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/vt_credit-0a8dc350571af348)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.63s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/vt_reconnect-ecf739816bc14d42)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_agent-dc304b9d51d0941a)

running 86 tests
test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok
test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok
test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok
test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok
test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok
test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok
test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok
test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok
test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok
test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok
test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok
test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok
test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope
test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok
test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok

test result: ok. 74 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 11.06s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/transport-02d53fbe758b717f)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_mesh-25b71fd0307aac40)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/default_arrow-6d2e8df0e7b48da6)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/properties-cb03b103616f12c2)

running 14 tests
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test directional_grants_union_and_minimal_updates ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test names_versions_and_backend_status ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.30s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/rotation_time-961162d4330c2fec)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_plugin_api-c495c2150d66af78)

running 20 tests
test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok
test release_version::tests::accepts_only_worker_version_forms ... ok
test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok
test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test action::tests::registry_rejects_inconsistent_json_schemas ... ok
test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok
test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test tests::machine_actions_are_declared_without_entering_human_discovery ... ok
test tests::public_dispatch_cannot_call_a_machine_control_action ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::notifications_are_declared_json_bounded_and_drained_once ... ok
test tests::operator_presentation_cannot_follow_a_private_control_action ... ok
test tests::registry_routes_only_declared_actions ... ok

test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/routing_review-b99b0b882dabc235)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_plugin_backup-a417bdd50ad1b333)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_plugin_host_facts-4f71949982aad5d8)

running 13 tests
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::configured_memory_floor_refuses_with_current_host_counters ... ok
test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_plugin_mesh-1b760e879d6cc016)

running 25 tests
test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing.
test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok
test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok
test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok
test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok
test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok
test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok
test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok
test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok
test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok
test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok
test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok
test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok
test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok
test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok
test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok
test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok
test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok

test result: ok. 17 passed; 0 failed; 8 ignored; 0 measured; 0 filtered out; finished in 0.13s

     Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/configuration-836876ba6734f0d1)

running 4 tests
test edition_default_is_explicit_and_build_selected ... ok
test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok
test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok
test large_valid_port_policy_is_split_without_a_port_count_cap ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s

     Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/kernel-8886a63e9998e503)

running 6 tests
test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/restart_route_ownership-915aa90068a8947f)

running 1 test
test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/review_endpoint_transaction-466627b0ed41f23e)

running 1 test
test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/review_ingress_translation-bd8664555dc4f00b)

running 2 tests
test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/review_local_delivery-b93d5857cea9a210)

running 2 tests
test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/review_restart_routes-2842f5c26f6abc6e)

running 1 test
test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/review_route_inventory-0efd1dc3b9824c23)

running 2 tests
test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/review_route_scope-2cbe953ad2ece6af)

running 1 test
test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/review_shutdown_budget-cb0fcfe1b2aad42f)

running 1 test
test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/review_shutdown_restart-c5e07544297f612a)

running 3 tests
test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof.
test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.
test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.

test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/settings.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/settings-0d4e5c1ccc396650)

running 1 test
test default_switch_requires_owner_freshness_and_the_preview_revision ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/store.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/store-653d928dd28e0534)

running 5 tests
test required_server_membership_cannot_be_deleted ... ok
test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok
test absent_discovery_preserves_the_last_known_endpoint ... ok
test key_replacement_preserves_identity_and_addresses_after_restart ... ok
test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.58s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_plugin_relay-d765ce907b6d6285)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_plugin_release-d9a3a22170648e3d)

running 8 tests
test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency
test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok
test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok
test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok
test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok
test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok
test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok
test latest::tests::cancellation_joins_verification ... ok

test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.57s

     Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/review_pool-7342401812584e29)

running 1 test
test pending_channel_writers_preserve_authority_read_capacity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.66s

     Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/review_restart-433d5f6159022764)

running 2 tests
test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification
test restarted_latest_reclaims_metadata_after_process_stop ... ok

test result: ok. 1 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_plugin_remote-befabe8c66488616)

running 12 tests
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.17s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_plugin_ssh-8fc5a3d5ae8e8da5)

running 13 tests
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 12 filtered out; finished in 0.00s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 12 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/auth_order-a6672937b409eb18)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/build_removal-ea54acad90939da0)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.41s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/concurrency-84194037b61b4a88)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test component_off_retires_a_real_native_helper ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/config_isolation-7ef0e56361e7afa9)

running 2 tests
test synthetic_master_socket_is_private_at_creation ... ok
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/credentials-d8295318c2cb85c8)

running 3 tests
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/diagnostics-07214f0a23810c1c)

running 8 tests
test every_failed_step_names_the_step_and_a_next_action ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test status_mapping_preserves_authentication_and_missing_payload_classification ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/event_metadata-44d697ac35cff957)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/foreground-a7c134dfcb5c5797)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/host_trust-956578b69494d660)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/install-c9a4eb681da6c6e1)

running 30 tests
test command_failure_names_upload_join_install_and_start_separately ... ok
test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.72s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/model-8d8a118fb482cb01)

running 5 tests
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test addresses_never_become_options_or_shell_syntax ... ok
test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/payload_source.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/payload_source-2b9cf9e8f172fa9d)

running 2 tests
test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok
test verification_failure_names_step_and_stops_before_upload ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/probe_check-4c243b7c35682a6f)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/process-52eb00630d90c109)

running 5 tests
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.19s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/proxy_policy-ca5da5ebac2b936e)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/real_ssh-7e667740bdea77a4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/single_connection-824b96a985bd76a6)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/source_completeness-221723904e9d35a3)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/trust_round2-78f0ff3b67dbad9b)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_server-e66837f90a21069b)

running 368 tests
test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions
test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok
test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok
test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok
test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok
test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok
test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok
test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok
test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket has been running for over 60 seconds
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies has been running for over 60 seconds
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies has been running for over 60 seconds
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok
test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope
test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok
test release_build_tests::release_build_marker_is_explicit ... ok
test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark
test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement
test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok
test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok
test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok
test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok
test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok
test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok
test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok
test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok
test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification
test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok
test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok
test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok
test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok
test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok
test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok
test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope
test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok
test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok
test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok

test result: ok. 329 passed; 0 failed; 39 ignored; 0 measured; 0 filtered out; finished in 225.73s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/catalog_startup-7dd8be68f0697857)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/enrollment-32f61b19a7c9b610)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.18s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/mesh_parser-13fd59a4a8708f05)

running 2 tests
test review_grant_parser_rejects_unknown_nested_port_fields ... ok
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/mesh_review_plugin-1de3bc1351e8739c)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/mesh_review_policy-44ce3d3efaec58dc)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/mesh_review_role_scope-4848c1545d27cd89)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/plugin_host_review-e125600348cb05bb)

running 7 tests
test review_undeclared_topic_is_left_to_the_core ... ok
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_disable_answers_inflight_call ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/plugin_settings_review-f9f86b6508eec089)

running 3 tests
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.40s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/remote_plugin_contract-467d546d48fb6a49)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.42s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_shim-6198daaedaec1ac5)

running 87 tests
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test frame::checks::golden::every_frozen_message ... ok
test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test ring::checks::tests::wrap_and_exact_offsets ... ok
test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok

running 1 test
test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok
test locale::tests::invalid_shell_expressions_are_ignored ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test pty::child_locale_tests::spawned_login_shell_receives_selected_locale_without_other_host_variables ... ok
test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 86 filtered out; finished in 0.00s

test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 74 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 56.86s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/detach-f17510b824ed2469)

running 2 tests
test detached_child_restores_default_signals_without_changing_parent ... ok
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.55s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/mouse-0d16f77afbdea7cb)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.77s

     Running tests/process_exit_descriptor.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/process_exit_descriptor-67dfefbd2451d374)

running 2 tests
test invalid_pid_never_creates_a_descriptor ... ok
test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_backup

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_relay

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_release

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   ├── infraternal-fuzz v0.1.0
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0 (*)
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-mesh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   ├── infraternal-plugin-release v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-mesh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   ├── infraternal-fuzz v0.1.0 (*)
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-mesh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-mesh v0.1.0 (*)
         ├── infraternal-plugin-release v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-mesh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   ├── hyper v1.11.1
         │   │   ├── axum v0.8.9
         │   │   │   ├── infraternal-fuzz v0.1.0
         │   │   │   └── infraternal-server v0.1.0
         │   │   │       ├── infraternal v0.1.0
         │   │   │       └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── axum-server v0.8.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── hyper-util v0.1.21
         │   │   │   ├── axum v0.8.9 (*)
         │   │   │   ├── axum-server v0.8.0 (*)
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   │   ├── infraternal v0.1.0 (*)
         │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal v0.1.0 (*)
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-mesh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   └── infraternal-plugin-mesh v0.1.0
             │   │   │       ├── infraternal v0.1.0 (*)
             │   │   │       ├── infraternal-agent v0.1.0 (*)
             │   │   │       ├── infraternal-fuzz v0.1.0 (*)
             │   │   │       └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-backup v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   │   ├── infraternal-plugin-relay v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-release v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   ├── infraternal-plugin-release v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:197:1
    │  
197 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
198 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   ├── infraternal-fuzz v0.1.0 (*)
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-mesh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │       └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-backup v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-relay v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-release v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-mesh v0.1.0 (*)
              ├── infraternal-plugin-release v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:199:1
    │  
199 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
201 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:202:1
    │  
202 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:204:1
    │  
204 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
205 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
206 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:248:1
    │  
248 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
249 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-mesh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-backup v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-relay v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-release v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-release v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-release v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │   │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── (dev) infraternal v0.1.0 (*)
      │       ├── (dev) infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:251:1
    │  
251 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
252 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │       ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-release v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:254:1
    │  
254 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
255 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   ├── infraternal v0.1.0 (*)
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0
      │       │   └── infraternal-server v0.1.0
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── infraternal-fuzz v0.1.0 (*)
      │       ├── infraternal-fuzz v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:256:1
    │  
256 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
257 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   ├── infraternal v0.1.0 (*)
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal v0.1.0 (*)
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-fuzz v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-backup v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-relay v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-release v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   ├── infraternal-plugin-release v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   ├── infraternal-fuzz v0.1.0 (*)
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:314:1
    │  
314 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
315 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-release v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   ├── hyper v1.11.1
      │           │   │   ├── axum v0.8.9 (*)
      │           │   │   ├── axum-server v0.8.0 (*)
      │           │   │   ├── hyper-util v0.1.21
      │           │   │   │   ├── axum v0.8.9 (*)
      │           │   │   │   ├── axum-server v0.8.0 (*)
      │           │   │   │   ├── infraternal v0.1.0 (*)
      │           │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── (dev) infraternal v0.1.0 (*)
      │           ├── (dev) infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-mesh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-backup v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-relay v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-release v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
    Finished `release` profile [optimized] target(s) in 4.26s
/home/kayg/.cache/codex-scratch/access-rules-v3/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 21857264 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Supplemental TypeScript output, verbatim (exit 0):

Running as unit: run-p2814730-i15395964.scope; invocation ID: cf5c9b3c19a3478da935464e1f4014ab

==> Vendored Ghostty artifact checksums
dist/ghostty-web.js: OK
dist/ghostty-vt.wasm: OK
dist/index.d.ts: OK

==> TypeScript protocol compiler

==> Tracer compiler, precompression and bundle transfer budget
bun install v1.4.2 (744846f84)

+ @types/bun@1.3.8
+ @types/node@22.19.0
+ @types/ws@8.5.10
+ playwright@1.61.1
+ typescript@5.9.3
+ ws@8.18.3
+ @scure/bip39@2.2.0
+ geist@1.7.2

38 packages installed [220.00ms]
$ bun x tsc --project tsconfig.json
bun test v1.4.2 (744846f84)

precompress.test.ts:
(pass) text sidecars round-trip deterministically; compressed formats remain identity [28.37ms]

browser-build.test.ts:
(pass) the browser renderer has no unresolved Vite Node-file shim request [34.60ms]

src/perf-detector.test.ts:
(pass) FrameDetector > estimates the refresh from the median and snaps it [1.20ms]
(pass) FrameDetector > nothing is a drop before the rate is known [0.14ms]
(pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.25ms]
(pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.36ms]
(pass) FrameDetector > the first frame after a pause is not an interval [0.16ms]
(pass) FrameDetector > fps, p95 and window read the ring [3.80ms]
(pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [1.46ms]
(pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.18ms]

src/canvas/recency.test.ts:
(pass) touch moves an item to the front and never duplicates it [0.38ms]
(pass) repeating the front item changes nothing [0.07ms]
(pass) the list is capped, so the oldest items fall off [0.12ms]
(pass) top skips items that are no longer live, without losing them [0.11ms]
(pass) recentRows: five used windows in reverse order of use, from 54 windows [0.34ms]
(pass) recentRows: a view with three windows and no use shows them in order [0.05ms]
(pass) recentRows: used windows lead, the rest fill up to five in window order [0.11ms]

src/canvas/windows/details-facts.test.ts:
(pass) host facts become plain-language details rows [1.21ms]
(pass) unknown optional host facts stay absent instead of appearing as placeholders [0.33ms]
(pass) extended info off: the machine tab shows only the essentials, ungrouped, and there is no More section [0.45ms]
(pass) extended info on: every fact sits under System, Resources or Access [0.37ms]
(pass) the header follows the machine's own facts, not the platform the host list guessed [0.23ms]
(pass) before facts arrive the host's platform names the header [0.12ms]
(pass) a reported system with no platform mark still names the header and shows no mark [0.11ms]

src/canvas/mesh/protocol.test.ts:
(pass) the server's own list becomes nodes, tags and grants, by name [1.49ms]
(pass) without `access` (today's server) the person may view and may not edit [0.70ms]
(pass) fields the server does not send are absent, never invented [0.34ms]
(pass) anything that is not a list is refused, whole [10.75ms]
(pass) a node's own tag list and the tag table agree even when a server sends only one [0.43ms]
(pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.97ms]
(pass) answers carry the new revision, and a create the new arrow's id [3.94ms]
(pass) endpoints go out as the server writes them: a node by id, a tag by name [0.51ms]

src/canvas/mesh/layout.test.ts:
(pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [2.07ms]
(pass) the layout is deterministic and does not depend on input order [5.49ms]
(pass) no two cards overlap, and every card lies inside the graph [17.90ms]
(pass) the sheet is wider than tall, roughly 16:10 [5.85ms]
(pass) a pinned node stays where it was put and the others do not move [6.84ms]
(pass) a pin beyond the sheet grows the graph [1.26ms]
(pass) a host's other tags do not move it; a tag nobody carries still has its node [0.32ms]
(pass) 1,000 nodes lay out in a few milliseconds [23.33ms]

src/canvas/layout/stops.test.ts:
(pass) a view that fits the viewport has one stop, centred [0.51ms]
(pass) a wide view has one stop per column and the last stop ends at the right edge [0.38ms]
(pass) a view taller than the viewport is scaled down so it fits [0.08ms]
(pass) nearestStop picks the stop whose centre is closest [0.30ms]
(pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.35ms]
(pass) a small graph keeps one stop per node column [0.20ms]
(pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.21ms]
(pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.23ms]

src/canvas/layout/grid.test.ts:
(pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.64ms]
(pass) closing the new half gives the layout back exactly, in the model [1.59ms]
(pass) closing the window it came from makes the new half take its band, and the layout is one column again [1.03ms]
(pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.84ms]
(pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.72ms]
(pass) closing the window split down gives its band back to the window above and to the partner [0.35ms]
(pass) a window split down in a plain column stacks under it and moves the windows below down [0.10ms]
(pass) new window right opens a full-size column after the whole group, never inside it [0.24ms]
(pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.07ms]
(pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.08ms]
(pass) random sequences of split right, split down, new window right and close never break the grid [57.77ms]
(pass) closing every window of a group returns the view to nothing, with no problem on the way [0.38ms]
(pass) a full-width band under a group moves nothing and extends the group by one band [0.22ms]
(pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.11ms]

src/canvas/layout/geometry.test.ts:
(pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [6.64ms]
(pass) a chain of neighbours is pushed in turn [0.22ms]
(pass) snapping rounds to whole cells [4.77ms]
(pass) reach follows grants through tags and keeps the relay [0.36ms]
(pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [2.86ms]
(pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.08ms]
(pass) a desktop column is the same alone and in a strip [0.02ms]

src/canvas/sessions/live-inventory.test.ts:
(pass) a host snapshot replaces cached session rows and keeps only live shims [2.79ms]
(pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [1.97ms]
(pass) inventory remembers a remote session and refuses a cross-host attach [0.61ms]
(pass) superseded status snapshots release records for sessions this device never opened [1.71ms]
(pass) superseding a sidecar preserves status for a window opened on this device [2.58ms]
(pass) a census predating a new shell does not permanently retire its confirmed live ID [0.90ms]
(pass) a final Close before the first positive census never revives a new ID [0.15ms]
(pass) a later absence retires a new ID after its first positive census [0.14ms]
(pass) another host's census cannot clear a new shell's census fence [0.10ms]
(pass) another host's close cannot clear a new shell's census fence [0.02ms]

src/canvas/sessions/details-live.test.ts:
(pass) a refused host facts action stops its recurring timer [1.43ms]
(pass) a detected operating system supplies the live popover mark [1.43ms]

src/canvas/sessions/live.test.ts:
(pass) an enrolled host opens by UUID and splits keep that authority [1.01ms]
(pass) unknown and ambiguous labels never open an embedded shell [0.14ms]
(pass) removed hosts disappear from inventory and cannot route a new shell [0.16ms]

src/canvas/sessions/gone-review.test.ts:
(pass) selecting a known gone session keeps its final exited state [0.25ms]
(pass) a known retired status survives repeated selection and generic ended answers [0.21ms]

src/canvas/sessions/open-refusal.test.ts:
(pass) memory refusal retains the reason and current counters [1.28ms]
(pass) legacy refusals still work and malformed counters never reach the message [0.50ms]
(pass) product copy names the host and counters and never renders untrusted server text [0.85ms]
(pass) oversized refusal JSON is ignored before parsing [0.11ms]

src/canvas/model/document.test.ts:
(pass) a document holds references and layout, never content [0.44ms]
(pass) a document survives JSON and rebuilds the same columns [0.61ms]
(pass) a target that no longer exists is dropped, and an emptied column with it [0.10ms]
(pass) parseDocument rejects anything that is not a document of this format [0.32ms]
(pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.14ms]
(pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.24ms]
(pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.35ms]
(pass) a plain view is saved without spans or bands, exactly as before D212 [0.05ms]

src/canvas/addhost/real.test.ts:
(pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.28ms]
(pass) parsing the server's data > the server key needs its public key and fingerprint [0.06ms]
(pass) parsing the server's data > an install command needs a lifetime [0.04ms]
(pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [1.44ms]
(pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.26ms]
(pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [1.03ms]
(pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.22ms]
(pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.14ms]
(pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.12ms]
(pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.30ms]
(pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.41ms]

src/canvas/addhost/authority.on-demand.test.ts:
(pass) CA wrapping matches the contract's HKDF domain and separates generations [2.31ms]

src/canvas/addhost/model.test.ts:
(pass) stagesOf > a host with no event is waiting everywhere [0.38ms]
(pass) stagesOf > check before sign-in is detecting how to sign in [0.27ms]
(pass) stagesOf > the sign-in report finishes detect and starts the system check [0.26ms]
(pass) stagesOf > install, facts and connect map to install, enrol and first session [0.22ms]
(pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.32ms]
(pass) stagesOf > an unsupported host fails the system check, after sign-in [0.10ms]
(pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.13ms]
(pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.22ms]
(pass) authLabel > names the method and a trusted network provider only [0.06ms]
(pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.25ms]
(pass) guideFor > each failure kind names its fix [0.17ms]
(pass) guideFor > mesh-policy words say possible, not certain [0.03ms]
(pass) parseTarget > reads user, host and port [0.30ms]
(pass) parseTarget > refuses what cannot name a host [0.04ms]
(pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.70ms]
(pass) parseSshConfig > recognises config text [0.15ms]
(pass) parseSshConfig > a hostname that is an option is dropped [0.08ms]
(pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.22ms]
(pass) plain words > no headline carries an arrow, an id or an API noun [0.18ms]
(pass) only a completed canonical host identity becomes terminal authority [0.09ms]
(pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.06ms]
(pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.03ms]
(pass) matchListed > a name that is exactly one host's id or address names that host [0.12ms]
(pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.02ms]
(pass) matchListed > a partial name that starts several hosts names none and waits [0.02ms]
(pass) matchListed > a new name that starts no host is neither named nor waiting [0.02ms]
(pass) install diagnostics name the failed step and public host error [0.14ms]
(pass) missing payload tells the operator the architecture and expected server path [0.05ms]
(pass) an already added host says so and offers opening its existing terminal [0.03ms]
(pass) release payload verification names the architecture step and plain reason [0.02ms]

src/canvas/addhost/wizard.test.ts:
(pass) a saved-key prompt completing after close never starts an SSH attempt [0.77ms]
(pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.39ms]
(pass) ready CA begins the requested installation mode without another prompt [0.13ms]
(pass) closing during CA confirmation never starts an SSH attempt [0.42ms]
(pass) a typed root login requires explicit consent before any installation [0.44ms]

../../packages/ui/src/spring.test.ts:
(pass) a missed frame does not stretch a settled spring [0.92ms]
(pass) motion follows elapsed time across frame rates and damping regimes [1.19ms]

chunk-classes.test.ts:
(pass) the first screen is critical, the canvas product module and what only it uses are deferred [1.22ms]
(pass) a chunk that both sides use stays critical [0.20ms]
(pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.24ms]

test/recovery-ui.test.ts:
(pass) compiled recovery UI mode off obeys its URL boundary [5.73ms]
(pass) compiled recovery UI mode preview obeys its URL boundary [4.37ms]
(pass) compiled recovery UI mode 1 obeys its URL boundary [2.48ms]

test/recovery-crypto.test.ts:
(pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [18.54ms]
(pass) 100 repeated wrapping operations generate independent salts and nonces [24.21ms]

test/recovery-rotation.test.ts:
(pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [14.40ms]
(pass) abandoned word acknowledgement uploads nothing [5.18ms]
(pass) settled acknowledgement cannot upload later (dismissed) [4.41ms]
(pass) settled acknowledgement cannot upload later (no acknowledgement) [3.92ms]

test/recovery-wait.test.ts:
(pass) server remaining wait 0s is accepted through the capability policy maximum [2.56ms]
(pass) server remaining wait 86400s is accepted through the capability policy maximum [2.39ms]
(pass) server remaining wait 90000s is accepted through the capability policy maximum [1.86ms]
(pass) server remaining wait 172800s is accepted through the capability policy maximum [1.53ms]
(pass) malformed or excessive remaining wait -1 is denied [3.09ms]
(pass) malformed or excessive remaining wait 0.5 is denied [1.92ms]
(pass) malformed or excessive remaining wait 172801 is denied [1.74ms]
(pass) malformed or excessive remaining wait 9007199254740992 is denied [4.53ms]
(pass) malformed or excessive remaining wait 90000 is denied [1.70ms]

 168 pass
 0 fail
 11332 expect() calls
Ran 168 tests across 26 files. [550.00ms]
$ bun run build.ts
built chunk-z93cxfvm.js, chunk-bcrmm064.js, chunk-3g02wn4t.js, chunk-mt68a709.js, chunk-p02knrz5.js, chunk-p4pq9b17.js, chunk-a895a34j.js, chunk-gtm292qm.js, chunk-0w8xy5ft.js, chunk-51dq0s1n.js, chunk-qxnrs5kc.js, chunk-5s6a3m50.js, main.js, chunk-969atqet.js, chunk-15nnyy73.js, chunk-vxv25w33.js, chunk-zhbj1mhv.js, chunk-4pbz30v1.js, chunk-c1dgfc87.js, chunk-6frk5z79.js, chunk-yr0r38s4.js, chunk-8t7pe4ht.js, chunk-c0chx16j.js, chunk-axbkkqp1.js, chunk-4ns5vcby.js, chunk-q4gt3s7z.js, chunk-x15a6xbf.js, chunk-18kt8b84.js, chunk-gc6v6xz9.js, chunk-pmhd4d2p.js, chunk-b458sm6g.js, chunk-73kzg2cv.js, chunk-6kved75a.js, chunk-em2ey70s.js, chunk-dbtymfed.js, chunk-cj644srx.js, chunk-exmgk5pa.js, chunk-q56hm25z.js, chunk-9xd3g65e.js, chunk-28rbcdd5.js, chunk-61xwpgvs.js, chunk-q48rkm2h.js, chunk-433eyr4g.js, chunk-rwz8j328.js, chunk-6zgsyx5n.js, chunk-nkck35a0.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-qpmjtb9v.js, chunk-f2r0hhqc.js, chunk-2bcfkj59.js, chunk-1gmd2m5q.js, chunk-8vkxkehy.js
onDemand chunk-q4gt3s7z.js: identity=6198 gzip=2792 brotli=2519 bytes
critical chunk-p4pq9b17.js: identity=707 gzip=368 brotli=306 bytes
critical chunk-8t7pe4ht.js: identity=1104 gzip=666 brotli=604 bytes
critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-q56hm25z.js: identity=10693 gzip=4125 brotli=3760 bytes
onDemand chunk-18kt8b84.js: identity=4575 gzip=2013 brotli=1783 bytes
critical chunk-1gmd2m5q.js: identity=199 gzip=162 brotli=136 bytes
onDemand chunk-p02knrz5.js: identity=3891 gzip=1735 brotli=1516 bytes
onDemand chunk-rwz8j328.js: identity=6773 gzip=3176 brotli=2886 bytes
critical chunk-4pbz30v1.js: identity=17627 gzip=6253 brotli=5574 bytes
onDemand chunk-2bcfkj59.js: identity=1063 gzip=653 brotli=521 bytes
critical chunk-c1dgfc87.js: identity=590 gzip=327 brotli=319 bytes
onDemand chunk-dbtymfed.js: identity=4640 gzip=1932 brotli=1703 bytes
critical chunk-zhbj1mhv.js: identity=15859 gzip=6182 brotli=5484 bytes
onDemand chunk-0w8xy5ft.js: identity=2420 gzip=1199 brotli=1077 bytes
onDemand chunk-nkck35a0.js: identity=2462 gzip=1107 brotli=937 bytes
critical chunk-4ns5vcby.js: identity=707945 gzip=204703 brotli=165886 bytes
critical faulty-terminal.worker.js: identity=1086 gzip=559 brotli=480 bytes
critical backdrop.worker.js: identity=243 gzip=212 brotli=165 bytes
onDemand chunk-6kved75a.js: identity=11529 gzip=4657 brotli=4255 bytes
onDemand chunk-6zgsyx5n.js: identity=31922 gzip=12263 brotli=11046 bytes
critical chunk-qpmjtb9v.js: identity=9810 gzip=4016 brotli=3459 bytes
onDemand chunk-5s6a3m50.js: identity=2108 gzip=1037 brotli=869 bytes
critical chunk-a895a34j.js: identity=88 gzip=88 brotli=74 bytes
critical chunk-vxv25w33.js: identity=5443 gzip=2605 brotli=2380 bytes
critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes
critical chunk-bcrmm064.js: identity=4499 gzip=1856 brotli=1635 bytes
onDemand chunk-gtm292qm.js: identity=228 gzip=178 brotli=165 bytes
onDemand chunk-b458sm6g.js: identity=1170 gzip=708 brotli=590 bytes
onDemand chunk-c0chx16j.js: identity=1026 gzip=624 brotli=498 bytes
critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes
critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes
critical chunk-6frk5z79.js: identity=2519 gzip=1008 brotli=876 bytes
deferred chunk-pmhd4d2p.js: identity=97656 gzip=33165 brotli=29329 bytes
critical chunk-8vkxkehy.js: identity=42395 gzip=14486 brotli=12983 bytes
onDemand chunk-15nnyy73.js: identity=2557 gzip=1180 brotli=1009 bytes
deferred chunk-mt68a709.js: identity=43000 gzip=16583 brotli=14645 bytes
onDemand chunk-qxnrs5kc.js: identity=6265 gzip=2107 brotli=1872 bytes
critical chunk-yr0r38s4.js: identity=386 gzip=238 brotli=196 bytes
onDemand chunk-3g02wn4t.js: identity=5784 gzip=2189 brotli=1938 bytes
onDemand chunk-gc6v6xz9.js: identity=1616 gzip=866 brotli=739 bytes
onDemand chunk-73kzg2cv.js: identity=540 gzip=352 brotli=313 bytes
onDemand chunk-exmgk5pa.js: identity=13384 gzip=5029 brotli=4503 bytes
onDemand chunk-cj644srx.js: identity=7662 gzip=3397 brotli=2977 bytes
critical main.js: identity=111029 gzip=40360 brotli=34993 bytes
critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes
onDemand chunk-q48rkm2h.js: identity=48283 gzip=15179 brotli=13472 bytes
critical chunk-433eyr4g.js: identity=162 gzip=150 brotli=127 bytes
onDemand chunk-x15a6xbf.js: identity=2824 gzip=1387 brotli=1196 bytes
onDemand chunk-51dq0s1n.js: identity=191 gzip=170 brotli=130 bytes
critical chunk-z93cxfvm.js: identity=21235 gzip=6857 brotli=6128 bytes
onDemand chunk-em2ey70s.js: identity=5359 gzip=2578 brotli=2303 bytes
critical chunk-969atqet.js: identity=8377 gzip=3575 brotli=3180 bytes
JavaScript transfer, critical: identity=951648 gzip=294997/307200 brotli=245301/256000 bytes
JavaScript transfer, deferred: identity=140656 gzip=49748/51200 brotli=43974/45056 bytes
JavaScript transfer, onDemand: identity=185163 gzip=72633/20480 brotli=64577/18432 bytes
JavaScript transfer, onDemand largest chunk chunk-q48rkm2h.js: gzip=15179/20480 brotli=13472/18432 bytes (class total gzip=72633 brotli=64577, not limited)
fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes
fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes
fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes
fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes
fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes
fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes
fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes
fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes
fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes
fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes
fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes
fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes
fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes
fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes
fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes
fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes
fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes
fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes
fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes
fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes
Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes

==> Rust stream oracle (for the differential test)

==> TypeScript protocol tests
bun test v1.4.2 (744846f84)

src/mesh-review-revocation.test.ts:
(pass) review forbidden event cancels pending snapshot publication [3.18ms]
(pass) subscription forbidden ends delivery before a late refresh rejection [1.84ms]
(pass) subscription not found ends delivery before a late refresh rejection [4.79ms]
(pass) subscription invalid input ends delivery before a late refresh rejection [1.27ms]
(pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.20ms]
(pass) synchronous subscription refusal releases the transport exactly once [0.23ms]

src/codec.test.ts:
(pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [15.24ms]
(pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.39ms]
(pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.47ms]
(pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.28ms]
(pass) split mux header preserves trailing Close [0.34ms]

src/mesh-review-paged-error.test.ts:
(pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [3.10ms]
(pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.25ms]
(pass) a newer paged event owns publication before an earlier refresh resumes [2.79ms]

src/mesh-review-refresh.test.ts:
(pass) review superseded refresh failure cannot replace authoritative resync [1.53ms]
(pass) superseded failure preserves a newer pending refresh [2.92ms]

src/stream.test.ts:
stream differential: 134 streams, 11439 schedules, zero divergences
(pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [3346.19ms]
(pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [10.25ms]

src/mesh.test.ts:
(pass) Mesh actions map to their typed action IDs and JSON inputs [2.17ms]
(pass) Mesh watch coalesces change bursts and never publishes an older revision [4.21ms]
(pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.15ms]

src/mesh-review-continuation.test.ts:
(pass) review continuation stops after stop [1.55ms]
(pass) review continuation stops after forbidden [1.25ms]
(pass) review continuation stops after superseded [1.22ms]

src/mesh-pagination.test.ts:
(pass) list assembles bounded pages using the same filter [0.27ms]
(pass) a changed revision discards earlier pages before assembling its restart [0.15ms]
(pass) malformed continuation is refused: {"revision":1,"offset":0} [0.20ms]
(pass) malformed continuation is refused: {"revision":2,"offset":1} [0.02ms]
(pass) malformed continuation is refused: {"revision":1,"offset":2}
(pass) watch never publishes a partial page; withdrawn=false [1.46ms]
(pass) watch never publishes a partial page; withdrawn=true [1.23ms]
(pass) a superseding equal-revision resync wins over pending page assembly [1.60ms]

src/mesh-review-resync.test.ts:
(pass) review watch applies same-revision authoritative resync [0.21ms]
(pass) authoritative resync keeps priority over an equal-revision pending list [1.46ms]

src/mesh-vectors.test.ts:
(pass) every shared Mesh action vector passes through the typed client unchanged [1.73ms]
(pass) shared Mesh event vectors drive the typed watch adapter [5.82ms]

 36 pass
 0 fail
 34462 expect() calls
Ran 36 tests across 10 files. [3.45s]

Spec v3 finished as documentation on access-rules-v3, pushed head b92e846da90ec56b7f403b55f514a4755b211107. Ready for independent verification; full fast gate remains blocked by existing binary size. No product code, owner decision file, dependency, budget or deployment changed. Evidence: docs/design/access-rules.md (owner answers Q1–Q7/L1, D253, canonical V3 grammar/JSON, exact fixture pairs, surfaces and 99-row Finding → resolution table). Three round-two reports remain byte-identical to supplied origin refs. Source diff from dcec7b2d is exactly these four documentation paths. Eight atomic commits separate reports/model/surfaces/trace and self-review corrections. The final D253 clarification preserves one hour as a preview-time default, not a hard cap. Counts: 99 distinct source IDs = 65 round one + 34 new round two; retained S18/F-SURF-13 counted once. Severity: P0 34, P1 49, P2 16. Written resolutions: 96; explicit accepted P2 limitations: AR-13, AR-14, R2-C09; open P0/P1: 0. S18 specifies the owner-selected D166 offline boundary rather than claiming instant global removal. New owner questions (verbatim from spec): None new. Design probe: 33/33 grammar examples, 7/7 new sentence/body schema-subset pairs, 10000 quote/token round trips (0 failures, 19 known hostile-name classes), 10/10 structural and 7/7 delimiter negatives refused; 99/99 unique source IDs/severities match. Not a production parser/full schema validator, Unicode 16.0 conformance, resolver, authorization proof or performance evidence. Self-review used round-two soundness/coverage/surfaces checklists, all nine profiles, PROCESS §2 and shared UI taste requirements. No UI was built; no screenshots or runtime measurements are claimed. Final-head scripts/verify fast exits 1: fmt/native fmt/CLI compile-out/clippy/native tests/cargo-deny PASS; static builds FAIL. x86_64 binary 21857264 bytes vs 16404816 maximum (5452448 over), identical to the source-base reviews. aarch64/TypeScript dispatch was skipped after Rust failure; supplemental ts_verify_fast exits 0 (compiler/unit/production build/transfer budget/oracle/differential/protocol checks, including 36 final protocol tests). Size reduction/integration work is needed outside this docs-only brief; no budget waiver. The earlier snapshot-credit failure passed the detached dev harness and the final full run, so no #118 exception was used. Interrupted attempts are recorded above and are not final evidence. Build-host timing lines below are mandatory gate output, not performance measurements. Final-head full fast-gate output, verbatim (exit 1): ```text Running as unit: run-p2752219-i15333453.scope; invocation ID: 6f0c5e3e9812412d9e089fbac95fc8e6 METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=301.55 p99_ms=303.03 result=PASS ==> fmt ==> VT native fmt ==> CLI plugin compile-out disabled CLI plugin dependencies: absent from normal dependency graph Finished `test` profile [unoptimized + debuginfo] target(s) in 0.16s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal-d0028d263474a180) running 24 tests test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok test status_tests::custom_named_server_service_is_reported_as_running ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> clippy Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.58s ==> test Finished `test` profile [unoptimized + debuginfo] target(s) in 0.49s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal-d549e36661370196) running 65 tests test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test status_tests::custom_named_server_service_is_reported_as_running ... ok test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test result: ok. 65 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.09s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/agent_daemon-5de2ce691037a6fb) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.10s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/agent_queues-e091edc68b27f96c) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.56s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/agent_review-d94b1e14e60e4ef2) running 8 tests test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 14.82s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/agent_sessions-02290b123f5f2fd1) running 3 tests test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.54s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/idle_canary-26b2a47f3626ff86) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.13s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/remote_output-174b9538baf046d1) running 1 test test remote_refusal_matches_its_declared_cli_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/session_bounds_review-72c64f17fd25b658) running 1 test test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.98s Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/session_exit_events-11a4cce005fc09ec) running 1 test test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.94s Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/session_retention-2365452bec4dac67) running 1 test test bounded_owned_exit_reconnects_as_ended_with_status ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.64s Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/setup_output-0aeb77f16924cef7) running 1 test test setup_output_keeps_legacy_and_versioned_readers ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/shim-c81baaf26e3012d1) running 13 tests test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok test unowned_normal_exit_retires_promptly_and_records_status ... ok test detached_shell_exit_reaps_shim_within_one_second ... ok test double_fork_survives_parent_death ... ok test disallowed_signal_only_disconnects_peer ... ok test replacement_connection_and_malformed_limit ... ok active test user_scope_survives_parent_unit_stop ... ok test real_shell_reconnect_resize_and_delivered_exit ... ok test attached_backpressure_and_detached_progress ... ok test delivered_exit_cannot_release_another_owning_window ... ok test owned_exit_releases_promptly_on_window_close ... ok test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.21s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/ssh_askpass-617ca478b5d79487) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.14s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/vt_credit-0a8dc350571af348) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.63s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/vt_reconnect-ecf739816bc14d42) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_agent-dc304b9d51d0941a) running 86 tests test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000 test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok test result: ok. 74 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 11.06s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/transport-02d53fbe758b717f) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_mesh-25b71fd0307aac40) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/default_arrow-6d2e8df0e7b48da6) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/properties-cb03b103616f12c2) running 14 tests test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test directional_grants_union_and_minimal_updates ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test names_versions_and_backend_status ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test addresses_are_unique_stable_and_not_recycled ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.30s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/rotation_time-961162d4330c2fec) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_plugin_api-c495c2150d66af78) running 20 tests test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok test release_version::tests::accepts_only_worker_version_forms ... ok test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok test component_tests::component_declarations_cannot_create_servers ... ok test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test action::tests::registry_rejects_inconsistent_json_schemas ... ok test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test tests::machine_actions_are_declared_without_entering_human_discovery ... ok test tests::public_dispatch_cannot_call_a_machine_control_action ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::notifications_are_declared_json_bounded_and_drained_once ... ok test tests::operator_presentation_cannot_follow_a_private_control_action ... ok test tests::registry_routes_only_declared_actions ... ok test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/routing_review-b99b0b882dabc235) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_plugin_backup-a417bdd50ad1b333) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_plugin_host_facts-4f71949982aad5d8) running 13 tests test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::configured_memory_floor_refuses_with_current_host_counters ... ok test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_plugin_mesh-1b760e879d6cc016) running 25 tests test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing. test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok test result: ok. 17 passed; 0 failed; 8 ignored; 0 measured; 0 filtered out; finished in 0.13s Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/configuration-836876ba6734f0d1) running 4 tests test edition_default_is_explicit_and_build_selected ... ok test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok test large_valid_port_policy_is_split_without_a_port_count_cap ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/kernel-8886a63e9998e503) running 6 tests test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/restart_route_ownership-915aa90068a8947f) running 1 test test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/review_endpoint_transaction-466627b0ed41f23e) running 1 test test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/review_ingress_translation-bd8664555dc4f00b) running 2 tests test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/review_local_delivery-b93d5857cea9a210) running 2 tests test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/review_restart_routes-2842f5c26f6abc6e) running 1 test test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/review_route_inventory-0efd1dc3b9824c23) running 2 tests test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/review_route_scope-2cbe953ad2ece6af) running 1 test test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/review_shutdown_budget-cb0fcfe1b2aad42f) running 1 test test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/review_shutdown_restart-c5e07544297f612a) running 3 tests test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof. test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/settings.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/settings-0d4e5c1ccc396650) running 1 test test default_switch_requires_owner_freshness_and_the_preview_revision ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/store.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/store-653d928dd28e0534) running 5 tests test required_server_membership_cannot_be_deleted ... ok test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok test absent_discovery_preserves_the_last_known_endpoint ... ok test key_replacement_preserves_identity_and_addresses_after_restart ... ok test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.58s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_plugin_relay-d765ce907b6d6285) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_plugin_release-d9a3a22170648e3d) running 8 tests test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok test latest::tests::cancellation_joins_verification ... ok test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.57s Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/review_pool-7342401812584e29) running 1 test test pending_channel_writers_preserve_authority_read_capacity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.66s Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/review_restart-433d5f6159022764) running 2 tests test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification test restarted_latest_reclaims_metadata_after_process_stop ... ok test result: ok. 1 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.06s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_plugin_remote-befabe8c66488616) running 12 tests test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.17s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_plugin_ssh-8fc5a3d5ae8e8da5) running 13 tests test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 12 filtered out; finished in 0.00s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 12 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/auth_order-a6672937b409eb18) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/build_removal-ea54acad90939da0) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.41s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/concurrency-84194037b61b4a88) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test component_off_retires_a_real_native_helper ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/config_isolation-7ef0e56361e7afa9) running 2 tests test synthetic_master_socket_is_private_at_creation ... ok test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/credentials-d8295318c2cb85c8) running 3 tests test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/diagnostics-07214f0a23810c1c) running 8 tests test every_failed_step_names_the_step_and_a_next_action ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test status_mapping_preserves_authentication_and_missing_payload_classification ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/event_metadata-44d697ac35cff957) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/foreground-a7c134dfcb5c5797) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/host_trust-956578b69494d660) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/install-c9a4eb681da6c6e1) running 30 tests test command_failure_names_upload_join_install_and_start_separately ... ok test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test refused_previous_service_stop_only_removes_staging ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.72s Running tests/model.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/model-8d8a118fb482cb01) running 5 tests test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test addresses_never_become_options_or_shell_syntax ... ok test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/payload_source.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/payload_source-2b9cf9e8f172fa9d) running 2 tests test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok test verification_failure_names_step_and_stops_before_upload ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/probe_check-4c243b7c35682a6f) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/process.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/process-52eb00630d90c109) running 5 tests test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.19s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/proxy_policy-ca5da5ebac2b936e) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/real_ssh-7e667740bdea77a4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/single_connection-824b96a985bd76a6) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/source_completeness-221723904e9d35a3) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/trust_round2-78f0ff3b67dbad9b) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_server-e66837f90a21069b) running 368 tests test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket has been running for over 60 seconds test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies has been running for over 60 seconds test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies has been running for over 60 seconds test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok test release_build_tests::release_build_marker_is_explicit ... ok test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test result: ok. 329 passed; 0 failed; 39 ignored; 0 measured; 0 filtered out; finished in 225.73s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/catalog_startup-7dd8be68f0697857) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/enrollment-32f61b19a7c9b610) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test concurrent_redemption_has_one_winner_and_one_certificate ... ok test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.18s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/mesh_parser-13fd59a4a8708f05) running 2 tests test review_grant_parser_rejects_unknown_nested_port_fields ... ok test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/mesh_review_plugin-1de3bc1351e8739c) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/mesh_review_policy-44ce3d3efaec58dc) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/mesh_review_role_scope-4848c1545d27cd89) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/plugin_host_review-e125600348cb05bb) running 7 tests test review_undeclared_topic_is_left_to_the_core ... ok test review_core_topic_remains_core_owned_even_when_declared ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_disable_answers_inflight_call ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/plugin_settings_review-f9f86b6508eec089) running 3 tests test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.40s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/remote_plugin_contract-467d546d48fb6a49) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.42s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/infraternal_shim-6198daaedaec1ac5) running 87 tests test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test frame::checks::golden::every_frozen_message ... ok test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test ring::checks::tests::wrap_and_exact_offsets ... ok test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok running 1 test test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok test locale::tests::invalid_shell_expressions_are_ignored ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test pty::child_locale_tests::spawned_login_shell_receives_selected_locale_without_other_host_variables ... ok test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 86 filtered out; finished in 0.00s test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 74 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 56.86s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/detach-f17510b824ed2469) running 2 tests test detached_child_restores_default_signals_without_changing_parent ... ok test closed_standard_descriptors_become_dev_null ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.55s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/mouse-0d16f77afbdea7cb) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.77s Running tests/process_exit_descriptor.rs (/home/kayg/.cache/codex-scratch/access-rules-v3/target/debug/deps/process_exit_descriptor-67dfefbd2451d374) running 2 tests test invalid_pid_never_creates_a_descriptor ... ok test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_backup running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_relay running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_release running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ ├── hyper v1.11.1 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:197:1 │ 197 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 198 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:199:1 │ 199 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 201 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:202:1 │ 202 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:204:1 │ 204 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 205 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 206 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:248:1 │ 248 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 249 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:251:1 │ 251 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 252 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:254:1 │ 254 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 255 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:256:1 │ 256 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 257 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v3/Cargo.lock:314:1 │ 314 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 315 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Finished `release` profile [optimized] target(s) in 4.26s /home/kayg/.cache/codex-scratch/access-rules-v3/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 21857264 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ``` Supplemental TypeScript output, verbatim (exit 0): ```text Running as unit: run-p2814730-i15395964.scope; invocation ID: cf5c9b3c19a3478da935464e1f4014ab ==> Vendored Ghostty artifact checksums dist/ghostty-web.js: OK dist/ghostty-vt.wasm: OK dist/index.d.ts: OK ==> TypeScript protocol compiler ==> Tracer compiler, precompression and bundle transfer budget bun install v1.4.2 (744846f84) + @types/bun@1.3.8 + @types/node@22.19.0 + @types/ws@8.5.10 + playwright@1.61.1 + typescript@5.9.3 + ws@8.18.3 + @scure/bip39@2.2.0 + geist@1.7.2 38 packages installed [220.00ms] $ bun x tsc --project tsconfig.json bun test v1.4.2 (744846f84) precompress.test.ts: (pass) text sidecars round-trip deterministically; compressed formats remain identity [28.37ms] browser-build.test.ts: (pass) the browser renderer has no unresolved Vite Node-file shim request [34.60ms] src/perf-detector.test.ts: (pass) FrameDetector > estimates the refresh from the median and snaps it [1.20ms] (pass) FrameDetector > nothing is a drop before the rate is known [0.14ms] (pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.25ms] (pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.36ms] (pass) FrameDetector > the first frame after a pause is not an interval [0.16ms] (pass) FrameDetector > fps, p95 and window read the ring [3.80ms] (pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [1.46ms] (pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.18ms] src/canvas/recency.test.ts: (pass) touch moves an item to the front and never duplicates it [0.38ms] (pass) repeating the front item changes nothing [0.07ms] (pass) the list is capped, so the oldest items fall off [0.12ms] (pass) top skips items that are no longer live, without losing them [0.11ms] (pass) recentRows: five used windows in reverse order of use, from 54 windows [0.34ms] (pass) recentRows: a view with three windows and no use shows them in order [0.05ms] (pass) recentRows: used windows lead, the rest fill up to five in window order [0.11ms] src/canvas/windows/details-facts.test.ts: (pass) host facts become plain-language details rows [1.21ms] (pass) unknown optional host facts stay absent instead of appearing as placeholders [0.33ms] (pass) extended info off: the machine tab shows only the essentials, ungrouped, and there is no More section [0.45ms] (pass) extended info on: every fact sits under System, Resources or Access [0.37ms] (pass) the header follows the machine's own facts, not the platform the host list guessed [0.23ms] (pass) before facts arrive the host's platform names the header [0.12ms] (pass) a reported system with no platform mark still names the header and shows no mark [0.11ms] src/canvas/mesh/protocol.test.ts: (pass) the server's own list becomes nodes, tags and grants, by name [1.49ms] (pass) without `access` (today's server) the person may view and may not edit [0.70ms] (pass) fields the server does not send are absent, never invented [0.34ms] (pass) anything that is not a list is refused, whole [10.75ms] (pass) a node's own tag list and the tag table agree even when a server sends only one [0.43ms] (pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.97ms] (pass) answers carry the new revision, and a create the new arrow's id [3.94ms] (pass) endpoints go out as the server writes them: a node by id, a tag by name [0.51ms] src/canvas/mesh/layout.test.ts: (pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [2.07ms] (pass) the layout is deterministic and does not depend on input order [5.49ms] (pass) no two cards overlap, and every card lies inside the graph [17.90ms] (pass) the sheet is wider than tall, roughly 16:10 [5.85ms] (pass) a pinned node stays where it was put and the others do not move [6.84ms] (pass) a pin beyond the sheet grows the graph [1.26ms] (pass) a host's other tags do not move it; a tag nobody carries still has its node [0.32ms] (pass) 1,000 nodes lay out in a few milliseconds [23.33ms] src/canvas/layout/stops.test.ts: (pass) a view that fits the viewport has one stop, centred [0.51ms] (pass) a wide view has one stop per column and the last stop ends at the right edge [0.38ms] (pass) a view taller than the viewport is scaled down so it fits [0.08ms] (pass) nearestStop picks the stop whose centre is closest [0.30ms] (pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.35ms] (pass) a small graph keeps one stop per node column [0.20ms] (pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.21ms] (pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.23ms] src/canvas/layout/grid.test.ts: (pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.64ms] (pass) closing the new half gives the layout back exactly, in the model [1.59ms] (pass) closing the window it came from makes the new half take its band, and the layout is one column again [1.03ms] (pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.84ms] (pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.72ms] (pass) closing the window split down gives its band back to the window above and to the partner [0.35ms] (pass) a window split down in a plain column stacks under it and moves the windows below down [0.10ms] (pass) new window right opens a full-size column after the whole group, never inside it [0.24ms] (pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.07ms] (pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.08ms] (pass) random sequences of split right, split down, new window right and close never break the grid [57.77ms] (pass) closing every window of a group returns the view to nothing, with no problem on the way [0.38ms] (pass) a full-width band under a group moves nothing and extends the group by one band [0.22ms] (pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.11ms] src/canvas/layout/geometry.test.ts: (pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [6.64ms] (pass) a chain of neighbours is pushed in turn [0.22ms] (pass) snapping rounds to whole cells [4.77ms] (pass) reach follows grants through tags and keeps the relay [0.36ms] (pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [2.86ms] (pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.08ms] (pass) a desktop column is the same alone and in a strip [0.02ms] src/canvas/sessions/live-inventory.test.ts: (pass) a host snapshot replaces cached session rows and keeps only live shims [2.79ms] (pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [1.97ms] (pass) inventory remembers a remote session and refuses a cross-host attach [0.61ms] (pass) superseded status snapshots release records for sessions this device never opened [1.71ms] (pass) superseding a sidecar preserves status for a window opened on this device [2.58ms] (pass) a census predating a new shell does not permanently retire its confirmed live ID [0.90ms] (pass) a final Close before the first positive census never revives a new ID [0.15ms] (pass) a later absence retires a new ID after its first positive census [0.14ms] (pass) another host's census cannot clear a new shell's census fence [0.10ms] (pass) another host's close cannot clear a new shell's census fence [0.02ms] src/canvas/sessions/details-live.test.ts: (pass) a refused host facts action stops its recurring timer [1.43ms] (pass) a detected operating system supplies the live popover mark [1.43ms] src/canvas/sessions/live.test.ts: (pass) an enrolled host opens by UUID and splits keep that authority [1.01ms] (pass) unknown and ambiguous labels never open an embedded shell [0.14ms] (pass) removed hosts disappear from inventory and cannot route a new shell [0.16ms] src/canvas/sessions/gone-review.test.ts: (pass) selecting a known gone session keeps its final exited state [0.25ms] (pass) a known retired status survives repeated selection and generic ended answers [0.21ms] src/canvas/sessions/open-refusal.test.ts: (pass) memory refusal retains the reason and current counters [1.28ms] (pass) legacy refusals still work and malformed counters never reach the message [0.50ms] (pass) product copy names the host and counters and never renders untrusted server text [0.85ms] (pass) oversized refusal JSON is ignored before parsing [0.11ms] src/canvas/model/document.test.ts: (pass) a document holds references and layout, never content [0.44ms] (pass) a document survives JSON and rebuilds the same columns [0.61ms] (pass) a target that no longer exists is dropped, and an emptied column with it [0.10ms] (pass) parseDocument rejects anything that is not a document of this format [0.32ms] (pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.14ms] (pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.24ms] (pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.35ms] (pass) a plain view is saved without spans or bands, exactly as before D212 [0.05ms] src/canvas/addhost/real.test.ts: (pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.28ms] (pass) parsing the server's data > the server key needs its public key and fingerprint [0.06ms] (pass) parsing the server's data > an install command needs a lifetime [0.04ms] (pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [1.44ms] (pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.26ms] (pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [1.03ms] (pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.22ms] (pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.14ms] (pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.12ms] (pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.30ms] (pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.41ms] src/canvas/addhost/authority.on-demand.test.ts: (pass) CA wrapping matches the contract's HKDF domain and separates generations [2.31ms] src/canvas/addhost/model.test.ts: (pass) stagesOf > a host with no event is waiting everywhere [0.38ms] (pass) stagesOf > check before sign-in is detecting how to sign in [0.27ms] (pass) stagesOf > the sign-in report finishes detect and starts the system check [0.26ms] (pass) stagesOf > install, facts and connect map to install, enrol and first session [0.22ms] (pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.32ms] (pass) stagesOf > an unsupported host fails the system check, after sign-in [0.10ms] (pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.13ms] (pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.22ms] (pass) authLabel > names the method and a trusted network provider only [0.06ms] (pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.25ms] (pass) guideFor > each failure kind names its fix [0.17ms] (pass) guideFor > mesh-policy words say possible, not certain [0.03ms] (pass) parseTarget > reads user, host and port [0.30ms] (pass) parseTarget > refuses what cannot name a host [0.04ms] (pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.70ms] (pass) parseSshConfig > recognises config text [0.15ms] (pass) parseSshConfig > a hostname that is an option is dropped [0.08ms] (pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.22ms] (pass) plain words > no headline carries an arrow, an id or an API noun [0.18ms] (pass) only a completed canonical host identity becomes terminal authority [0.09ms] (pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.06ms] (pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.03ms] (pass) matchListed > a name that is exactly one host's id or address names that host [0.12ms] (pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.02ms] (pass) matchListed > a partial name that starts several hosts names none and waits [0.02ms] (pass) matchListed > a new name that starts no host is neither named nor waiting [0.02ms] (pass) install diagnostics name the failed step and public host error [0.14ms] (pass) missing payload tells the operator the architecture and expected server path [0.05ms] (pass) an already added host says so and offers opening its existing terminal [0.03ms] (pass) release payload verification names the architecture step and plain reason [0.02ms] src/canvas/addhost/wizard.test.ts: (pass) a saved-key prompt completing after close never starts an SSH attempt [0.77ms] (pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.39ms] (pass) ready CA begins the requested installation mode without another prompt [0.13ms] (pass) closing during CA confirmation never starts an SSH attempt [0.42ms] (pass) a typed root login requires explicit consent before any installation [0.44ms] ../../packages/ui/src/spring.test.ts: (pass) a missed frame does not stretch a settled spring [0.92ms] (pass) motion follows elapsed time across frame rates and damping regimes [1.19ms] chunk-classes.test.ts: (pass) the first screen is critical, the canvas product module and what only it uses are deferred [1.22ms] (pass) a chunk that both sides use stays critical [0.20ms] (pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.24ms] test/recovery-ui.test.ts: (pass) compiled recovery UI mode off obeys its URL boundary [5.73ms] (pass) compiled recovery UI mode preview obeys its URL boundary [4.37ms] (pass) compiled recovery UI mode 1 obeys its URL boundary [2.48ms] test/recovery-crypto.test.ts: (pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [18.54ms] (pass) 100 repeated wrapping operations generate independent salts and nonces [24.21ms] test/recovery-rotation.test.ts: (pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [14.40ms] (pass) abandoned word acknowledgement uploads nothing [5.18ms] (pass) settled acknowledgement cannot upload later (dismissed) [4.41ms] (pass) settled acknowledgement cannot upload later (no acknowledgement) [3.92ms] test/recovery-wait.test.ts: (pass) server remaining wait 0s is accepted through the capability policy maximum [2.56ms] (pass) server remaining wait 86400s is accepted through the capability policy maximum [2.39ms] (pass) server remaining wait 90000s is accepted through the capability policy maximum [1.86ms] (pass) server remaining wait 172800s is accepted through the capability policy maximum [1.53ms] (pass) malformed or excessive remaining wait -1 is denied [3.09ms] (pass) malformed or excessive remaining wait 0.5 is denied [1.92ms] (pass) malformed or excessive remaining wait 172801 is denied [1.74ms] (pass) malformed or excessive remaining wait 9007199254740992 is denied [4.53ms] (pass) malformed or excessive remaining wait 90000 is denied [1.70ms] 168 pass 0 fail 11332 expect() calls Ran 168 tests across 26 files. [550.00ms] $ bun run build.ts built chunk-z93cxfvm.js, chunk-bcrmm064.js, chunk-3g02wn4t.js, chunk-mt68a709.js, chunk-p02knrz5.js, chunk-p4pq9b17.js, chunk-a895a34j.js, chunk-gtm292qm.js, chunk-0w8xy5ft.js, chunk-51dq0s1n.js, chunk-qxnrs5kc.js, chunk-5s6a3m50.js, main.js, chunk-969atqet.js, chunk-15nnyy73.js, chunk-vxv25w33.js, chunk-zhbj1mhv.js, chunk-4pbz30v1.js, chunk-c1dgfc87.js, chunk-6frk5z79.js, chunk-yr0r38s4.js, chunk-8t7pe4ht.js, chunk-c0chx16j.js, chunk-axbkkqp1.js, chunk-4ns5vcby.js, chunk-q4gt3s7z.js, chunk-x15a6xbf.js, chunk-18kt8b84.js, chunk-gc6v6xz9.js, chunk-pmhd4d2p.js, chunk-b458sm6g.js, chunk-73kzg2cv.js, chunk-6kved75a.js, chunk-em2ey70s.js, chunk-dbtymfed.js, chunk-cj644srx.js, chunk-exmgk5pa.js, chunk-q56hm25z.js, chunk-9xd3g65e.js, chunk-28rbcdd5.js, chunk-61xwpgvs.js, chunk-q48rkm2h.js, chunk-433eyr4g.js, chunk-rwz8j328.js, chunk-6zgsyx5n.js, chunk-nkck35a0.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-qpmjtb9v.js, chunk-f2r0hhqc.js, chunk-2bcfkj59.js, chunk-1gmd2m5q.js, chunk-8vkxkehy.js onDemand chunk-q4gt3s7z.js: identity=6198 gzip=2792 brotli=2519 bytes critical chunk-p4pq9b17.js: identity=707 gzip=368 brotli=306 bytes critical chunk-8t7pe4ht.js: identity=1104 gzip=666 brotli=604 bytes critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-q56hm25z.js: identity=10693 gzip=4125 brotli=3760 bytes onDemand chunk-18kt8b84.js: identity=4575 gzip=2013 brotli=1783 bytes critical chunk-1gmd2m5q.js: identity=199 gzip=162 brotli=136 bytes onDemand chunk-p02knrz5.js: identity=3891 gzip=1735 brotli=1516 bytes onDemand chunk-rwz8j328.js: identity=6773 gzip=3176 brotli=2886 bytes critical chunk-4pbz30v1.js: identity=17627 gzip=6253 brotli=5574 bytes onDemand chunk-2bcfkj59.js: identity=1063 gzip=653 brotli=521 bytes critical chunk-c1dgfc87.js: identity=590 gzip=327 brotli=319 bytes onDemand chunk-dbtymfed.js: identity=4640 gzip=1932 brotli=1703 bytes critical chunk-zhbj1mhv.js: identity=15859 gzip=6182 brotli=5484 bytes onDemand chunk-0w8xy5ft.js: identity=2420 gzip=1199 brotli=1077 bytes onDemand chunk-nkck35a0.js: identity=2462 gzip=1107 brotli=937 bytes critical chunk-4ns5vcby.js: identity=707945 gzip=204703 brotli=165886 bytes critical faulty-terminal.worker.js: identity=1086 gzip=559 brotli=480 bytes critical backdrop.worker.js: identity=243 gzip=212 brotli=165 bytes onDemand chunk-6kved75a.js: identity=11529 gzip=4657 brotli=4255 bytes onDemand chunk-6zgsyx5n.js: identity=31922 gzip=12263 brotli=11046 bytes critical chunk-qpmjtb9v.js: identity=9810 gzip=4016 brotli=3459 bytes onDemand chunk-5s6a3m50.js: identity=2108 gzip=1037 brotli=869 bytes critical chunk-a895a34j.js: identity=88 gzip=88 brotli=74 bytes critical chunk-vxv25w33.js: identity=5443 gzip=2605 brotli=2380 bytes critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes critical chunk-bcrmm064.js: identity=4499 gzip=1856 brotli=1635 bytes onDemand chunk-gtm292qm.js: identity=228 gzip=178 brotli=165 bytes onDemand chunk-b458sm6g.js: identity=1170 gzip=708 brotli=590 bytes onDemand chunk-c0chx16j.js: identity=1026 gzip=624 brotli=498 bytes critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes critical chunk-6frk5z79.js: identity=2519 gzip=1008 brotli=876 bytes deferred chunk-pmhd4d2p.js: identity=97656 gzip=33165 brotli=29329 bytes critical chunk-8vkxkehy.js: identity=42395 gzip=14486 brotli=12983 bytes onDemand chunk-15nnyy73.js: identity=2557 gzip=1180 brotli=1009 bytes deferred chunk-mt68a709.js: identity=43000 gzip=16583 brotli=14645 bytes onDemand chunk-qxnrs5kc.js: identity=6265 gzip=2107 brotli=1872 bytes critical chunk-yr0r38s4.js: identity=386 gzip=238 brotli=196 bytes onDemand chunk-3g02wn4t.js: identity=5784 gzip=2189 brotli=1938 bytes onDemand chunk-gc6v6xz9.js: identity=1616 gzip=866 brotli=739 bytes onDemand chunk-73kzg2cv.js: identity=540 gzip=352 brotli=313 bytes onDemand chunk-exmgk5pa.js: identity=13384 gzip=5029 brotli=4503 bytes onDemand chunk-cj644srx.js: identity=7662 gzip=3397 brotli=2977 bytes critical main.js: identity=111029 gzip=40360 brotli=34993 bytes critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes onDemand chunk-q48rkm2h.js: identity=48283 gzip=15179 brotli=13472 bytes critical chunk-433eyr4g.js: identity=162 gzip=150 brotli=127 bytes onDemand chunk-x15a6xbf.js: identity=2824 gzip=1387 brotli=1196 bytes onDemand chunk-51dq0s1n.js: identity=191 gzip=170 brotli=130 bytes critical chunk-z93cxfvm.js: identity=21235 gzip=6857 brotli=6128 bytes onDemand chunk-em2ey70s.js: identity=5359 gzip=2578 brotli=2303 bytes critical chunk-969atqet.js: identity=8377 gzip=3575 brotli=3180 bytes JavaScript transfer, critical: identity=951648 gzip=294997/307200 brotli=245301/256000 bytes JavaScript transfer, deferred: identity=140656 gzip=49748/51200 brotli=43974/45056 bytes JavaScript transfer, onDemand: identity=185163 gzip=72633/20480 brotli=64577/18432 bytes JavaScript transfer, onDemand largest chunk chunk-q48rkm2h.js: gzip=15179/20480 brotli=13472/18432 bytes (class total gzip=72633 brotli=64577, not limited) fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes ==> Rust stream oracle (for the differential test) ==> TypeScript protocol tests bun test v1.4.2 (744846f84) src/mesh-review-revocation.test.ts: (pass) review forbidden event cancels pending snapshot publication [3.18ms] (pass) subscription forbidden ends delivery before a late refresh rejection [1.84ms] (pass) subscription not found ends delivery before a late refresh rejection [4.79ms] (pass) subscription invalid input ends delivery before a late refresh rejection [1.27ms] (pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.20ms] (pass) synchronous subscription refusal releases the transport exactly once [0.23ms] src/codec.test.ts: (pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [15.24ms] (pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.39ms] (pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.47ms] (pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.28ms] (pass) split mux header preserves trailing Close [0.34ms] src/mesh-review-paged-error.test.ts: (pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [3.10ms] (pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.25ms] (pass) a newer paged event owns publication before an earlier refresh resumes [2.79ms] src/mesh-review-refresh.test.ts: (pass) review superseded refresh failure cannot replace authoritative resync [1.53ms] (pass) superseded failure preserves a newer pending refresh [2.92ms] src/stream.test.ts: stream differential: 134 streams, 11439 schedules, zero divergences (pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [3346.19ms] (pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [10.25ms] src/mesh.test.ts: (pass) Mesh actions map to their typed action IDs and JSON inputs [2.17ms] (pass) Mesh watch coalesces change bursts and never publishes an older revision [4.21ms] (pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.15ms] src/mesh-review-continuation.test.ts: (pass) review continuation stops after stop [1.55ms] (pass) review continuation stops after forbidden [1.25ms] (pass) review continuation stops after superseded [1.22ms] src/mesh-pagination.test.ts: (pass) list assembles bounded pages using the same filter [0.27ms] (pass) a changed revision discards earlier pages before assembling its restart [0.15ms] (pass) malformed continuation is refused: {"revision":1,"offset":0} [0.20ms] (pass) malformed continuation is refused: {"revision":2,"offset":1} [0.02ms] (pass) malformed continuation is refused: {"revision":1,"offset":2} (pass) watch never publishes a partial page; withdrawn=false [1.46ms] (pass) watch never publishes a partial page; withdrawn=true [1.23ms] (pass) a superseding equal-revision resync wins over pending page assembly [1.60ms] src/mesh-review-resync.test.ts: (pass) review watch applies same-revision authoritative resync [0.21ms] (pass) authoritative resync keeps priority over an equal-revision pending list [1.46ms] src/mesh-vectors.test.ts: (pass) every shared Mesh action vector passes through the typed client unchanged [1.73ms] (pass) shared Mesh event vectors drive the typed watch adapter [5.82ms] 36 pass 0 fail 34462 expect() calls Ran 36 tests across 10 files. [3.45s] ```

kayg commented

2026-10-12 15:40:37 +00:00

Author

Owner

Cleanup complete at b92e846da9: detached baseline removed through Git, job scratch/build target and generated scripts/pycache removed. Working tree clean and HEAD equals origin/access-rules-v3. Full final Rust and supplemental TypeScript outputs are preserved in the finish comment above; fast gate remains blocked solely by the unchanged static size row. No new owner questions.

Cleanup complete at b92e846da90ec56b7f403b55f514a4755b211107: detached baseline removed through Git, job scratch/build target and generated scripts/__pycache__ removed. Working tree clean and HEAD equals origin/access-rules-v3. Full final Rust and supplemental TypeScript outputs are preserved in the finish comment above; fast gate remains blocked solely by the unchanged static size row. No new owner questions.

kayg commented

2026-10-12 15:42:33 +00:00

Author

Owner

Starting round 3 sequential soundness, coverage and surfaces verification. Branch access-rules-r3; base b92e846da9, supplied access-rules-v3 head (spec SHA256 8f16ab5ecda31814049b3c3d15964d5897198e63a9ed8e856b995a2bd4959d3e). Continuing all 99 historical IDs and Q1–Q8/L1/AI owner answers from #186; parent #147 has no comments. Reports only, spec unchanged; scratch parser under job cache. Push explicitly authorized by final job instruction. No deployment or performance measurements. Full gate will be recorded; prior size failures are not waived.

Starting round 3 sequential soundness, coverage and surfaces verification. Branch access-rules-r3; base b92e846da90ec56b7f403b55f514a4755b211107, supplied access-rules-v3 head (spec SHA256 8f16ab5ecda31814049b3c3d15964d5897198e63a9ed8e856b995a2bd4959d3e). Continuing all 99 historical IDs and Q1–Q8/L1/AI owner answers from #186; parent #147 has no comments. Reports only, spec unchanged; scratch parser under job cache. Push explicitly authorized by final job instruction. No deployment or performance measurements. Full gate will be recorded; prior size failures are not waived.

kayg commented

2026-10-12 15:48:47 +00:00

Author

Owner

Soundness step committed/pushed a6c8f7e5. Report docs/design/access-rules-verification/round3-soundness.md: 99/99 distinct historical replays; 322560 symbolic slot shapes reduced through explicit predicates (not runtime tests); all 8 inherited safety properties and requested lifecycle cases. Findings: R3S-01 P0 community target inference conflicts with this brief confirmed-only Q3 (historical #186 allowed inference); R3S-02 P0 session-carried opener identity can let Bob/Patchbot open a new login beyond existing-session/token scope; R3S-03 P1 Q8 unused-expiry lifecycle/settings missing; R3S-04 P1 later AI own device-code/MCP sign-in/label/listing contract incomplete. Named scenarios and smallest repairs in report. Integrity/diff checks pass; full milestone compiling unchanged source. Coverage pass follows.

Soundness step committed/pushed a6c8f7e5. Report docs/design/access-rules-verification/round3-soundness.md: 99/99 distinct historical replays; 322560 symbolic slot shapes reduced through explicit predicates (not runtime tests); all 8 inherited safety properties and requested lifecycle cases. Findings: R3S-01 P0 community target inference conflicts with this brief confirmed-only Q3 (historical #186 allowed inference); R3S-02 P0 session-carried opener identity can let Bob/Patchbot open a new login beyond existing-session/token scope; R3S-03 P1 Q8 unused-expiry lifecycle/settings missing; R3S-04 P1 later AI own device-code/MCP sign-in/label/listing contract incomplete. Named scenarios and smallest repairs in report. Integrity/diff checks pass; full milestone compiling unchanged source. Coverage pass follows.

kayg commented

2026-10-12 15:53:29 +00:00

Author

Owner

Coverage step committed/pushed af814ba3: docs/design/access-rules-verification/round3-coverage.md maps 30 permission-bearing areas and nine organizations, each 12 rules (108 entries). Three P1 findings: R3C-01 unconditional rule-edit requirement contradicts narrow personal join/removal and delegated admission; R3C-02 role grammar has no member operand constraints for parameterized actions; R3C-03 automatic backups/test restore/update/rollback lack a declared maintenance principal beyond transport/person authority. Scenarios/minimum repairs in report. AR-13/14/C09 retained as accepted limits, not new findings. Entry-count/diff checks pass. Surfaces grammar/schema/parser pass follows; no product changes.

Coverage step committed/pushed af814ba3: docs/design/access-rules-verification/round3-coverage.md maps 30 permission-bearing areas and nine organizations, each 12 rules (108 entries). Three P1 findings: R3C-01 unconditional rule-edit requirement contradicts narrow personal join/removal and delegated admission; R3C-02 role grammar has no member operand constraints for parameterized actions; R3C-03 automatic backups/test restore/update/rollback lack a declared maintenance principal beyond transport/person authority. Scenarios/minimum repairs in report. AR-13/14/C09 retained as accepted limits, not new findings. Entry-count/diff checks pass. Surfaces grammar/schema/parser pass follows; no product changes.

kayg commented

2026-10-12 16:03:48 +00:00

Author

Owner

Surfaces steps committed/pushed 2a14659f and 6cc323f0. Report round3-surfaces.md preserves exact v3 EBNF/schema, reproducible scratch source, twelve expanded app/Mesh/CLI/HTTP/MCP/WebMCP serialization/check/diff/audit fixtures (proposed, not executed API calls). Probe: 10000 full-body round trips, 0 failures; 33/33 examples, 7 independent spec pairs, Unicode 16.0.0, 23 hostile-name classes, 12/12 malformed refused. Findings R3F-01 P1 version2/3 check-envelope contradiction; R3F-02 P1 all-IP concrete attempts not representable; R3F-03 P1 atomic batch/mode wire input absent; R3F-04 P2 canonical programming syntax readability; R3F-05 P1 decoded control/bidi label rendering ambiguous. Total unique new/still-unclosed: 12 = P0 2 / P1 9 / P2 1. Coverage explicitly includes the separate approval row: 30 areas. JSON/diff checks pass. Final self-review and branch-head fast gate remain; prior base gate is in static compilation.

Surfaces steps committed/pushed 2a14659f and 6cc323f0. Report round3-surfaces.md preserves exact v3 EBNF/schema, reproducible scratch source, twelve expanded app/Mesh/CLI/HTTP/MCP/WebMCP serialization/check/diff/audit fixtures (proposed, not executed API calls). Probe: 10000 full-body round trips, 0 failures; 33/33 examples, 7 independent spec pairs, Unicode 16.0.0, 23 hostile-name classes, 12/12 malformed refused. Findings R3F-01 P1 version2/3 check-envelope contradiction; R3F-02 P1 all-IP concrete attempts not representable; R3F-03 P1 atomic batch/mode wire input absent; R3F-04 P2 canonical programming syntax readability; R3F-05 P1 decoded control/bidi label rendering ambiguous. Total unique new/still-unclosed: 12 = P0 2 / P1 9 / P2 1. Coverage explicitly includes the separate approval row: 30 areas. JSON/diff checks pass. Final self-review and branch-head fast gate remain; prior base gate is in static compilation.

kayg commented

2026-10-12 16:04:58 +00:00

Author

Owner

thread daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write panicked at crates/infraternal-agent/src/daemon_readiness_tests.rs:273:9:
assertion left == right failed
left: true
right: false
test result: FAILED. 73 passed; 1 failed; 12 ignored; 0 measured; 0 filtered out; finished in 11.09s

Gate finding at docs-only branch: milestone native test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write failed in crates/infraternal-agent/src/daemon_readiness_tests.rs:273 (left true, right false; 73 pass/1 fail/12 ignored). This is not a permitted #118 baseline waiver; no waiver claimed and no product code changed. Full gate continues to static build. Will rerun the focused existing binary and refresh full gate at final head sequentially after build completion. Integration/source-test repair is outside this design brief if failure persists. Verbatim: thread daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write panicked at crates/infraternal-agent/src/daemon_readiness_tests.rs:273:9: assertion `left == right` failed left: true right: false test result: FAILED. 73 passed; 1 failed; 12 ignored; 0 measured; 0 filtered out; finished in 11.09s

kayg commented

2026-10-12 16:07:53 +00:00

Author

Owner

Self-review complete at pushed head 0c163cb232. Source diff from supplied v3 base is exactly the three round3 reports; spec SHA256 unchanged. Integrity: 99/99 historical IDs exact; 12 unique findings (2 P0/9 P1/1 P2); 30 capability rows; 9 organizations × 12 rules=108; 12 surface bodies/check records; 27 valid JSON blocks. Expanded functional probe now refuses 17/17 malformed vectors including invalid dates, duplicate endings and missing boot once; 10000 full-body round trips still 0 failures, 33 examples/7 independent pairs pass. Focused exact compiled readiness test rerun passed 1/1; no waiver claimed. Final-head full gate active without own static-build overlap. No new findings or product changes.

Self-review complete at pushed head 0c163cb2328b14f0b33890703b69de9e8f9b9c2c. Source diff from supplied v3 base is exactly the three round3 reports; spec SHA256 unchanged. Integrity: 99/99 historical IDs exact; 12 unique findings (2 P0/9 P1/1 P2); 30 capability rows; 9 organizations × 12 rules=108; 12 surface bodies/check records; 27 valid JSON blocks. Expanded functional probe now refuses 17/17 malformed vectors including invalid dates, duplicate endings and missing boot once; 10000 full-body round trips still 0 failures, 33 examples/7 independent pairs pass. Focused exact compiled readiness test rerun passed 1/1; no waiver claimed. Final-head full gate active without own static-build overlap. No new findings or product changes.

kayg commented

2026-10-12 16:14:37 +00:00

Author

Owner

Final-head full scripts/verify fast completed at pushed 0c163cb232: exit 1 only on unchanged static size (21857264 vs 16404816 bytes). fmt/native fmt/CLI compile-out/clippy/workspace tests/cargo-deny PASS. Earlier readiness failure passes focused and refreshed full workspace; no #118 waiver used. Dispatcher skips aarch64/TypeScript after static failure; supplemental ts_verify_fast now running. Passing full gate needs D243 size work on the integration line, outside this reports-only review; no budget changed. Verbatim tail:

==> static builds
Finished release profile [optimized] target(s) in 0.41s
/home/kayg/.cache/codex-scratch/access-rules-r3/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 21857264 bytes

Final-head full scripts/verify fast completed at pushed 0c163cb2328b14f0b33890703b69de9e8f9b9c2c: exit 1 only on unchanged static size (21857264 vs 16404816 bytes). fmt/native fmt/CLI compile-out/clippy/workspace tests/cargo-deny PASS. Earlier readiness failure passes focused and refreshed full workspace; no #118 waiver used. Dispatcher skips aarch64/TypeScript after static failure; supplemental ts_verify_fast now running. Passing full gate needs D243 size work on the integration line, outside this reports-only review; no budget changed. Verbatim tail: ==> static builds Finished `release` profile [optimized] target(s) in 0.41s /home/kayg/.cache/codex-scratch/access-rules-r3/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 21857264 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+

kayg commented

2026-10-12 16:15:03 +00:00

Author

Owner

Final-head scripts/verify fast transcript 1/8; head 0c163cb232; exit 1 (static size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence.

METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=297.29 p99_ms=321.67 result=PASS

==> fmt

==> VT native fmt

==> CLI plugin compile-out
disabled CLI plugin dependencies: absent from normal dependency graph
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.16s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal-d0028d263474a180)

running 24 tests
test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok
test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok
test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok
test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok
test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok
test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test status_tests::custom_named_server_service_is_reported_as_running ... ok
test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok

test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> clippy
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.71s

==> test
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.58s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal-d549e36661370196)

running 65 tests
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok
test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok
test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test status_tests::custom_named_server_service_is_reported_as_running ... ok
test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok
test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok

test result: ok. 65 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.06s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/agent_daemon-5de2ce691037a6fb)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.01s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/agent_queues-e091edc68b27f96c)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.32s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/agent_review-d94b1e14e60e4ef2)

running 8 tests
test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.19s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/agent_sessions-02290b123f5f2fd1)

running 3 tests
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok
test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok
test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.41s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/idle_canary-26b2a47f3626ff86)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.10s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/remote_output-174b9538baf046d1)

running 1 test
test remote_refusal_matches_its_declared_cli_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/session_bounds_review-72c64f17fd25b658)

running 1 test
test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.91s

     Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/session_exit_events-11a4cce005fc09ec)

running 1 test
test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.76s

     Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/session_retention-2365452bec4dac67)

running 1 test
test bounded_owned_exit_reconnects_as_ended_with_status ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.67s

     Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/setup_output-0aeb77f16924cef7)

running 1 test
test setup_output_keeps_legacy_and_versioned_readers ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/shim-c81baaf26e3012d1)

running 13 tests
test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok
test detached_shell_exit_reaps_shim_within_one_second ... ok
test double_fork_survives_parent_death ... ok
test unowned_normal_exit_retires_promptly_and_records_status ... ok
test disallowed_signal_only_disconnects_peer ... ok
test replacement_connection_and_malformed_limit ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test real_shell_reconnect_resize_and_delivered_exit ... ok
test attached_backpressure_and_detached_progress ... ok
test delivered_exit_cannot_release_another_owning_window ... ok
test owned_exit_releases_promptly_on_window_close ... ok
test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.23s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/ssh_askpass-617ca478b5d79487)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.20s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/vt_credit-0a8dc350571af348)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.23s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/vt_reconnect-ecf739816bc14d42)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_agent-dc304b9d51d0941a)

running 86 tests
test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok
test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok
test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok
test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok
test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok
test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok
test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok
test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok
test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok
test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok
test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok
test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok
test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope
test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok
test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok
test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok
test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok

test result: ok. 74 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 11.05s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/transport-02d53fbe758b717f)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_mesh-25b71fd0307aac40)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/default_arrow-6d2e8df0e7b48da6)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/properties-cb03b103616f12c2)

running 14 tests
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test names_versions_and_backend_status ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.29s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/rotation_time-961162d4330c2fec)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_plugin_api-c495c2150d66af78)

running 20 tests
test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok
test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok
test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok
test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok
test action::tests::registry_rejects_inconsistent_json_schemas ... ok
test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok
test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok
test release_version::tests::accepts_only_worker_version_forms ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::machine_actions_are_declared_without_entering_human_discovery ... ok
test tests::operator_presentation_cannot_follow_a_private_control_action ... ok
test tests::public_dispatch_cannot_call_a_machine_control_action ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok
test tests::notifications_are_declared_json_bounded_and_drained_once ... ok

test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/routing_review-b99b0b882dabc235)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_plugin_backup-a417bdd50ad1b333)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_plugin_host_facts-4f71949982aad5d8)

running 13 tests
test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok
test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok

Final-head scripts/verify fast transcript 1/8; head 0c163cb2328b14f0b33890703b69de9e8f9b9c2c; exit 1 (static size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence. ````text METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=297.29 p99_ms=321.67 result=PASS ==> fmt ==> VT native fmt ==> CLI plugin compile-out disabled CLI plugin dependencies: absent from normal dependency graph Finished `test` profile [unoptimized + debuginfo] target(s) in 0.16s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal-d0028d263474a180) running 24 tests test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test status_tests::custom_named_server_service_is_reported_as_running ... ok test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> clippy Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.71s ==> test Finished `test` profile [unoptimized + debuginfo] target(s) in 0.58s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal-d549e36661370196) running 65 tests test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test status_tests::custom_named_server_service_is_reported_as_running ... ok test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test result: ok. 65 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.06s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/agent_daemon-5de2ce691037a6fb) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.01s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/agent_queues-e091edc68b27f96c) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 36.32s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/agent_review-d94b1e14e60e4ef2) running 8 tests test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.19s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/agent_sessions-02290b123f5f2fd1) running 3 tests test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.41s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/idle_canary-26b2a47f3626ff86) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.10s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/remote_output-174b9538baf046d1) running 1 test test remote_refusal_matches_its_declared_cli_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/session_bounds_review-72c64f17fd25b658) running 1 test test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.91s Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/session_exit_events-11a4cce005fc09ec) running 1 test test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.76s Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/session_retention-2365452bec4dac67) running 1 test test bounded_owned_exit_reconnects_as_ended_with_status ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.67s Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/setup_output-0aeb77f16924cef7) running 1 test test setup_output_keeps_legacy_and_versioned_readers ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/shim-c81baaf26e3012d1) running 13 tests test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok test detached_shell_exit_reaps_shim_within_one_second ... ok test double_fork_survives_parent_death ... ok test unowned_normal_exit_retires_promptly_and_records_status ... ok test disallowed_signal_only_disconnects_peer ... ok test replacement_connection_and_malformed_limit ... ok active test user_scope_survives_parent_unit_stop ... ok test real_shell_reconnect_resize_and_delivered_exit ... ok test attached_backpressure_and_detached_progress ... ok test delivered_exit_cannot_release_another_owning_window ... ok test owned_exit_releases_promptly_on_window_close ... ok test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.23s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/ssh_askpass-617ca478b5d79487) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.20s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/vt_credit-0a8dc350571af348) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.23s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/vt_reconnect-ecf739816bc14d42) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_agent-dc304b9d51d0941a) running 86 tests test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000 test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok test result: ok. 74 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 11.05s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/transport-02d53fbe758b717f) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_mesh-25b71fd0307aac40) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/default_arrow-6d2e8df0e7b48da6) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/properties-cb03b103616f12c2) running 14 tests test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test names_versions_and_backend_status ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test addresses_are_unique_stable_and_not_recycled ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.29s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/rotation_time-961162d4330c2fec) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_plugin_api-c495c2150d66af78) running 20 tests test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok test action::tests::registry_rejects_inconsistent_json_schemas ... ok test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok test release_version::tests::accepts_only_worker_version_forms ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::machine_actions_are_declared_without_entering_human_discovery ... ok test tests::operator_presentation_cannot_follow_a_private_control_action ... ok test tests::public_dispatch_cannot_call_a_machine_control_action ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test tests::notifications_are_declared_json_bounded_and_drained_once ... ok test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/routing_review-b99b0b882dabc235) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_plugin_backup-a417bdd50ad1b333) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_plugin_host_facts-4f71949982aad5d8) running 13 tests test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok ````

kayg commented

2026-10-12 16:15:04 +00:00

Author

Owner

Final-head scripts/verify fast transcript 2/8; head 0c163cb232; exit 1 (static size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence.

test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::configured_memory_floor_refuses_with_current_host_counters ... ok
test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_plugin_mesh-1b760e879d6cc016)

running 25 tests
test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok
test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok
test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok
test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok
test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing.
test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok
test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok
test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok
test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok
test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok
test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok
test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok
test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok
test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok
test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok
test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok
test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok
test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok

test result: ok. 17 passed; 0 failed; 8 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/configuration-836876ba6734f0d1)

running 4 tests
test edition_default_is_explicit_and_build_selected ... ok
test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok
test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok
test large_valid_port_policy_is_split_without_a_port_count_cap ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.40s

     Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/kernel-8886a63e9998e503)

running 6 tests
test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/restart_route_ownership-915aa90068a8947f)

running 1 test
test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/review_endpoint_transaction-466627b0ed41f23e)

running 1 test
test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/review_ingress_translation-bd8664555dc4f00b)

running 2 tests
test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/review_local_delivery-b93d5857cea9a210)

running 2 tests
test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/review_restart_routes-2842f5c26f6abc6e)

running 1 test
test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/review_route_inventory-0efd1dc3b9824c23)

running 2 tests
test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/review_route_scope-2cbe953ad2ece6af)

running 1 test
test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/review_shutdown_budget-cb0fcfe1b2aad42f)

running 1 test
test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/review_shutdown_restart-c5e07544297f612a)

running 3 tests
test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof.
test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.
test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.

test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/settings.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/settings-0d4e5c1ccc396650)

running 1 test
test default_switch_requires_owner_freshness_and_the_preview_revision ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/store.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/store-653d928dd28e0534)

running 5 tests
test required_server_membership_cannot_be_deleted ... ok
test absent_discovery_preserves_the_last_known_endpoint ... ok
test key_replacement_preserves_identity_and_addresses_after_restart ... ok
test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok
test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.49s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_plugin_relay-d765ce907b6d6285)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_plugin_release-d9a3a22170648e3d)

running 8 tests
test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency
test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok
test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok
test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok
test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok
test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok
test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok
test latest::tests::cancellation_joins_verification ... ok

test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.55s

     Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/review_pool-7342401812584e29)

running 1 test
test pending_channel_writers_preserve_authority_read_capacity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.59s

     Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/review_restart-433d5f6159022764)

running 2 tests
test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification
test restarted_latest_reclaims_metadata_after_process_stop ... ok

test result: ok. 1 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_plugin_remote-befabe8c66488616)

running 12 tests
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.04s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_plugin_ssh-8fc5a3d5ae8e8da5)

running 13 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 12 filtered out; finished in 0.00s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 12 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/auth_order-a6672937b409eb18)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/build_removal-ea54acad90939da0)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.38s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/concurrency-84194037b61b4a88)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test component_off_retires_a_real_native_helper ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/config_isolation-7ef0e56361e7afa9)

running 2 tests
test synthetic_master_socket_is_private_at_creation ... ok
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/credentials-d8295318c2cb85c8)

running 3 tests
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/diagnostics-07214f0a23810c1c)

running 8 tests
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test every_failed_step_names_the_step_and_a_next_action ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test status_mapping_preserves_authentication_and_missing_payload_classification ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/event_metadata-44d697ac35cff957)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/foreground-a7c134dfcb5c5797)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/host_trust-956578b69494d660)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/install-c9a4eb681da6c6e1)

running 30 tests
test command_failure_names_upload_join_install_and_start_separately ... ok
test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.74s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/model-8d8a118fb482cb01)

running 5 tests
test addresses_never_become_options_or_shell_syntax ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/payload_source.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/payload_source-2b9cf9e8f172fa9d)

running 2 tests
test verification_failure_names_step_and_stops_before_upload ... ok
test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/probe_check-4c243b7c35682a6f)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/process-52eb00630d90c109)

running 5 tests
test completed_helper_retires_descendants_with_closed_pipes ... ok
test cancellation_retires_the_helper_descendant_too ... ok
test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.19s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/proxy_policy-ca5da5ebac2b936e)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/real_ssh-7e667740bdea77a4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/single_connection-824b96a985bd76a6)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/source_completeness-221723904e9d35a3)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/trust_round2-78f0ff3b67dbad9b)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_server-e66837f90a21069b)

running 368 tests
test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions
test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok
test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok
test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok
test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok
test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok
test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok

Final-head scripts/verify fast transcript 2/8; head 0c163cb2328b14f0b33890703b69de9e8f9b9c2c; exit 1 (static size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence. ````text test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::configured_memory_floor_refuses_with_current_host_counters ... ok test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_plugin_mesh-1b760e879d6cc016) running 25 tests test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing. test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok test result: ok. 17 passed; 0 failed; 8 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/configuration-836876ba6734f0d1) running 4 tests test edition_default_is_explicit_and_build_selected ... ok test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok test large_valid_port_policy_is_split_without_a_port_count_cap ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.40s Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/kernel-8886a63e9998e503) running 6 tests test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/restart_route_ownership-915aa90068a8947f) running 1 test test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/review_endpoint_transaction-466627b0ed41f23e) running 1 test test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/review_ingress_translation-bd8664555dc4f00b) running 2 tests test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/review_local_delivery-b93d5857cea9a210) running 2 tests test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/review_restart_routes-2842f5c26f6abc6e) running 1 test test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/review_route_inventory-0efd1dc3b9824c23) running 2 tests test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/review_route_scope-2cbe953ad2ece6af) running 1 test test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/review_shutdown_budget-cb0fcfe1b2aad42f) running 1 test test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/review_shutdown_restart-c5e07544297f612a) running 3 tests test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof. test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/settings.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/settings-0d4e5c1ccc396650) running 1 test test default_switch_requires_owner_freshness_and_the_preview_revision ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/store.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/store-653d928dd28e0534) running 5 tests test required_server_membership_cannot_be_deleted ... ok test absent_discovery_preserves_the_last_known_endpoint ... ok test key_replacement_preserves_identity_and_addresses_after_restart ... ok test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.49s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_plugin_relay-d765ce907b6d6285) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_plugin_release-d9a3a22170648e3d) running 8 tests test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok test latest::tests::cancellation_joins_verification ... ok test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.55s Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/review_pool-7342401812584e29) running 1 test test pending_channel_writers_preserve_authority_read_capacity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.59s Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/review_restart-433d5f6159022764) running 2 tests test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification test restarted_latest_reclaims_metadata_after_process_stop ... ok test result: ok. 1 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.11s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_plugin_remote-befabe8c66488616) running 12 tests test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.04s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_plugin_ssh-8fc5a3d5ae8e8da5) running 13 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 12 filtered out; finished in 0.00s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 12 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/auth_order-a6672937b409eb18) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/build_removal-ea54acad90939da0) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.38s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/concurrency-84194037b61b4a88) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test component_off_retires_a_real_native_helper ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/config_isolation-7ef0e56361e7afa9) running 2 tests test synthetic_master_socket_is_private_at_creation ... ok test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/credentials-d8295318c2cb85c8) running 3 tests test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/diagnostics-07214f0a23810c1c) running 8 tests test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test every_failed_step_names_the_step_and_a_next_action ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test status_mapping_preserves_authentication_and_missing_payload_classification ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/event_metadata-44d697ac35cff957) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/foreground-a7c134dfcb5c5797) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/host_trust-956578b69494d660) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/install-c9a4eb681da6c6e1) running 30 tests test command_failure_names_upload_join_install_and_start_separately ... ok test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test refused_previous_service_stop_only_removes_staging ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.74s Running tests/model.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/model-8d8a118fb482cb01) running 5 tests test addresses_never_become_options_or_shell_syntax ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/payload_source.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/payload_source-2b9cf9e8f172fa9d) running 2 tests test verification_failure_names_step_and_stops_before_upload ... ok test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/probe_check-4c243b7c35682a6f) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/process.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/process-52eb00630d90c109) running 5 tests test completed_helper_retires_descendants_with_closed_pipes ... ok test cancellation_retires_the_helper_descendant_too ... ok test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.19s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/proxy_policy-ca5da5ebac2b936e) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/real_ssh-7e667740bdea77a4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/single_connection-824b96a985bd76a6) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/source_completeness-221723904e9d35a3) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/trust_round2-78f0ff3b67dbad9b) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_server-e66837f90a21069b) running 368 tests test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok ````

kayg commented

2026-10-12 16:15:05 +00:00

Author

Owner

Final-head scripts/verify fast transcript 3/8; head 0c163cb232; exit 1 (static size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence.

test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket has been running for over 60 seconds
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser has been running for over 60 seconds
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok
test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope
test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok
test release_build_tests::release_build_marker_is_explicit ... ok
test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok
test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark
test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement
test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok
test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok
test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok
test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok
test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok
test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok
test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification
test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok
test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok
test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok
test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok
test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok
test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok
test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok

Final-head scripts/verify fast transcript 3/8; head 0c163cb2328b14f0b33890703b69de9e8f9b9c2c; exit 1 (static size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence. ````text test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket has been running for over 60 seconds test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser has been running for over 60 seconds test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok test release_build_tests::release_build_marker_is_explicit ... ok test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok ````

kayg commented

2026-10-12 16:15:07 +00:00

Author

Owner

Final-head scripts/verify fast transcript 4/8; head 0c163cb232; exit 1 (static size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence.

test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok
test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok
test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok
test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok
test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok

test result: ok. 329 passed; 0 failed; 39 ignored; 0 measured; 0 filtered out; finished in 232.87s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/catalog_startup-7dd8be68f0697857)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/enrollment-32f61b19a7c9b610)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.16s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/mesh_parser-13fd59a4a8708f05)

running 2 tests
test review_grant_parser_rejects_unknown_nested_port_fields ... ok
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/mesh_review_plugin-1de3bc1351e8739c)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/mesh_review_policy-44ce3d3efaec58dc)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/mesh_review_role_scope-4848c1545d27cd89)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/plugin_host_review-e125600348cb05bb)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_disable_answers_inflight_call ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.50s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/plugin_settings_review-f9f86b6508eec089)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.36s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/remote_plugin_contract-467d546d48fb6a49)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.32s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_shim-6198daaedaec1ac5)

running 87 tests
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok
test locale::tests::invalid_shell_expressions_are_ignored ... ok
test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok
test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok
test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok
test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok

running 1 test
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test pty::child_locale_tests::spawned_login_shell_receives_selected_locale_without_other_host_variables ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 86 filtered out; finished in 0.00s

test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 74 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 44.00s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/detach-f17510b824ed2469)

running 2 tests
test detached_child_restores_default_signals_without_changing_parent ... ok
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.57s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/mouse-0d16f77afbdea7cb)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s

     Running tests/process_exit_descriptor.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/process_exit_descriptor-67dfefbd2451d374)

running 2 tests
test invalid_pid_never_creates_a_descriptor ... ok
test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_backup

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_relay

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_release

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   ├── infraternal-fuzz v0.1.0
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0 (*)
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-mesh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   ├── infraternal-plugin-release v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-mesh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)

Final-head scripts/verify fast transcript 4/8; head 0c163cb2328b14f0b33890703b69de9e8f9b9c2c; exit 1 (static size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence. ````text test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test result: ok. 329 passed; 0 failed; 39 ignored; 0 measured; 0 filtered out; finished in 232.87s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/catalog_startup-7dd8be68f0697857) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/enrollment-32f61b19a7c9b610) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test concurrent_redemption_has_one_winner_and_one_certificate ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.16s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/mesh_parser-13fd59a4a8708f05) running 2 tests test review_grant_parser_rejects_unknown_nested_port_fields ... ok test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/mesh_review_plugin-1de3bc1351e8739c) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/mesh_review_policy-44ce3d3efaec58dc) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/mesh_review_role_scope-4848c1545d27cd89) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/plugin_host_review-e125600348cb05bb) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_disable_answers_inflight_call ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.50s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/plugin_settings_review-f9f86b6508eec089) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.36s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/remote_plugin_contract-467d546d48fb6a49) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.32s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/infraternal_shim-6198daaedaec1ac5) running 87 tests test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::golden::every_frozen_message ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok test frame::checks::tests::golden_and_fragmented ... ok test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok test locale::tests::invalid_shell_expressions_are_ignored ... ok test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test ring::checks::tests::wrap_and_exact_offsets ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok running 1 test test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test pty::child_locale_tests::spawned_login_shell_receives_selected_locale_without_other_host_variables ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 86 filtered out; finished in 0.00s test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 74 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 44.00s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/detach-f17510b824ed2469) running 2 tests test detached_child_restores_default_signals_without_changing_parent ... ok test closed_standard_descriptors_become_dev_null ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.57s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/mouse-0d16f77afbdea7cb) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s Running tests/process_exit_descriptor.rs (/home/kayg/.cache/codex-scratch/access-rules-r3/target/debug/deps/process_exit_descriptor-67dfefbd2451d374) running 2 tests test invalid_pid_never_creates_a_descriptor ... ok test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_backup running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_relay running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_release running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) ````

kayg commented

2026-10-12 16:15:08 +00:00

Author

Owner

Final-head scripts/verify fast transcript 5/8; head 0c163cb232; exit 1 (static size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence.

         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   ├── infraternal-fuzz v0.1.0 (*)
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-mesh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-mesh v0.1.0 (*)
         ├── infraternal-plugin-release v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-mesh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   ├── hyper v1.11.1
         │   │   ├── axum v0.8.9
         │   │   │   ├── infraternal-fuzz v0.1.0
         │   │   │   └── infraternal-server v0.1.0
         │   │   │       ├── infraternal v0.1.0
         │   │   │       └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── axum-server v0.8.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── hyper-util v0.1.21
         │   │   │   ├── axum v0.8.9 (*)
         │   │   │   ├── axum-server v0.8.0 (*)
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   │   ├── infraternal v0.1.0 (*)
         │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal v0.1.0 (*)
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-mesh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   └── infraternal-plugin-mesh v0.1.0
             │   │   │       ├── infraternal v0.1.0 (*)
             │   │   │       ├── infraternal-agent v0.1.0 (*)
             │   │   │       ├── infraternal-fuzz v0.1.0 (*)
             │   │   │       └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-backup v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   │   ├── infraternal-plugin-relay v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-release v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   ├── infraternal-plugin-release v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:197:1
    │  
197 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
198 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   ├── infraternal-fuzz v0.1.0 (*)
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-mesh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │       └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-backup v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-relay v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-release v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-mesh v0.1.0 (*)
              ├── infraternal-plugin-release v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:199:1
    │  
199 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
201 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:202:1
    │  
202 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0

Final-head scripts/verify fast transcript 5/8; head 0c163cb2328b14f0b33890703b69de9e8f9b9c2c; exit 1 (static size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence. ````text │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ ├── hyper v1.11.1 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:197:1 │ 197 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 198 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:199:1 │ 199 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 201 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:202:1 │ 202 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ````

kayg commented

2026-10-12 16:15:09 +00:00

Author

Owner

Final-head scripts/verify fast transcript 6/8; head 0c163cb232; exit 1 (static size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence.

      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:204:1
    │  
204 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
205 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
206 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:248:1
    │  
248 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
249 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-mesh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-backup v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-relay v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-release v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-release v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-release v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │   │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)

Final-head scripts/verify fast transcript 6/8; head 0c163cb2328b14f0b33890703b69de9e8f9b9c2c; exit 1 (static size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence. ````text ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:204:1 │ 204 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 205 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 206 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:248:1 │ 248 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 249 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) ````

kayg commented

2026-10-12 16:15:10 +00:00

Author

Owner

Final-head scripts/verify fast transcript 7/8; head 0c163cb232; exit 1 (static size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence.

      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── (dev) infraternal v0.1.0 (*)
      │       ├── (dev) infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:251:1
    │  
251 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
252 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │       ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-release v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:254:1
    │  
254 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
255 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   ├── infraternal v0.1.0 (*)
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0
      │       │   └── infraternal-server v0.1.0
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── infraternal-fuzz v0.1.0 (*)
      │       ├── infraternal-fuzz v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:256:1
    │  
256 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
257 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   ├── infraternal v0.1.0 (*)
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal v0.1.0 (*)
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-fuzz v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-backup v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-relay v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-release v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   ├── infraternal-plugin-release v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   ├── infraternal-fuzz v0.1.0 (*)
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:314:1
    │  
314 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
315 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-release v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   ├── hyper v1.11.1

Final-head scripts/verify fast transcript 7/8; head 0c163cb2328b14f0b33890703b69de9e8f9b9c2c; exit 1 (static size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence. ````text │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:251:1 │ 251 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 252 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:254:1 │ 254 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 255 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:256:1 │ 256 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 257 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-r3/Cargo.lock:314:1 │ 314 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 315 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 ````

kayg commented

2026-10-12 16:15:11 +00:00

Author

Owner

Final-head scripts/verify fast transcript 8/8; head 0c163cb232; exit 1 (static size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence.

      │           │   │   ├── axum v0.8.9 (*)
      │           │   │   ├── axum-server v0.8.0 (*)
      │           │   │   ├── hyper-util v0.1.21
      │           │   │   │   ├── axum v0.8.9 (*)
      │           │   │   │   ├── axum-server v0.8.0 (*)
      │           │   │   │   ├── infraternal v0.1.0 (*)
      │           │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── (dev) infraternal v0.1.0 (*)
      │           ├── (dev) infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-mesh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-backup v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-relay v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-release v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
    Finished `release` profile [optimized] target(s) in 0.41s
/home/kayg/.cache/codex-scratch/access-rules-r3/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 21857264 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Final-head scripts/verify fast transcript 8/8; head 0c163cb2328b14f0b33890703b69de9e8f9b9c2c; exit 1 (static size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence. ````text │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Finished `release` profile [optimized] target(s) in 0.41s /home/kayg/.cache/codex-scratch/access-rules-r3/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 21857264 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ````

kayg commented

2026-10-12 16:16:04 +00:00

Author

Owner

Supplemental ts_verify_fast transcript 1/1; final head 0c163cb232; exit 0. Verbatim output. Incidental build-host timings are gate output, not performance evidence.


==> Vendored Ghostty artifact checksums
dist/ghostty-web.js: OK
dist/ghostty-vt.wasm: OK
dist/index.d.ts: OK

==> TypeScript protocol compiler

==> Tracer compiler, precompression and bundle transfer budget
bun install v1.4.2 (744846f84)

+ @types/bun@1.3.8
+ @types/node@22.19.0
+ @types/ws@8.5.10
+ playwright@1.61.1
+ typescript@5.9.3
+ ws@8.18.3
+ @scure/bip39@2.2.0
+ geist@1.7.2

38 packages installed [378.00ms]
$ bun x tsc --project tsconfig.json
bun test v1.4.2 (744846f84)

precompress.test.ts:
(pass) text sidecars round-trip deterministically; compressed formats remain identity [16.37ms]

browser-build.test.ts:
(pass) the browser renderer has no unresolved Vite Node-file shim request [15.17ms]

src/perf-detector.test.ts:
(pass) FrameDetector > estimates the refresh from the median and snaps it [0.57ms]
(pass) FrameDetector > nothing is a drop before the rate is known [0.07ms]
(pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.21ms]
(pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.17ms]
(pass) FrameDetector > the first frame after a pause is not an interval [0.05ms]
(pass) FrameDetector > fps, p95 and window read the ring [0.13ms]
(pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.23ms]
(pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.05ms]

src/canvas/recency.test.ts:
(pass) touch moves an item to the front and never duplicates it [0.21ms]
(pass) repeating the front item changes nothing [0.03ms]
(pass) the list is capped, so the oldest items fall off [0.03ms]
(pass) top skips items that are no longer live, without losing them [0.05ms]
(pass) recentRows: five used windows in reverse order of use, from 54 windows [0.13ms]
(pass) recentRows: a view with three windows and no use shows them in order [0.03ms]
(pass) recentRows: used windows lead, the rest fill up to five in window order [0.04ms]

src/canvas/windows/details-facts.test.ts:
(pass) host facts become plain-language details rows [0.63ms]
(pass) unknown optional host facts stay absent instead of appearing as placeholders [0.14ms]
(pass) extended info off: the machine tab shows only the essentials, ungrouped, and there is no More section [0.31ms]
(pass) extended info on: every fact sits under System, Resources or Access [0.17ms]
(pass) the header follows the machine's own facts, not the platform the host list guessed [0.11ms]
(pass) before facts arrive the host's platform names the header [0.04ms]
(pass) a reported system with no platform mark still names the header and shows no mark [0.04ms]

src/canvas/mesh/protocol.test.ts:
(pass) the server's own list becomes nodes, tags and grants, by name [0.57ms]
(pass) without `access` (today's server) the person may view and may not edit [0.25ms]
(pass) fields the server does not send are absent, never invented [0.27ms]
(pass) anything that is not a list is refused, whole [5.40ms]
(pass) a node's own tag list and the tag table agree even when a server sends only one [0.17ms]
(pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.25ms]
(pass) answers carry the new revision, and a create the new arrow's id [0.09ms]
(pass) endpoints go out as the server writes them: a node by id, a tag by name [0.08ms]

src/canvas/mesh/layout.test.ts:
(pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.66ms]
(pass) the layout is deterministic and does not depend on input order [1.80ms]
(pass) no two cards overlap, and every card lies inside the graph [4.24ms]
(pass) the sheet is wider than tall, roughly 16:10 [1.21ms]
(pass) a pinned node stays where it was put and the others do not move [1.62ms]
(pass) a pin beyond the sheet grows the graph [0.16ms]
(pass) a host's other tags do not move it; a tag nobody carries still has its node [0.15ms]
(pass) 1,000 nodes lay out in a few milliseconds [4.82ms]

src/canvas/layout/stops.test.ts:
(pass) a view that fits the viewport has one stop, centred [0.35ms]
(pass) a wide view has one stop per column and the last stop ends at the right edge [0.15ms]
(pass) a view taller than the viewport is scaled down so it fits [0.05ms]
(pass) nearestStop picks the stop whose centre is closest [0.13ms]
(pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.12ms]
(pass) a small graph keeps one stop per node column [0.07ms]
(pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.05ms]
(pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.06ms]

src/canvas/layout/grid.test.ts:
(pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [0.88ms]
(pass) closing the new half gives the layout back exactly, in the model [0.79ms]
(pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.47ms]
(pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.39ms]
(pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.58ms]
(pass) closing the window split down gives its band back to the window above and to the partner [0.31ms]
(pass) a window split down in a plain column stacks under it and moves the windows below down [0.08ms]
(pass) new window right opens a full-size column after the whole group, never inside it [0.26ms]
(pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.09ms]
(pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.09ms]
(pass) random sequences of split right, split down, new window right and close never break the grid [32.38ms]
(pass) closing every window of a group returns the view to nothing, with no problem on the way [0.29ms]
(pass) a full-width band under a group moves nothing and extends the group by one band [0.11ms]
(pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.07ms]

src/canvas/layout/geometry.test.ts:
(pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.72ms]
(pass) a chain of neighbours is pushed in turn [0.11ms]
(pass) snapping rounds to whole cells [0.04ms]
(pass) reach follows grants through tags and keeps the relay [0.16ms]
(pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.15ms]
(pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.03ms]
(pass) a desktop column is the same alone and in a strip [0.01ms]

src/canvas/sessions/live-inventory.test.ts:
(pass) a host snapshot replaces cached session rows and keeps only live shims [1.22ms]
(pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.45ms]
(pass) inventory remembers a remote session and refuses a cross-host attach [0.35ms]
(pass) superseded status snapshots release records for sessions this device never opened [1.06ms]
(pass) superseding a sidecar preserves status for a window opened on this device [0.11ms]
(pass) a census predating a new shell does not permanently retire its confirmed live ID [0.14ms]
(pass) a final Close before the first positive census never revives a new ID [0.06ms]
(pass) a later absence retires a new ID after its first positive census [0.09ms]
(pass) another host's census cannot clear a new shell's census fence [0.05ms]
(pass) another host's close cannot clear a new shell's census fence [0.01ms]

src/canvas/sessions/details-live.test.ts:
(pass) a refused host facts action stops its recurring timer [1.06ms]
(pass) a detected operating system supplies the live popover mark [0.62ms]

src/canvas/sessions/live.test.ts:
(pass) an enrolled host opens by UUID and splits keep that authority [0.64ms]
(pass) unknown and ambiguous labels never open an embedded shell [0.12ms]
(pass) removed hosts disappear from inventory and cannot route a new shell [0.10ms]

src/canvas/sessions/gone-review.test.ts:
(pass) selecting a known gone session keeps its final exited state [0.17ms]
(pass) a known retired status survives repeated selection and generic ended answers [0.11ms]

src/canvas/sessions/open-refusal.test.ts:
(pass) memory refusal retains the reason and current counters [0.59ms]
(pass) legacy refusals still work and malformed counters never reach the message [0.35ms]
(pass) product copy names the host and counters and never renders untrusted server text [0.49ms]
(pass) oversized refusal JSON is ignored before parsing [0.10ms]

src/canvas/model/document.test.ts:
(pass) a document holds references and layout, never content [0.32ms]
(pass) a document survives JSON and rebuilds the same columns [0.55ms]
(pass) a target that no longer exists is dropped, and an emptied column with it [0.07ms]
(pass) parseDocument rejects anything that is not a document of this format [0.23ms]
(pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.14ms]
(pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.28ms]
(pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.17ms]
(pass) a plain view is saved without spans or bands, exactly as before D212 [0.03ms]

src/canvas/addhost/real.test.ts:
(pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.17ms]
(pass) parsing the server's data > the server key needs its public key and fingerprint [0.04ms]
(pass) parsing the server's data > an install command needs a lifetime [0.03ms]
(pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [0.75ms]
(pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.14ms]
(pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [0.60ms]
(pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.11ms]
(pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.10ms]
(pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.06ms]
(pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.34ms]
(pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.29ms]

src/canvas/addhost/authority.on-demand.test.ts:
(pass) CA wrapping matches the contract's HKDF domain and separates generations [0.71ms]

src/canvas/addhost/model.test.ts:
(pass) stagesOf > a host with no event is waiting everywhere [0.13ms]
(pass) stagesOf > check before sign-in is detecting how to sign in [0.10ms]
(pass) stagesOf > the sign-in report finishes detect and starts the system check [0.07ms]
(pass) stagesOf > install, facts and connect map to install, enrol and first session [0.09ms]
(pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.18ms]
(pass) stagesOf > an unsupported host fails the system check, after sign-in [0.06ms]
(pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.03ms]
(pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.04ms]
(pass) authLabel > names the method and a trusted network provider only [0.03ms]
(pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.07ms]
(pass) guideFor > each failure kind names its fix [0.06ms]
(pass) guideFor > mesh-policy words say possible, not certain [0.03ms]
(pass) parseTarget > reads user, host and port [0.15ms]
(pass) parseTarget > refuses what cannot name a host [0.05ms]
(pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.32ms]
(pass) parseSshConfig > recognises config text [0.07ms]
(pass) parseSshConfig > a hostname that is an option is dropped [0.02ms]
(pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.04ms]
(pass) plain words > no headline carries an arrow, an id or an API noun [0.08ms]
(pass) only a completed canonical host identity becomes terminal authority [0.05ms]
(pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.04ms]
(pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.02ms]
(pass) matchListed > a name that is exactly one host's id or address names that host [0.07ms]
(pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.02ms]
(pass) matchListed > a partial name that starts several hosts names none and waits [0.02ms]
(pass) matchListed > a new name that starts no host is neither named nor waiting [0.04ms]
(pass) install diagnostics name the failed step and public host error [0.06ms]
(pass) missing payload tells the operator the architecture and expected server path [0.03ms]
(pass) an already added host says so and offers opening its existing terminal [0.02ms]
(pass) release payload verification names the architecture step and plain reason [0.02ms]

src/canvas/addhost/wizard.test.ts:
(pass) a saved-key prompt completing after close never starts an SSH attempt [0.40ms]
(pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.27ms]
(pass) ready CA begins the requested installation mode without another prompt [0.10ms]
(pass) closing during CA confirmation never starts an SSH attempt [0.27ms]
(pass) a typed root login requires explicit consent before any installation [0.16ms]

../../packages/ui/src/spring.test.ts:
(pass) a missed frame does not stretch a settled spring [0.47ms]
(pass) motion follows elapsed time across frame rates and damping regimes [0.33ms]

chunk-classes.test.ts:
(pass) the first screen is critical, the canvas product module and what only it uses are deferred [0.96ms]
(pass) a chunk that both sides use stays critical [0.22ms]
(pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.31ms]

test/recovery-ui.test.ts:
(pass) compiled recovery UI mode off obeys its URL boundary [3.27ms]
(pass) compiled recovery UI mode preview obeys its URL boundary [2.44ms]
(pass) compiled recovery UI mode 1 obeys its URL boundary [2.62ms]

test/recovery-crypto.test.ts:
(pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [8.88ms]
(pass) 100 repeated wrapping operations generate independent salts and nonces [18.11ms]

test/recovery-rotation.test.ts:
(pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [8.00ms]
(pass) abandoned word acknowledgement uploads nothing [2.84ms]
(pass) settled acknowledgement cannot upload later (dismissed) [2.28ms]
(pass) settled acknowledgement cannot upload later (no acknowledgement) [4.49ms]

test/recovery-wait.test.ts:
(pass) server remaining wait 0s is accepted through the capability policy maximum [0.95ms]
(pass) server remaining wait 86400s is accepted through the capability policy maximum [0.77ms]
(pass) server remaining wait 90000s is accepted through the capability policy maximum [1.38ms]
(pass) server remaining wait 172800s is accepted through the capability policy maximum [1.30ms]
(pass) malformed or excessive remaining wait -1 is denied [1.37ms]
(pass) malformed or excessive remaining wait 0.5 is denied [2.09ms]
(pass) malformed or excessive remaining wait 172801 is denied [1.88ms]
(pass) malformed or excessive remaining wait 9007199254740992 is denied [2.32ms]
(pass) malformed or excessive remaining wait 90000 is denied [2.07ms]

 168 pass
 0 fail
 11332 expect() calls
Ran 168 tests across 26 files. [250.00ms]
$ bun run build.ts
built chunk-z93cxfvm.js, chunk-bcrmm064.js, chunk-3g02wn4t.js, chunk-c2q5qwak.js, chunk-3nmsa7d6.js, chunk-p4pq9b17.js, chunk-a895a34j.js, chunk-gtm292qm.js, chunk-rrma8hz6.js, chunk-4s8p3j39.js, chunk-s0187cta.js, chunk-5s6a3m50.js, main.js, chunk-969atqet.js, chunk-15nnyy73.js, chunk-vxv25w33.js, chunk-y709mzbv.js, chunk-rbg25ctp.js, chunk-c1dgfc87.js, chunk-bgv5q0nk.js, chunk-yr0r38s4.js, chunk-8t7pe4ht.js, chunk-hhm62abh.js, chunk-axbkkqp1.js, chunk-5xjkbekn.js, chunk-yjzkm0g6.js, chunk-zh6pb9n5.js, chunk-11efxt1s.js, chunk-rknp2pfr.js, chunk-gnpre2zr.js, chunk-xrmxk0kn.js, chunk-30xbfa83.js, chunk-nnqx8f5p.js, chunk-y8hvsdsd.js, chunk-y2gsbb3z.js, chunk-3wk2km63.js, chunk-w6a5vvxw.js, chunk-q56hm25z.js, chunk-9xd3g65e.js, chunk-28rbcdd5.js, chunk-61xwpgvs.js, chunk-tda67ast.js, chunk-433eyr4g.js, chunk-6jx9txdk.js, chunk-5yjxbten.js, chunk-5j6j971b.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-f4ap83e3.js, chunk-f2r0hhqc.js, chunk-2bcfkj59.js, chunk-1gmd2m5q.js, chunk-3hdjksz1.js
critical chunk-p4pq9b17.js: identity=707 gzip=368 brotli=306 bytes
critical chunk-8t7pe4ht.js: identity=1104 gzip=666 brotli=604 bytes
critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-q56hm25z.js: identity=10693 gzip=4125 brotli=3760 bytes
onDemand chunk-nnqx8f5p.js: identity=11529 gzip=4656 brotli=4255 bytes
onDemand chunk-s0187cta.js: identity=6265 gzip=2106 brotli=1864 bytes
critical chunk-1gmd2m5q.js: identity=199 gzip=162 brotli=136 bytes
onDemand chunk-3wk2km63.js: identity=7662 gzip=3397 brotli=2981 bytes
critical chunk-bgv5q0nk.js: identity=2519 gzip=1008 brotli=876 bytes
onDemand chunk-2bcfkj59.js: identity=1063 gzip=653 brotli=521 bytes
critical chunk-c1dgfc87.js: identity=590 gzip=327 brotli=319 bytes
onDemand chunk-y2gsbb3z.js: identity=4640 gzip=1931 brotli=1703 bytes
critical faulty-terminal.worker.js: identity=1086 gzip=559 brotli=480 bytes
critical backdrop.worker.js: identity=243 gzip=212 brotli=165 bytes
critical chunk-f4ap83e3.js: identity=9810 gzip=4016 brotli=3459 bytes
onDemand chunk-5j6j971b.js: identity=2462 gzip=1109 brotli=936 bytes
onDemand chunk-5s6a3m50.js: identity=2108 gzip=1037 brotli=869 bytes
onDemand chunk-yjzkm0g6.js: identity=6198 gzip=2794 brotli=2528 bytes
critical chunk-a895a34j.js: identity=88 gzip=88 brotli=74 bytes
deferred chunk-c2q5qwak.js: identity=43000 gzip=16584 brotli=14608 bytes
deferred chunk-gnpre2zr.js: identity=97656 gzip=33163 brotli=29336 bytes
critical chunk-vxv25w33.js: identity=5443 gzip=2605 brotli=2380 bytes
critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes
critical chunk-bcrmm064.js: identity=4499 gzip=1856 brotli=1635 bytes
onDemand chunk-gtm292qm.js: identity=228 gzip=178 brotli=165 bytes
onDemand chunk-tda67ast.js: identity=48283 gzip=15177 brotli=13476 bytes
critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes
critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes
critical chunk-rbg25ctp.js: identity=17627 gzip=6251 brotli=5561 bytes
onDemand chunk-hhm62abh.js: identity=1026 gzip=623 brotli=503 bytes
onDemand chunk-15nnyy73.js: identity=2557 gzip=1180 brotli=1009 bytes
onDemand chunk-6jx9txdk.js: identity=6773 gzip=3176 brotli=2886 bytes
onDemand chunk-4s8p3j39.js: identity=191 gzip=170 brotli=130 bytes
critical chunk-y709mzbv.js: identity=15859 gzip=6182 brotli=5484 bytes
onDemand chunk-zh6pb9n5.js: identity=2824 gzip=1387 brotli=1196 bytes
critical chunk-yr0r38s4.js: identity=386 gzip=238 brotli=196 bytes
onDemand chunk-3nmsa7d6.js: identity=3891 gzip=1735 brotli=1516 bytes
onDemand chunk-3g02wn4t.js: identity=5784 gzip=2189 brotli=1938 bytes
onDemand chunk-rrma8hz6.js: identity=2420 gzip=1200 brotli=1077 bytes
onDemand chunk-30xbfa83.js: identity=540 gzip=353 brotli=318 bytes
critical chunk-5xjkbekn.js: identity=707945 gzip=204703 brotli=165886 bytes
onDemand chunk-rknp2pfr.js: identity=1616 gzip=866 brotli=739 bytes
onDemand chunk-w6a5vvxw.js: identity=13384 gzip=5030 brotli=4500 bytes
onDemand chunk-5yjxbten.js: identity=31922 gzip=12262 brotli=11022 bytes
critical main.js: identity=111029 gzip=40362 brotli=34985 bytes
critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes
onDemand chunk-11efxt1s.js: identity=4575 gzip=2013 brotli=1786 bytes
critical chunk-3hdjksz1.js: identity=42395 gzip=14485 brotli=12959 bytes
critical chunk-433eyr4g.js: identity=162 gzip=150 brotli=127 bytes
onDemand chunk-xrmxk0kn.js: identity=1170 gzip=706 brotli=622 bytes
onDemand chunk-y8hvsdsd.js: identity=5359 gzip=2579 brotli=2297 bytes
critical chunk-z93cxfvm.js: identity=21235 gzip=6857 brotli=6128 bytes
critical chunk-969atqet.js: identity=8377 gzip=3575 brotli=3180 bytes
JavaScript transfer, critical: identity=951648 gzip=294996/307200 brotli=245256/256000 bytes
JavaScript transfer, deferred: identity=140656 gzip=49747/51200 brotli=43944/45056 bytes
JavaScript transfer, onDemand: identity=185163 gzip=72632/20480 brotli=64597/18432 bytes
JavaScript transfer, onDemand largest chunk chunk-tda67ast.js: gzip=15177/20480 brotli=13476/18432 bytes (class total gzip=72632 brotli=64597, not limited)
fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes
fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes
fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes
fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes
fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes
fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes
fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes
fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes
fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes
fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes
fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes
fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes
fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes
fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes
fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes
fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes
fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes
fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes
fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes
fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes
Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes

==> Rust stream oracle (for the differential test)

==> TypeScript protocol tests
bun test v1.4.2 (744846f84)

src/mesh-review-revocation.test.ts:
(pass) review forbidden event cancels pending snapshot publication [2.63ms]
(pass) subscription forbidden ends delivery before a late refresh rejection [1.50ms]
(pass) subscription not found ends delivery before a late refresh rejection [1.16ms]
(pass) subscription invalid input ends delivery before a late refresh rejection [1.13ms]
(pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.11ms]
(pass) synchronous subscription refusal releases the transport exactly once [0.13ms]

src/codec.test.ts:
(pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [6.95ms]
(pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.18ms]
(pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.08ms]
(pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.13ms]
(pass) split mux header preserves trailing Close [0.22ms]

src/mesh-review-paged-error.test.ts:
(pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [2.71ms]
(pass) review earlier snapshot continuation cannot overwrite a delivered revision [2.87ms]
(pass) a newer paged event owns publication before an earlier refresh resumes [2.70ms]

src/mesh-review-refresh.test.ts:
(pass) review superseded refresh failure cannot replace authoritative resync [1.46ms]
(pass) superseded failure preserves a newer pending refresh [2.66ms]

src/stream.test.ts:
stream differential: 134 streams, 11439 schedules, zero divergences
(pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [2490.90ms]
(pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [7.44ms]

src/mesh.test.ts:
(pass) Mesh actions map to their typed action IDs and JSON inputs [1.96ms]
(pass) Mesh watch coalesces change bursts and never publishes an older revision [4.08ms]
(pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.09ms]

src/mesh-review-continuation.test.ts:
(pass) review continuation stops after stop [1.43ms]
(pass) review continuation stops after forbidden [1.24ms]
(pass) review continuation stops after superseded [1.14ms]

src/mesh-pagination.test.ts:
(pass) list assembles bounded pages using the same filter [0.30ms]
(pass) a changed revision discards earlier pages before assembling its restart [0.14ms]
(pass) malformed continuation is refused: {"revision":1,"offset":0} [0.15ms]
(pass) malformed continuation is refused: {"revision":2,"offset":1} [0.02ms]
(pass) malformed continuation is refused: {"revision":1,"offset":2} [0.01ms]
(pass) watch never publishes a partial page; withdrawn=false [1.40ms]
(pass) watch never publishes a partial page; withdrawn=true [1.25ms]
(pass) a superseding equal-revision resync wins over pending page assembly [1.50ms]

src/mesh-review-resync.test.ts:
(pass) review watch applies same-revision authoritative resync [0.15ms]
(pass) authoritative resync keeps priority over an equal-revision pending list [1.40ms]

src/mesh-vectors.test.ts:
(pass) every shared Mesh action vector passes through the typed client unchanged [1.11ms]
(pass) shared Mesh event vectors drive the typed watch adapter [5.07ms]

 36 pass
 0 fail
 34462 expect() calls
Ran 36 tests across 10 files. [2.57s]

Supplemental ts_verify_fast transcript 1/1; final head 0c163cb2328b14f0b33890703b69de9e8f9b9c2c; exit 0. Verbatim output. Incidental build-host timings are gate output, not performance evidence. ````text ==> Vendored Ghostty artifact checksums dist/ghostty-web.js: OK dist/ghostty-vt.wasm: OK dist/index.d.ts: OK ==> TypeScript protocol compiler ==> Tracer compiler, precompression and bundle transfer budget bun install v1.4.2 (744846f84) + @types/bun@1.3.8 + @types/node@22.19.0 + @types/ws@8.5.10 + playwright@1.61.1 + typescript@5.9.3 + ws@8.18.3 + @scure/bip39@2.2.0 + geist@1.7.2 38 packages installed [378.00ms] $ bun x tsc --project tsconfig.json bun test v1.4.2 (744846f84) precompress.test.ts: (pass) text sidecars round-trip deterministically; compressed formats remain identity [16.37ms] browser-build.test.ts: (pass) the browser renderer has no unresolved Vite Node-file shim request [15.17ms] src/perf-detector.test.ts: (pass) FrameDetector > estimates the refresh from the median and snaps it [0.57ms] (pass) FrameDetector > nothing is a drop before the rate is known [0.07ms] (pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.21ms] (pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.17ms] (pass) FrameDetector > the first frame after a pause is not an interval [0.05ms] (pass) FrameDetector > fps, p95 and window read the ring [0.13ms] (pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.23ms] (pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.05ms] src/canvas/recency.test.ts: (pass) touch moves an item to the front and never duplicates it [0.21ms] (pass) repeating the front item changes nothing [0.03ms] (pass) the list is capped, so the oldest items fall off [0.03ms] (pass) top skips items that are no longer live, without losing them [0.05ms] (pass) recentRows: five used windows in reverse order of use, from 54 windows [0.13ms] (pass) recentRows: a view with three windows and no use shows them in order [0.03ms] (pass) recentRows: used windows lead, the rest fill up to five in window order [0.04ms] src/canvas/windows/details-facts.test.ts: (pass) host facts become plain-language details rows [0.63ms] (pass) unknown optional host facts stay absent instead of appearing as placeholders [0.14ms] (pass) extended info off: the machine tab shows only the essentials, ungrouped, and there is no More section [0.31ms] (pass) extended info on: every fact sits under System, Resources or Access [0.17ms] (pass) the header follows the machine's own facts, not the platform the host list guessed [0.11ms] (pass) before facts arrive the host's platform names the header [0.04ms] (pass) a reported system with no platform mark still names the header and shows no mark [0.04ms] src/canvas/mesh/protocol.test.ts: (pass) the server's own list becomes nodes, tags and grants, by name [0.57ms] (pass) without `access` (today's server) the person may view and may not edit [0.25ms] (pass) fields the server does not send are absent, never invented [0.27ms] (pass) anything that is not a list is refused, whole [5.40ms] (pass) a node's own tag list and the tag table agree even when a server sends only one [0.17ms] (pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.25ms] (pass) answers carry the new revision, and a create the new arrow's id [0.09ms] (pass) endpoints go out as the server writes them: a node by id, a tag by name [0.08ms] src/canvas/mesh/layout.test.ts: (pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.66ms] (pass) the layout is deterministic and does not depend on input order [1.80ms] (pass) no two cards overlap, and every card lies inside the graph [4.24ms] (pass) the sheet is wider than tall, roughly 16:10 [1.21ms] (pass) a pinned node stays where it was put and the others do not move [1.62ms] (pass) a pin beyond the sheet grows the graph [0.16ms] (pass) a host's other tags do not move it; a tag nobody carries still has its node [0.15ms] (pass) 1,000 nodes lay out in a few milliseconds [4.82ms] src/canvas/layout/stops.test.ts: (pass) a view that fits the viewport has one stop, centred [0.35ms] (pass) a wide view has one stop per column and the last stop ends at the right edge [0.15ms] (pass) a view taller than the viewport is scaled down so it fits [0.05ms] (pass) nearestStop picks the stop whose centre is closest [0.13ms] (pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.12ms] (pass) a small graph keeps one stop per node column [0.07ms] (pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.05ms] (pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.06ms] src/canvas/layout/grid.test.ts: (pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [0.88ms] (pass) closing the new half gives the layout back exactly, in the model [0.79ms] (pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.47ms] (pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.39ms] (pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.58ms] (pass) closing the window split down gives its band back to the window above and to the partner [0.31ms] (pass) a window split down in a plain column stacks under it and moves the windows below down [0.08ms] (pass) new window right opens a full-size column after the whole group, never inside it [0.26ms] (pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.09ms] (pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.09ms] (pass) random sequences of split right, split down, new window right and close never break the grid [32.38ms] (pass) closing every window of a group returns the view to nothing, with no problem on the way [0.29ms] (pass) a full-width band under a group moves nothing and extends the group by one band [0.11ms] (pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.07ms] src/canvas/layout/geometry.test.ts: (pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.72ms] (pass) a chain of neighbours is pushed in turn [0.11ms] (pass) snapping rounds to whole cells [0.04ms] (pass) reach follows grants through tags and keeps the relay [0.16ms] (pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.15ms] (pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.03ms] (pass) a desktop column is the same alone and in a strip [0.01ms] src/canvas/sessions/live-inventory.test.ts: (pass) a host snapshot replaces cached session rows and keeps only live shims [1.22ms] (pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.45ms] (pass) inventory remembers a remote session and refuses a cross-host attach [0.35ms] (pass) superseded status snapshots release records for sessions this device never opened [1.06ms] (pass) superseding a sidecar preserves status for a window opened on this device [0.11ms] (pass) a census predating a new shell does not permanently retire its confirmed live ID [0.14ms] (pass) a final Close before the first positive census never revives a new ID [0.06ms] (pass) a later absence retires a new ID after its first positive census [0.09ms] (pass) another host's census cannot clear a new shell's census fence [0.05ms] (pass) another host's close cannot clear a new shell's census fence [0.01ms] src/canvas/sessions/details-live.test.ts: (pass) a refused host facts action stops its recurring timer [1.06ms] (pass) a detected operating system supplies the live popover mark [0.62ms] src/canvas/sessions/live.test.ts: (pass) an enrolled host opens by UUID and splits keep that authority [0.64ms] (pass) unknown and ambiguous labels never open an embedded shell [0.12ms] (pass) removed hosts disappear from inventory and cannot route a new shell [0.10ms] src/canvas/sessions/gone-review.test.ts: (pass) selecting a known gone session keeps its final exited state [0.17ms] (pass) a known retired status survives repeated selection and generic ended answers [0.11ms] src/canvas/sessions/open-refusal.test.ts: (pass) memory refusal retains the reason and current counters [0.59ms] (pass) legacy refusals still work and malformed counters never reach the message [0.35ms] (pass) product copy names the host and counters and never renders untrusted server text [0.49ms] (pass) oversized refusal JSON is ignored before parsing [0.10ms] src/canvas/model/document.test.ts: (pass) a document holds references and layout, never content [0.32ms] (pass) a document survives JSON and rebuilds the same columns [0.55ms] (pass) a target that no longer exists is dropped, and an emptied column with it [0.07ms] (pass) parseDocument rejects anything that is not a document of this format [0.23ms] (pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.14ms] (pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.28ms] (pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.17ms] (pass) a plain view is saved without spans or bands, exactly as before D212 [0.03ms] src/canvas/addhost/real.test.ts: (pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.17ms] (pass) parsing the server's data > the server key needs its public key and fingerprint [0.04ms] (pass) parsing the server's data > an install command needs a lifetime [0.03ms] (pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [0.75ms] (pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.14ms] (pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [0.60ms] (pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.11ms] (pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.10ms] (pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.06ms] (pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.34ms] (pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.29ms] src/canvas/addhost/authority.on-demand.test.ts: (pass) CA wrapping matches the contract's HKDF domain and separates generations [0.71ms] src/canvas/addhost/model.test.ts: (pass) stagesOf > a host with no event is waiting everywhere [0.13ms] (pass) stagesOf > check before sign-in is detecting how to sign in [0.10ms] (pass) stagesOf > the sign-in report finishes detect and starts the system check [0.07ms] (pass) stagesOf > install, facts and connect map to install, enrol and first session [0.09ms] (pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.18ms] (pass) stagesOf > an unsupported host fails the system check, after sign-in [0.06ms] (pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.03ms] (pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.04ms] (pass) authLabel > names the method and a trusted network provider only [0.03ms] (pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.07ms] (pass) guideFor > each failure kind names its fix [0.06ms] (pass) guideFor > mesh-policy words say possible, not certain [0.03ms] (pass) parseTarget > reads user, host and port [0.15ms] (pass) parseTarget > refuses what cannot name a host [0.05ms] (pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.32ms] (pass) parseSshConfig > recognises config text [0.07ms] (pass) parseSshConfig > a hostname that is an option is dropped [0.02ms] (pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.04ms] (pass) plain words > no headline carries an arrow, an id or an API noun [0.08ms] (pass) only a completed canonical host identity becomes terminal authority [0.05ms] (pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.04ms] (pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.02ms] (pass) matchListed > a name that is exactly one host's id or address names that host [0.07ms] (pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.02ms] (pass) matchListed > a partial name that starts several hosts names none and waits [0.02ms] (pass) matchListed > a new name that starts no host is neither named nor waiting [0.04ms] (pass) install diagnostics name the failed step and public host error [0.06ms] (pass) missing payload tells the operator the architecture and expected server path [0.03ms] (pass) an already added host says so and offers opening its existing terminal [0.02ms] (pass) release payload verification names the architecture step and plain reason [0.02ms] src/canvas/addhost/wizard.test.ts: (pass) a saved-key prompt completing after close never starts an SSH attempt [0.40ms] (pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.27ms] (pass) ready CA begins the requested installation mode without another prompt [0.10ms] (pass) closing during CA confirmation never starts an SSH attempt [0.27ms] (pass) a typed root login requires explicit consent before any installation [0.16ms] ../../packages/ui/src/spring.test.ts: (pass) a missed frame does not stretch a settled spring [0.47ms] (pass) motion follows elapsed time across frame rates and damping regimes [0.33ms] chunk-classes.test.ts: (pass) the first screen is critical, the canvas product module and what only it uses are deferred [0.96ms] (pass) a chunk that both sides use stays critical [0.22ms] (pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.31ms] test/recovery-ui.test.ts: (pass) compiled recovery UI mode off obeys its URL boundary [3.27ms] (pass) compiled recovery UI mode preview obeys its URL boundary [2.44ms] (pass) compiled recovery UI mode 1 obeys its URL boundary [2.62ms] test/recovery-crypto.test.ts: (pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [8.88ms] (pass) 100 repeated wrapping operations generate independent salts and nonces [18.11ms] test/recovery-rotation.test.ts: (pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [8.00ms] (pass) abandoned word acknowledgement uploads nothing [2.84ms] (pass) settled acknowledgement cannot upload later (dismissed) [2.28ms] (pass) settled acknowledgement cannot upload later (no acknowledgement) [4.49ms] test/recovery-wait.test.ts: (pass) server remaining wait 0s is accepted through the capability policy maximum [0.95ms] (pass) server remaining wait 86400s is accepted through the capability policy maximum [0.77ms] (pass) server remaining wait 90000s is accepted through the capability policy maximum [1.38ms] (pass) server remaining wait 172800s is accepted through the capability policy maximum [1.30ms] (pass) malformed or excessive remaining wait -1 is denied [1.37ms] (pass) malformed or excessive remaining wait 0.5 is denied [2.09ms] (pass) malformed or excessive remaining wait 172801 is denied [1.88ms] (pass) malformed or excessive remaining wait 9007199254740992 is denied [2.32ms] (pass) malformed or excessive remaining wait 90000 is denied [2.07ms] 168 pass 0 fail 11332 expect() calls Ran 168 tests across 26 files. [250.00ms] $ bun run build.ts built chunk-z93cxfvm.js, chunk-bcrmm064.js, chunk-3g02wn4t.js, chunk-c2q5qwak.js, chunk-3nmsa7d6.js, chunk-p4pq9b17.js, chunk-a895a34j.js, chunk-gtm292qm.js, chunk-rrma8hz6.js, chunk-4s8p3j39.js, chunk-s0187cta.js, chunk-5s6a3m50.js, main.js, chunk-969atqet.js, chunk-15nnyy73.js, chunk-vxv25w33.js, chunk-y709mzbv.js, chunk-rbg25ctp.js, chunk-c1dgfc87.js, chunk-bgv5q0nk.js, chunk-yr0r38s4.js, chunk-8t7pe4ht.js, chunk-hhm62abh.js, chunk-axbkkqp1.js, chunk-5xjkbekn.js, chunk-yjzkm0g6.js, chunk-zh6pb9n5.js, chunk-11efxt1s.js, chunk-rknp2pfr.js, chunk-gnpre2zr.js, chunk-xrmxk0kn.js, chunk-30xbfa83.js, chunk-nnqx8f5p.js, chunk-y8hvsdsd.js, chunk-y2gsbb3z.js, chunk-3wk2km63.js, chunk-w6a5vvxw.js, chunk-q56hm25z.js, chunk-9xd3g65e.js, chunk-28rbcdd5.js, chunk-61xwpgvs.js, chunk-tda67ast.js, chunk-433eyr4g.js, chunk-6jx9txdk.js, chunk-5yjxbten.js, chunk-5j6j971b.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-f4ap83e3.js, chunk-f2r0hhqc.js, chunk-2bcfkj59.js, chunk-1gmd2m5q.js, chunk-3hdjksz1.js critical chunk-p4pq9b17.js: identity=707 gzip=368 brotli=306 bytes critical chunk-8t7pe4ht.js: identity=1104 gzip=666 brotli=604 bytes critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-q56hm25z.js: identity=10693 gzip=4125 brotli=3760 bytes onDemand chunk-nnqx8f5p.js: identity=11529 gzip=4656 brotli=4255 bytes onDemand chunk-s0187cta.js: identity=6265 gzip=2106 brotli=1864 bytes critical chunk-1gmd2m5q.js: identity=199 gzip=162 brotli=136 bytes onDemand chunk-3wk2km63.js: identity=7662 gzip=3397 brotli=2981 bytes critical chunk-bgv5q0nk.js: identity=2519 gzip=1008 brotli=876 bytes onDemand chunk-2bcfkj59.js: identity=1063 gzip=653 brotli=521 bytes critical chunk-c1dgfc87.js: identity=590 gzip=327 brotli=319 bytes onDemand chunk-y2gsbb3z.js: identity=4640 gzip=1931 brotli=1703 bytes critical faulty-terminal.worker.js: identity=1086 gzip=559 brotli=480 bytes critical backdrop.worker.js: identity=243 gzip=212 brotli=165 bytes critical chunk-f4ap83e3.js: identity=9810 gzip=4016 brotli=3459 bytes onDemand chunk-5j6j971b.js: identity=2462 gzip=1109 brotli=936 bytes onDemand chunk-5s6a3m50.js: identity=2108 gzip=1037 brotli=869 bytes onDemand chunk-yjzkm0g6.js: identity=6198 gzip=2794 brotli=2528 bytes critical chunk-a895a34j.js: identity=88 gzip=88 brotli=74 bytes deferred chunk-c2q5qwak.js: identity=43000 gzip=16584 brotli=14608 bytes deferred chunk-gnpre2zr.js: identity=97656 gzip=33163 brotli=29336 bytes critical chunk-vxv25w33.js: identity=5443 gzip=2605 brotli=2380 bytes critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes critical chunk-bcrmm064.js: identity=4499 gzip=1856 brotli=1635 bytes onDemand chunk-gtm292qm.js: identity=228 gzip=178 brotli=165 bytes onDemand chunk-tda67ast.js: identity=48283 gzip=15177 brotli=13476 bytes critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes critical chunk-rbg25ctp.js: identity=17627 gzip=6251 brotli=5561 bytes onDemand chunk-hhm62abh.js: identity=1026 gzip=623 brotli=503 bytes onDemand chunk-15nnyy73.js: identity=2557 gzip=1180 brotli=1009 bytes onDemand chunk-6jx9txdk.js: identity=6773 gzip=3176 brotli=2886 bytes onDemand chunk-4s8p3j39.js: identity=191 gzip=170 brotli=130 bytes critical chunk-y709mzbv.js: identity=15859 gzip=6182 brotli=5484 bytes onDemand chunk-zh6pb9n5.js: identity=2824 gzip=1387 brotli=1196 bytes critical chunk-yr0r38s4.js: identity=386 gzip=238 brotli=196 bytes onDemand chunk-3nmsa7d6.js: identity=3891 gzip=1735 brotli=1516 bytes onDemand chunk-3g02wn4t.js: identity=5784 gzip=2189 brotli=1938 bytes onDemand chunk-rrma8hz6.js: identity=2420 gzip=1200 brotli=1077 bytes onDemand chunk-30xbfa83.js: identity=540 gzip=353 brotli=318 bytes critical chunk-5xjkbekn.js: identity=707945 gzip=204703 brotli=165886 bytes onDemand chunk-rknp2pfr.js: identity=1616 gzip=866 brotli=739 bytes onDemand chunk-w6a5vvxw.js: identity=13384 gzip=5030 brotli=4500 bytes onDemand chunk-5yjxbten.js: identity=31922 gzip=12262 brotli=11022 bytes critical main.js: identity=111029 gzip=40362 brotli=34985 bytes critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes onDemand chunk-11efxt1s.js: identity=4575 gzip=2013 brotli=1786 bytes critical chunk-3hdjksz1.js: identity=42395 gzip=14485 brotli=12959 bytes critical chunk-433eyr4g.js: identity=162 gzip=150 brotli=127 bytes onDemand chunk-xrmxk0kn.js: identity=1170 gzip=706 brotli=622 bytes onDemand chunk-y8hvsdsd.js: identity=5359 gzip=2579 brotli=2297 bytes critical chunk-z93cxfvm.js: identity=21235 gzip=6857 brotli=6128 bytes critical chunk-969atqet.js: identity=8377 gzip=3575 brotli=3180 bytes JavaScript transfer, critical: identity=951648 gzip=294996/307200 brotli=245256/256000 bytes JavaScript transfer, deferred: identity=140656 gzip=49747/51200 brotli=43944/45056 bytes JavaScript transfer, onDemand: identity=185163 gzip=72632/20480 brotli=64597/18432 bytes JavaScript transfer, onDemand largest chunk chunk-tda67ast.js: gzip=15177/20480 brotli=13476/18432 bytes (class total gzip=72632 brotli=64597, not limited) fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes ==> Rust stream oracle (for the differential test) ==> TypeScript protocol tests bun test v1.4.2 (744846f84) src/mesh-review-revocation.test.ts: (pass) review forbidden event cancels pending snapshot publication [2.63ms] (pass) subscription forbidden ends delivery before a late refresh rejection [1.50ms] (pass) subscription not found ends delivery before a late refresh rejection [1.16ms] (pass) subscription invalid input ends delivery before a late refresh rejection [1.13ms] (pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.11ms] (pass) synchronous subscription refusal releases the transport exactly once [0.13ms] src/codec.test.ts: (pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [6.95ms] (pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.18ms] (pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.08ms] (pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.13ms] (pass) split mux header preserves trailing Close [0.22ms] src/mesh-review-paged-error.test.ts: (pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [2.71ms] (pass) review earlier snapshot continuation cannot overwrite a delivered revision [2.87ms] (pass) a newer paged event owns publication before an earlier refresh resumes [2.70ms] src/mesh-review-refresh.test.ts: (pass) review superseded refresh failure cannot replace authoritative resync [1.46ms] (pass) superseded failure preserves a newer pending refresh [2.66ms] src/stream.test.ts: stream differential: 134 streams, 11439 schedules, zero divergences (pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [2490.90ms] (pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [7.44ms] src/mesh.test.ts: (pass) Mesh actions map to their typed action IDs and JSON inputs [1.96ms] (pass) Mesh watch coalesces change bursts and never publishes an older revision [4.08ms] (pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.09ms] src/mesh-review-continuation.test.ts: (pass) review continuation stops after stop [1.43ms] (pass) review continuation stops after forbidden [1.24ms] (pass) review continuation stops after superseded [1.14ms] src/mesh-pagination.test.ts: (pass) list assembles bounded pages using the same filter [0.30ms] (pass) a changed revision discards earlier pages before assembling its restart [0.14ms] (pass) malformed continuation is refused: {"revision":1,"offset":0} [0.15ms] (pass) malformed continuation is refused: {"revision":2,"offset":1} [0.02ms] (pass) malformed continuation is refused: {"revision":1,"offset":2} [0.01ms] (pass) watch never publishes a partial page; withdrawn=false [1.40ms] (pass) watch never publishes a partial page; withdrawn=true [1.25ms] (pass) a superseding equal-revision resync wins over pending page assembly [1.50ms] src/mesh-review-resync.test.ts: (pass) review watch applies same-revision authoritative resync [0.15ms] (pass) authoritative resync keeps priority over an equal-revision pending list [1.40ms] src/mesh-vectors.test.ts: (pass) every shared Mesh action vector passes through the typed client unchanged [1.11ms] (pass) shared Mesh event vectors drive the typed watch adapter [5.07ms] 36 pass 0 fail 34462 expect() calls Ran 36 tests across 10 files. [2.57s] ````

kayg commented

2026-10-12 16:16:05 +00:00

Author

Owner

Round 3 verification finished on access-rules-r3, pushed head 0c163cb232. Six atomic documentation commits; only round3-soundness.md, round3-coverage.md and round3-surfaces.md differ from supplied v3 base b92e846d. Spec/decisions/product code unchanged; no deployment. V3 is not ready to approve: 12 distinct findings = P0 2 / P1 9 / P2 1. Accepted historical AR-13/AR-14/R2-C09 are not new findings.

Top five:

R3S-02 P0: shared controller/token-created terminal can inherit opener person identity on later mesh login, exceeding existing-session/token scope.
R3S-01 P0: community unconfirmed target-name inference conflicts with the latest brief confirmed-personal-only Q3; historical #186 Q3 allowed inference, explicitly recorded as a contract discrepancy.
R3C-01 P1: universal unconditional rule-edit authority conflicts with narrow D237 personal join/remove and delegated machine admission.
R3C-02 P1: use-role grammar cannot hold member command/destination operands without losing constraints or hiding them.
R3S-03 P1: Q8 30-day unused terminal/AI sign-out, 7/30/90/Never settings and last-use/refresh boundary absent.

Other findings: R3S-04 AI own device-code/MCP sign-in and self-reported label lifecycle; R3C-03 unattended maintenance principal; R3F-01 check envelope version 2/3 mismatch; R3F-02 all-IP concrete attempt representation; R3F-03 atomic batch/mode wire shape; R3F-04 sentence readability; R3F-05 decoded control/bidi label rendering. Every finding has named scenario, model evidence, failure and minimum repair in the reports.

Evidence: 99/99 exact historical ID replays with v2/v3 scenario verdicts; 322560 symbolic class shapes reduced through explicit predicates (not executed authorization tests); all 8 inherited safety properties/lifecycle scenarios. 30 capability areas; 9 organizations × 12 rules = 108. 12 expanded surface/check records, 27 valid JSON blocks. Scratch parser/printer source preserved in surfaces appendix: Unicode 16.0.0, seed 18603, 10000 full-body round trips/0 failures, 33/33 canonical examples, 7 independent spec pairs, 23 hostile-name classes, 17/17 malformed refused. Not a production parser, full authorization validator, Unicode conformance proof, UI test or performance measurement.

Self-review completed against PROCESS §2, historical soundness lifecycle/compatibility, coverage decision/profile and surfaces lexical/adapter checklists. Report integrity and git diff --check pass. Full final-head scripts/verify fast exits 1 only on unchanged static binary size: 21857264 vs 16404816 bytes. Every other Rust row passes. Earlier readiness test failure passed focused 1/1 and refreshed workspace; no #118 waiver used. Rust dispatcher skips aarch64/TypeScript after static failure; supplemental ts_verify_fast exits 0, including compiler/unit/production build/byte budget/differential and 36 final protocol tests, 34462 assertions. Full final gate output posted verbatim in 8 preceding comments; supplemental transcript posted separately. D243 size reduction is needed on integration line; no budget changed. Job scratch/build cleanup follows successful issue upload; executable probe source survives in report appendix. Issue remains open.

Final-head fast gate tail, verbatim:


==> static builds
    Finished `release` profile [optimized] target(s) in 0.41s
/home/kayg/.cache/codex-scratch/access-rules-r3/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 21857264 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Round 3 verification finished on access-rules-r3, pushed head 0c163cb2328b14f0b33890703b69de9e8f9b9c2c. Six atomic documentation commits; only round3-soundness.md, round3-coverage.md and round3-surfaces.md differ from supplied v3 base b92e846d. Spec/decisions/product code unchanged; no deployment. V3 is not ready to approve: 12 distinct findings = P0 2 / P1 9 / P2 1. Accepted historical AR-13/AR-14/R2-C09 are not new findings. Top five: 1. R3S-02 P0: shared controller/token-created terminal can inherit opener person identity on later mesh login, exceeding existing-session/token scope. 2. R3S-01 P0: community unconfirmed target-name inference conflicts with the latest brief confirmed-personal-only Q3; historical #186 Q3 allowed inference, explicitly recorded as a contract discrepancy. 3. R3C-01 P1: universal unconditional rule-edit authority conflicts with narrow D237 personal join/remove and delegated machine admission. 4. R3C-02 P1: use-role grammar cannot hold member command/destination operands without losing constraints or hiding them. 5. R3S-03 P1: Q8 30-day unused terminal/AI sign-out, 7/30/90/Never settings and last-use/refresh boundary absent. Other findings: R3S-04 AI own device-code/MCP sign-in and self-reported label lifecycle; R3C-03 unattended maintenance principal; R3F-01 check envelope version 2/3 mismatch; R3F-02 all-IP concrete attempt representation; R3F-03 atomic batch/mode wire shape; R3F-04 sentence readability; R3F-05 decoded control/bidi label rendering. Every finding has named scenario, model evidence, failure and minimum repair in the reports. Evidence: 99/99 exact historical ID replays with v2/v3 scenario verdicts; 322560 symbolic class shapes reduced through explicit predicates (not executed authorization tests); all 8 inherited safety properties/lifecycle scenarios. 30 capability areas; 9 organizations × 12 rules = 108. 12 expanded surface/check records, 27 valid JSON blocks. Scratch parser/printer source preserved in surfaces appendix: Unicode 16.0.0, seed 18603, 10000 full-body round trips/0 failures, 33/33 canonical examples, 7 independent spec pairs, 23 hostile-name classes, 17/17 malformed refused. Not a production parser, full authorization validator, Unicode conformance proof, UI test or performance measurement. Self-review completed against PROCESS §2, historical soundness lifecycle/compatibility, coverage decision/profile and surfaces lexical/adapter checklists. Report integrity and git diff --check pass. Full final-head scripts/verify fast exits 1 only on unchanged static binary size: 21857264 vs 16404816 bytes. Every other Rust row passes. Earlier readiness test failure passed focused 1/1 and refreshed workspace; no #118 waiver used. Rust dispatcher skips aarch64/TypeScript after static failure; supplemental ts_verify_fast exits 0, including compiler/unit/production build/byte budget/differential and 36 final protocol tests, 34462 assertions. Full final gate output posted verbatim in 8 preceding comments; supplemental transcript posted separately. D243 size reduction is needed on integration line; no budget changed. Job scratch/build cleanup follows successful issue upload; executable probe source survives in report appendix. Issue remains open. Final-head fast gate tail, verbatim: ```text ==> static builds Finished `release` profile [optimized] target(s) in 0.41s /home/kayg/.cache/codex-scratch/access-rules-r3/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 21857264 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented

2026-10-12 16:16:47 +00:00

Author

Owner

Finish record correction: the branch contains five atomic documentation commits, not six (git rev-list --count b92e846d..HEAD = 5). Head remains 0c163cb232; findings/gate/evidence unchanged. Only the three round3 reports differ. Temporary job build/parser cache and generated scripts/pycache are being removed after complete transcript upload; probe source remains in the surfaces report.

Finish record correction: the branch contains five atomic documentation commits, not six (git rev-list --count b92e846d..HEAD = 5). Head remains 0c163cb2328b14f0b33890703b69de9e8f9b9c2c; findings/gate/evidence unchanged. Only the three round3 reports differ. Temporary job build/parser cache and generated scripts/__pycache__ are being removed after complete transcript upload; probe source remains in the surfaces report.

kayg commented

2026-10-12 16:19:48 +00:00

Author

Owner

Starting spec v4 on access-rules-v4, base b92e846da9 from the explicitly supplied origin/access-rules-v3. Read #186 history (98 comments), parent #147, required repository docs and round-three findings. Documentation only: import three reports unchanged, resolve 9 P1 and 1 P2, fold Q8/AI decisions, retain R3S-01/02 as open owner questions with the supplied recommendations, and trace all 111 IDs. Push explicitly authorized by this job; no deployment or product code. No performance measurements required.

Starting spec v4 on access-rules-v4, base b92e846da90ec56b7f403b55f514a4755b211107 from the explicitly supplied origin/access-rules-v3. Read #186 history (98 comments), parent #147, required repository docs and round-three findings. Documentation only: import three reports unchanged, resolve 9 P1 and 1 P2, fold Q8/AI decisions, retain R3S-01/02 as open owner questions with the supplied recommendations, and trace all 111 IDs. Push explicitly authorized by this job; no deployment or product code. No performance measurements required.

kayg commented

2026-10-12 16:26:24 +00:00

Author

Owner

Completed documentation steps on access-rules-v4: 641efce2 imported 3 round-three reports byte-identically; 3ff448cd folded Q8/AI lifecycle (30 unused days, qualifying use, inference suppression, one chip, mandatory MCP sign-in, retained token-created provenance); 8fa30555 resolves R3C-01/02/03 with bounded lifecycle actions, printable role operands and plugin maintenance identities; bea4a148 resolves R3F-01..05 with V3 checks, concrete IP attempts, atomic batch/mode types and query codec, human wording and visible decoded-control escaping; ea4967cd traces all 111 IDs and records two open P0 owner questions with supplied recommendations. Evidence: docs/design/access-rules.md and imported reports. Integrity: 111 distinct IDs match source headings; P0=36/P1=58/P2=17; 101 resolved, 3 accepted P2, 5 historical partials linked to 2 open P0s. 3 JSON blocks parse. Full fast gate compiling unchanged source; final output will follow. No product code or performance claims.

Completed documentation steps on access-rules-v4: 641efce2 imported 3 round-three reports byte-identically; 3ff448cd folded Q8/AI lifecycle (30 unused days, qualifying use, inference suppression, one chip, mandatory MCP sign-in, retained token-created provenance); 8fa30555 resolves R3C-01/02/03 with bounded lifecycle actions, printable role operands and plugin maintenance identities; bea4a148 resolves R3F-01..05 with V3 checks, concrete IP attempts, atomic batch/mode types and query codec, human wording and visible decoded-control escaping; ea4967cd traces all 111 IDs and records two open P0 owner questions with supplied recommendations. Evidence: docs/design/access-rules.md and imported reports. Integrity: 111 distinct IDs match source headings; P0=36/P1=58/P2=17; 101 resolved, 3 accepted P2, 5 historical partials linked to 2 open P0s. 3 JSON blocks parse. Full fast gate compiling unchanged source; final output will follow. No product code or performance claims.

kayg commented

2026-10-12 16:29:10 +00:00

Author

Owner

Self-review/evidence steps committed and pushed: 0c73e275 aligns inherited envelope states, row revisions, concrete actor fields and the unverified sharing promise; 2ba35726 adds docs/design/access-rules-verification/v4-resolution-checks.md with all 12 scenario replays and current evidence. Terminal sign-out suppresses L1 reentry; expired AI credentials refuse as delegates without signing out an independent human. Mechanical checks: 111/111 unique source IDs and severities, 3 JSON blocks parse with schema refs resolved, 3/3 round-three imports byte-identical, git diff --check passes. Retained RuleBodyV3 probe: 33/33 examples, 7 independent pairs, 10000 full-body round trips/0 failures, 23 hostile-name classes (Unicode 16.0.0), 17/17 malformed refused. Structural duplicate-ending permissiveness is explicitly documented; semantic validator must refuse. Probe does not test new maintenance/attempt/mutation authority or UI. Final head is 2ba35726; fast milestone still running, followed by final-head gate. Two open owner questions are R3S-01/02, with recommendations written in the spec; not approved defaults.

Self-review/evidence steps committed and pushed: 0c73e275 aligns inherited envelope states, row revisions, concrete actor fields and the unverified sharing promise; 2ba35726 adds docs/design/access-rules-verification/v4-resolution-checks.md with all 12 scenario replays and current evidence. Terminal sign-out suppresses L1 reentry; expired AI credentials refuse as delegates without signing out an independent human. Mechanical checks: 111/111 unique source IDs and severities, 3 JSON blocks parse with schema refs resolved, 3/3 round-three imports byte-identical, git diff --check passes. Retained RuleBodyV3 probe: 33/33 examples, 7 independent pairs, 10000 full-body round trips/0 failures, 23 hostile-name classes (Unicode 16.0.0), 17/17 malformed refused. Structural duplicate-ending permissiveness is explicitly documented; semantic validator must refuse. Probe does not test new maintenance/attempt/mutation authority or UI. Final head is 2ba35726; fast milestone still running, followed by final-head gate. Two open owner questions are R3S-01/02, with recommendations written in the spec; not approved defaults.

kayg commented

2026-10-12 16:36:45 +00:00

Author

Owner

Owner answers 2026-10-12 to round 3:

R3S-01: (a) — community name matching applies only on machines the person added, or that an admin marked "names match people here"; elsewhere the first login asks for the one-time sign-in.
R3S-02: sharing a session creates short-lived, visible rules for the time sharing is active: "Bob can control Alice's session "deploy-shell" until 16:00" (added by Alice when sharing); connecting onwards is a separate opt-in that adds "Bob can connect to other machines as Alice from "deploy-shell" until 16:00". Without it, outgoing mesh connections from the shared session are refused with a plain reason. Stopping sharing, expiry, or Alice losing access removes both (D242 cut-off). Audit records "Bob, through Alice's session". Same for AI agents.

Owner answers 2026-10-12 to round 3: - R3S-01: (a) — community name matching applies only on machines the person added, or that an admin marked "names match people here"; elsewhere the first login asks for the one-time sign-in. - R3S-02: sharing a session creates short-lived, visible rules for the time sharing is active: "Bob can control Alice's session \"deploy-shell\" until 16:00" (added by Alice when sharing); connecting onwards is a separate opt-in that adds "Bob can connect to other machines as Alice from \"deploy-shell\" until 16:00". Without it, outgoing mesh connections from the shared session are refused with a plain reason. Stopping sharing, expiry, or Alice losing access removes both (D242 cut-off). Audit records "Bob, through Alice's session". Same for AI agents.

kayg commented

2026-10-12 16:53:27 +00:00

Author

Owner

PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 21857264 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Gate finding on docs-only v4: milestone scripts/verify fast exits 1 only on unchanged x86_64 static size, 21857264 bytes vs 16404816 maximum (5452448 over). fmt/native fmt/CLI compile-out/clippy/workspace tests/cargo-deny PASS. The same size was recorded on v3 and round-three reports; all non-documentation sources are unchanged from b92e846d. No budget waiver or #118 exception. D243 size integration work is needed outside this spec brief. Final-head 2ba357265b7a235938fff004d606704332881b8c gate is running; skipped TypeScript rows will be checked supplementally. Verbatim milestone tail: ```text PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 21857264 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented

2026-10-12 17:02:22 +00:00

Author

Owner

Final-head scripts/verify fast transcript 1/13; head 2ba357265b; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence.

Running as unit: run-p3590392-i16171616.scope; invocation ID: 0e97372fb41847f7a2264ee084646450
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=299.90 p99_ms=321.14 result=PASS

==> fmt

==> VT native fmt

==> CLI plugin compile-out
disabled CLI plugin dependencies: absent from normal dependency graph
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.14s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal-d0028d263474a180)

running 24 tests
test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok
test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok
test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok
test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok
test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok
test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok
test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok
test status_tests::custom_named_server_service_is_reported_as_running ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok

test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s


==> clippy
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.62s

==> test
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.47s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal-d549e36661370196)

running 65 tests
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok
test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok
test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test status_tests::custom_named_server_service_is_reported_as_running ... ok
test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok
test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok

test result: ok. 65 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.08s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/agent_daemon-5de2ce691037a6fb)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.15s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/agent_queues-e091edc68b27f96c)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 34.93s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/agent_review-d94b1e14e60e4ef2)

running 8 tests
test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.63s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/agent_sessions-02290b123f5f2fd1)

running 3 tests
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok
test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok
test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.69s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/idle_canary-26b2a47f3626ff86)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.19s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/remote_output-174b9538baf046d1)

running 1 test
test remote_refusal_matches_its_declared_cli_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/session_bounds_review-72c64f17fd25b658)

running 1 test
test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.05s

     Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/session_exit_events-11a4cce005fc09ec)

running 1 test
test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.24s

     Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/session_retention-2365452bec4dac67)

running 1 test
test bounded_owned_exit_reconnects_as_ended_with_status ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.80s

     Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/setup_output-0aeb77f16924cef7)

running 1 test
test setup_output_keeps_legacy_and_versioned_readers ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/shim-c81baaf26e3012d1)

running 13 tests
test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok
test unowned_normal_exit_retires_promptly_and_records_status ... ok
test double_fork_survives_parent_death ... ok
test detached_shell_exit_reaps_shim_within_one_second ... ok
test disallowed_signal_only_disconnects_peer ... ok
test replacement_connection_and_malformed_limit ... ok
active
test real_shell_reconnect_resize_and_delivered_exit ... ok
test user_scope_survives_parent_unit_stop ... ok
test owned_exit_releases_promptly_on_window_close ... ok
test delivered_exit_cannot_release_another_owning_window ... ok
test attached_backpressure_and_detached_progress ... ok
test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.21s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/ssh_askpass-617ca478b5d79487)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/vt_credit-0a8dc350571af348)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.12s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/vt_reconnect-ecf739816bc14d42)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.41s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_agent-dc304b9d51d0941a)

running 86 tests
test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok
test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok
test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok
test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok
test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok
test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok
test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok
test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok

Final-head scripts/verify fast transcript 1/13; head 2ba357265b7a235938fff004d606704332881b8c; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence. ```text Running as unit: run-p3590392-i16171616.scope; invocation ID: 0e97372fb41847f7a2264ee084646450 METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=299.90 p99_ms=321.14 result=PASS ==> fmt ==> VT native fmt ==> CLI plugin compile-out disabled CLI plugin dependencies: absent from normal dependency graph Finished `test` profile [unoptimized + debuginfo] target(s) in 0.14s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal-d0028d263474a180) running 24 tests test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok test status_tests::custom_named_server_service_is_reported_as_running ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s ==> clippy Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.62s ==> test Finished `test` profile [unoptimized + debuginfo] target(s) in 0.47s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal-d549e36661370196) running 65 tests test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test status_tests::custom_named_server_service_is_reported_as_running ... ok test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test result: ok. 65 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.08s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/agent_daemon-5de2ce691037a6fb) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 33.15s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/agent_queues-e091edc68b27f96c) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 34.93s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/agent_review-d94b1e14e60e4ef2) running 8 tests test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.63s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/agent_sessions-02290b123f5f2fd1) running 3 tests test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.69s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/idle_canary-26b2a47f3626ff86) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.19s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/remote_output-174b9538baf046d1) running 1 test test remote_refusal_matches_its_declared_cli_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/session_bounds_review-72c64f17fd25b658) running 1 test test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.05s Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/session_exit_events-11a4cce005fc09ec) running 1 test test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.24s Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/session_retention-2365452bec4dac67) running 1 test test bounded_owned_exit_reconnects_as_ended_with_status ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.80s Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/setup_output-0aeb77f16924cef7) running 1 test test setup_output_keeps_legacy_and_versioned_readers ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/shim-c81baaf26e3012d1) running 13 tests test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok test unowned_normal_exit_retires_promptly_and_records_status ... ok test double_fork_survives_parent_death ... ok test detached_shell_exit_reaps_shim_within_one_second ... ok test disallowed_signal_only_disconnects_peer ... ok test replacement_connection_and_malformed_limit ... ok active test real_shell_reconnect_resize_and_delivered_exit ... ok test user_scope_survives_parent_unit_stop ... ok test owned_exit_releases_promptly_on_window_close ... ok test delivered_exit_cannot_release_another_owning_window ... ok test attached_backpressure_and_detached_progress ... ok test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.21s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/ssh_askpass-617ca478b5d79487) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.11s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/vt_credit-0a8dc350571af348) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.12s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/vt_reconnect-ecf739816bc14d42) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.41s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_agent-dc304b9d51d0941a) running 86 tests test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000 test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok ```

kayg commented

2026-10-12 17:02:23 +00:00

Author

Owner

Final-head scripts/verify fast transcript 2/13; head 2ba357265b; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence.

test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok
test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok
test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok
test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok
test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok
test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok
test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok
test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok

test result: ok. 74 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 11.09s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/transport-02d53fbe758b717f)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_mesh-25b71fd0307aac40)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/default_arrow-6d2e8df0e7b48da6)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/properties-cb03b103616f12c2)

running 14 tests
test overlaps_are_reported_without_silent_range_changes ... ok
test names_versions_and_backend_status ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test directional_grants_union_and_minimal_updates ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.75s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/rotation_time-961162d4330c2fec)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_plugin_api-c495c2150d66af78)

running 20 tests
test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok
test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok
test action::tests::registry_rejects_inconsistent_json_schemas ... ok
test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok
test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok
test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok
test tests::registry_routes_only_declared_actions ... ok
test tests::machine_actions_are_declared_without_entering_human_discovery ... ok
test tests::notifications_are_declared_json_bounded_and_drained_once ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::operator_presentation_cannot_follow_a_private_control_action ... ok
test tests::public_dispatch_cannot_call_a_machine_control_action ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test release_version::tests::accepts_only_worker_version_forms ... ok
test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok

test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/routing_review-b99b0b882dabc235)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_plugin_backup-a417bdd50ad1b333)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_plugin_host_facts-4f71949982aad5d8)

running 13 tests
test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok
test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::configured_memory_floor_refuses_with_current_host_counters ... ok
test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_plugin_mesh-1b760e879d6cc016)

running 25 tests
test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok
test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing.
test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok
test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok
test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok
test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok
test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok
test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok
test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok
test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok
test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok
test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok
test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok
test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok
test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok
test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok
test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok
test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok

test result: ok. 17 passed; 0 failed; 8 ignored; 0 measured; 0 filtered out; finished in 0.19s

     Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/configuration-836876ba6734f0d1)

running 4 tests
test edition_default_is_explicit_and_build_selected ... ok
test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok
test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok
test large_valid_port_policy_is_split_without_a_port_count_cap ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.69s

     Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/kernel-8886a63e9998e503)

running 6 tests
test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/restart_route_ownership-915aa90068a8947f)

running 1 test
test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

Final-head scripts/verify fast transcript 2/13; head 2ba357265b7a235938fff004d606704332881b8c; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence. ```text test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok test result: ok. 74 passed; 0 failed; 12 ignored; 0 measured; 0 filtered out; finished in 11.09s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/transport-02d53fbe758b717f) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_mesh-25b71fd0307aac40) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/default_arrow-6d2e8df0e7b48da6) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/properties-cb03b103616f12c2) running 14 tests test overlaps_are_reported_without_silent_range_changes ... ok test names_versions_and_backend_status ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test directional_grants_union_and_minimal_updates ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test addresses_are_unique_stable_and_not_recycled ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.75s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/rotation_time-961162d4330c2fec) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_plugin_api-c495c2150d66af78) running 20 tests test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok test action::tests::registry_rejects_inconsistent_json_schemas ... ok test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok test tests::registry_routes_only_declared_actions ... ok test tests::machine_actions_are_declared_without_entering_human_discovery ... ok test tests::notifications_are_declared_json_bounded_and_drained_once ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::operator_presentation_cannot_follow_a_private_control_action ... ok test tests::public_dispatch_cannot_call_a_machine_control_action ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test component_tests::component_declarations_cannot_create_servers ... ok test release_version::tests::accepts_only_worker_version_forms ... ok test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/routing_review-b99b0b882dabc235) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_plugin_backup-a417bdd50ad1b333) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_plugin_host_facts-4f71949982aad5d8) running 13 tests test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::configured_memory_floor_refuses_with_current_host_counters ... ok test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_plugin_mesh-1b760e879d6cc016) running 25 tests test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing. test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok test result: ok. 17 passed; 0 failed; 8 ignored; 0 measured; 0 filtered out; finished in 0.19s Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/configuration-836876ba6734f0d1) running 4 tests test edition_default_is_explicit_and_build_selected ... ok test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok test large_valid_port_policy_is_split_without_a_port_count_cap ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.69s Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/kernel-8886a63e9998e503) running 6 tests test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/restart_route_ownership-915aa90068a8947f) running 1 test test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s ```

kayg commented

2026-10-12 17:02:24 +00:00

Author

Owner

Final-head scripts/verify fast transcript 3/13; head 2ba357265b; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence.

     Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/review_endpoint_transaction-466627b0ed41f23e)

running 1 test
test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/review_ingress_translation-bd8664555dc4f00b)

running 2 tests
test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/review_local_delivery-b93d5857cea9a210)

running 2 tests
test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/review_restart_routes-2842f5c26f6abc6e)

running 1 test
test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/review_route_inventory-0efd1dc3b9824c23)

running 2 tests
test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/review_route_scope-2cbe953ad2ece6af)

running 1 test
test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/review_shutdown_budget-cb0fcfe1b2aad42f)

running 1 test
test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/review_shutdown_restart-c5e07544297f612a)

running 3 tests
test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof.
test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.
test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.

test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/settings.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/settings-0d4e5c1ccc396650)

running 1 test
test default_switch_requires_owner_freshness_and_the_preview_revision ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/store.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/store-653d928dd28e0534)

running 5 tests
test absent_discovery_preserves_the_last_known_endpoint ... ok
test required_server_membership_cannot_be_deleted ... ok
test key_replacement_preserves_identity_and_addresses_after_restart ... ok
test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok
test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.58s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_plugin_relay-d765ce907b6d6285)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_plugin_release-d9a3a22170648e3d)

running 8 tests
test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency
test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok
test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok
test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok
test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok
test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok
test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok
test latest::tests::cancellation_joins_verification ... ok

test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.58s

     Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/review_pool-7342401812584e29)

running 1 test
test pending_channel_writers_preserve_authority_read_capacity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.72s

     Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/review_restart-433d5f6159022764)

running 2 tests
test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification
test restarted_latest_reclaims_metadata_after_process_stop ... ok

test result: ok. 1 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.13s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_plugin_remote-befabe8c66488616)

running 12 tests
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.12s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_plugin_ssh-8fc5a3d5ae8e8da5)

running 13 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 12 filtered out; finished in 0.00s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok

test result: ok. 12 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/auth_order-a6672937b409eb18)

running 6 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/build_removal-ea54acad90939da0)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.87s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/concurrency-84194037b61b4a88)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test component_off_retires_a_real_native_helper ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/config_isolation-7ef0e56361e7afa9)

running 2 tests
test synthetic_master_socket_is_private_at_creation ... ok
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/credentials-d8295318c2cb85c8)

running 3 tests
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/diagnostics-07214f0a23810c1c)

running 8 tests
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test status_mapping_preserves_authentication_and_missing_payload_classification ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test every_failed_step_names_the_step_and_a_next_action ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/event_metadata-44d697ac35cff957)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/foreground-a7c134dfcb5c5797)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/host_trust-956578b69494d660)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/install-c9a4eb681da6c6e1)

running 30 tests
test command_failure_names_upload_join_install_and_start_separately ... ok
test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.61s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/model-8d8a118fb482cb01)

running 5 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/payload_source.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/payload_source-2b9cf9e8f172fa9d)

running 2 tests

Final-head scripts/verify fast transcript 3/13; head 2ba357265b7a235938fff004d606704332881b8c; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence. ```text Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/review_endpoint_transaction-466627b0ed41f23e) running 1 test test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/review_ingress_translation-bd8664555dc4f00b) running 2 tests test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/review_local_delivery-b93d5857cea9a210) running 2 tests test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/review_restart_routes-2842f5c26f6abc6e) running 1 test test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/review_route_inventory-0efd1dc3b9824c23) running 2 tests test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/review_route_scope-2cbe953ad2ece6af) running 1 test test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/review_shutdown_budget-cb0fcfe1b2aad42f) running 1 test test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/review_shutdown_restart-c5e07544297f612a) running 3 tests test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof. test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/settings.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/settings-0d4e5c1ccc396650) running 1 test test default_switch_requires_owner_freshness_and_the_preview_revision ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/store.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/store-653d928dd28e0534) running 5 tests test absent_discovery_preserves_the_last_known_endpoint ... ok test required_server_membership_cannot_be_deleted ... ok test key_replacement_preserves_identity_and_addresses_after_restart ... ok test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.58s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_plugin_relay-d765ce907b6d6285) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_plugin_release-d9a3a22170648e3d) running 8 tests test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok test latest::tests::cancellation_joins_verification ... ok test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.58s Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/review_pool-7342401812584e29) running 1 test test pending_channel_writers_preserve_authority_read_capacity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.72s Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/review_restart-433d5f6159022764) running 2 tests test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification test restarted_latest_reclaims_metadata_after_process_stop ... ok test result: ok. 1 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.13s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_plugin_remote-befabe8c66488616) running 12 tests test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.12s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_plugin_ssh-8fc5a3d5ae8e8da5) running 13 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 12 filtered out; finished in 0.00s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test result: ok. 12 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/auth_order-a6672937b409eb18) running 6 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/build_removal-ea54acad90939da0) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.87s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/concurrency-84194037b61b4a88) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test component_off_retires_a_real_native_helper ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/config_isolation-7ef0e56361e7afa9) running 2 tests test synthetic_master_socket_is_private_at_creation ... ok test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/credentials-d8295318c2cb85c8) running 3 tests test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/diagnostics-07214f0a23810c1c) running 8 tests test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test status_mapping_preserves_authentication_and_missing_payload_classification ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test every_failed_step_names_the_step_and_a_next_action ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/event_metadata-44d697ac35cff957) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/foreground-a7c134dfcb5c5797) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/host_trust-956578b69494d660) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/install-c9a4eb681da6c6e1) running 30 tests test command_failure_names_upload_join_install_and_start_separately ... ok test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test refused_previous_service_stop_only_removes_staging ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.61s Running tests/model.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/model-8d8a118fb482cb01) running 5 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/payload_source.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/payload_source-2b9cf9e8f172fa9d) running 2 tests ```

kayg commented

2026-10-12 17:02:25 +00:00

Author

Owner

Final-head scripts/verify fast transcript 4/13; head 2ba357265b; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence.

test verification_failure_names_step_and_stops_before_upload ... ok
test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/probe_check-4c243b7c35682a6f)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/process-52eb00630d90c109)

running 5 tests
test completed_helper_retires_descendants_with_closed_pipes ... ok
test cancellation_retires_the_helper_descendant_too ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/proxy_policy-ca5da5ebac2b936e)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/real_ssh-7e667740bdea77a4)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/single_connection-824b96a985bd76a6)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/source_completeness-221723904e9d35a3)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/trust_round2-78f0ff3b67dbad9b)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_server-e66837f90a21069b)

running 368 tests
test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions
test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok
test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok
test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok
test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok
test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok
test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok
test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once has been running for over 60 seconds
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok

Final-head scripts/verify fast transcript 4/13; head 2ba357265b7a235938fff004d606704332881b8c; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence. ```text test verification_failure_names_step_and_stops_before_upload ... ok test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/probe_check-4c243b7c35682a6f) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/process.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/process-52eb00630d90c109) running 5 tests test completed_helper_retires_descendants_with_closed_pipes ... ok test cancellation_retires_the_helper_descendant_too ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/proxy_policy-ca5da5ebac2b936e) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/real_ssh-7e667740bdea77a4) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/single_connection-824b96a985bd76a6) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/source_completeness-221723904e9d35a3) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/trust_round2-78f0ff3b67dbad9b) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_server-e66837f90a21069b) running 368 tests test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once has been running for over 60 seconds test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok ```

kayg commented

2026-10-12 17:02:26 +00:00

Author

Owner

Final-head scripts/verify fast transcript 5/13; head 2ba357265b; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence.

test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket has been running for over 60 seconds
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser has been running for over 60 seconds
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies has been running for over 60 seconds
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies has been running for over 60 seconds
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch has been running for over 60 seconds
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket has been running for over 60 seconds
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok
test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope
test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok
test release_build_tests::release_build_marker_is_explicit ... ok
test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok
test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark
test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement
test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok
test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok
test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok
test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok
test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope
test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok
test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok
test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok
test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification
test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok
test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok
test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok
test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok

Final-head scripts/verify fast transcript 5/13; head 2ba357265b7a235938fff004d606704332881b8c; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence. ```text test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket has been running for over 60 seconds test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session has been running for over 60 seconds test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering has been running for over 60 seconds test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser has been running for over 60 seconds test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies has been running for over 60 seconds test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies has been running for over 60 seconds test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch has been running for over 60 seconds test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket has been running for over 60 seconds test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok test release_build_tests::release_build_marker_is_explicit ... ok test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok ```

kayg commented

2026-10-12 17:02:28 +00:00

Author

Owner

Final-head scripts/verify fast transcript 6/13; head 2ba357265b; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence.

test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok
test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok
test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok
test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok
test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok

test result: ok. 329 passed; 0 failed; 39 ignored; 0 measured; 0 filtered out; finished in 313.60s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/catalog_startup-7dd8be68f0697857)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/enrollment-32f61b19a7c9b610)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok
test concurrent_redemption_has_one_winner_and_one_certificate ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.68s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/mesh_parser-13fd59a4a8708f05)

running 2 tests
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok
test review_grant_parser_rejects_unknown_nested_port_fields ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/mesh_review_plugin-1de3bc1351e8739c)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/mesh_review_policy-44ce3d3efaec58dc)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/mesh_review_role_scope-4848c1545d27cd89)

running 2 tests
test role_scopes_require_an_array_when_provided ... ok
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/plugin_host_review-e125600348cb05bb)

running 7 tests
test review_undeclared_topic_is_left_to_the_core ... ok
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_disable_answers_inflight_call ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.53s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/plugin_settings_review-f9f86b6508eec089)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.59s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/remote_plugin_contract-467d546d48fb6a49)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.50s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_shim-6198daaedaec1ac5)

running 87 tests
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok
test locale::tests::invalid_shell_expressions_are_ignored ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok
test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok
test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test pty::child_locale_tests::spawned_login_shell_receives_selected_locale_without_other_host_variables ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok

running 1 test
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 86 filtered out; finished in 0.00s

test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok

Final-head scripts/verify fast transcript 6/13; head 2ba357265b7a235938fff004d606704332881b8c; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence. ```text test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test result: ok. 329 passed; 0 failed; 39 ignored; 0 measured; 0 filtered out; finished in 313.60s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/catalog_startup-7dd8be68f0697857) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/enrollment-32f61b19a7c9b610) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test concurrent_redemption_has_one_winner_and_one_certificate ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.68s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/mesh_parser-13fd59a4a8708f05) running 2 tests test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test review_grant_parser_rejects_unknown_nested_port_fields ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/mesh_review_plugin-1de3bc1351e8739c) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/mesh_review_policy-44ce3d3efaec58dc) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/mesh_review_role_scope-4848c1545d27cd89) running 2 tests test role_scopes_require_an_array_when_provided ... ok test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/plugin_host_review-e125600348cb05bb) running 7 tests test review_undeclared_topic_is_left_to_the_core ... ok test review_core_topic_remains_core_owned_even_when_declared ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_disable_answers_inflight_call ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.53s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/plugin_settings_review-f9f86b6508eec089) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.59s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/remote_plugin_contract-467d546d48fb6a49) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.50s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/infraternal_shim-6198daaedaec1ac5) running 87 tests test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::golden::every_frozen_message ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok test locale::tests::invalid_shell_expressions_are_ignored ... ok test frame::checks::tests::golden_and_fragmented ... ok test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test ring::checks::tests::wrap_and_exact_offsets ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test pty::child_locale_tests::spawned_login_shell_receives_selected_locale_without_other_host_variables ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok running 1 test test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 86 filtered out; finished in 0.00s test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok ```

kayg commented

2026-10-12 17:02:30 +00:00

Author

Owner

Final-head scripts/verify fast transcript 7/13; head 2ba357265b; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence.

test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 74 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 59.21s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/detach-f17510b824ed2469)

running 2 tests
test detached_child_restores_default_signals_without_changing_parent ... ok
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.68s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/mouse-0d16f77afbdea7cb)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.49s

     Running tests/process_exit_descriptor.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/process_exit_descriptor-67dfefbd2451d374)

running 2 tests
test invalid_pid_never_creates_a_descriptor ... ok
test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.32s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_backup

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_relay

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_release

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   ├── infraternal-fuzz v0.1.0
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0 (*)
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-mesh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   ├── infraternal-plugin-release v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-mesh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0

Final-head scripts/verify fast transcript 7/13; head 2ba357265b7a235938fff004d606704332881b8c; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence. ```text test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 74 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 59.21s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/detach-f17510b824ed2469) running 2 tests test detached_child_restores_default_signals_without_changing_parent ... ok test closed_standard_descriptors_become_dev_null ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.68s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/mouse-0d16f77afbdea7cb) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.49s Running tests/process_exit_descriptor.rs (/home/kayg/.cache/codex-scratch/access-rules-v4/target/debug/deps/process_exit_descriptor-67dfefbd2451d374) running 2 tests test invalid_pid_never_creates_a_descriptor ... ok test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.32s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_backup running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_relay running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_release running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 ```

kayg commented

2026-10-12 17:02:31 +00:00

Author

Owner

Final-head scripts/verify fast transcript 8/13; head 2ba357265b; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence.

     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   ├── infraternal-fuzz v0.1.0 (*)
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-mesh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-mesh v0.1.0 (*)
         ├── infraternal-plugin-release v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-mesh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   ├── hyper v1.11.1
         │   │   ├── axum v0.8.9
         │   │   │   ├── infraternal-fuzz v0.1.0
         │   │   │   └── infraternal-server v0.1.0
         │   │   │       ├── infraternal v0.1.0
         │   │   │       └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── axum-server v0.8.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── hyper-util v0.1.21
         │   │   │   ├── axum v0.8.9 (*)
         │   │   │   ├── axum-server v0.8.0 (*)
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   │   ├── infraternal v0.1.0 (*)
         │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal v0.1.0 (*)
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-mesh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   └── infraternal-plugin-mesh v0.1.0
             │   │   │       ├── infraternal v0.1.0 (*)
             │   │   │       ├── infraternal-agent v0.1.0 (*)
             │   │   │       ├── infraternal-fuzz v0.1.0 (*)
             │   │   │       └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-backup v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   │   ├── infraternal-plugin-relay v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-release v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   ├── infraternal-plugin-release v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:197:1
    │  
197 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
198 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   ├── infraternal-fuzz v0.1.0 (*)
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-mesh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │       └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-backup v0.1.0

Final-head scripts/verify fast transcript 8/13; head 2ba357265b7a235938fff004d606704332881b8c; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence. ```text │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ ├── hyper v1.11.1 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:197:1 │ 197 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 198 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 ```

kayg commented

2026-10-12 17:02:32 +00:00

Author

Owner

Final-head scripts/verify fast transcript 9/13; head 2ba357265b; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence.

          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-relay v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-release v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-mesh v0.1.0 (*)
              ├── infraternal-plugin-release v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:199:1
    │  
199 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
201 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:202:1
    │  
202 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:204:1
    │  
204 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
205 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
206 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)

Final-head scripts/verify fast transcript 9/13; head 2ba357265b7a235938fff004d606704332881b8c; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence. ```text │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:199:1 │ 199 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 201 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:202:1 │ 202 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:204:1 │ 204 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 205 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 206 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) ```

kayg commented

2026-10-12 17:02:34 +00:00

Author

Owner

Final-head scripts/verify fast transcript 10/13; head 2ba357265b; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence.

      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:248:1
    │  
248 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
249 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-mesh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-backup v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-relay v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-release v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-release v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-release v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │   │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)

Final-head scripts/verify fast transcript 10/13; head 2ba357265b7a235938fff004d606704332881b8c; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence. ```text │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:248:1 │ 248 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 249 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) ```

kayg commented

2026-10-12 17:02:35 +00:00

Author

Owner

Final-head scripts/verify fast transcript 11/13; head 2ba357265b; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence.

      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── (dev) infraternal v0.1.0 (*)
      │       ├── (dev) infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:251:1
    │  
251 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
252 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │       ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-release v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)

Final-head scripts/verify fast transcript 11/13; head 2ba357265b7a235938fff004d606704332881b8c; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence. ```text │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:251:1 │ 251 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 252 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) ```

kayg commented

2026-10-12 17:02:37 +00:00

Author

Owner

Final-head scripts/verify fast transcript 12/13; head 2ba357265b; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence.

      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:254:1
    │  
254 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
255 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   ├── infraternal v0.1.0 (*)
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0
      │       │   └── infraternal-server v0.1.0
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── infraternal-fuzz v0.1.0 (*)
      │       ├── infraternal-fuzz v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:256:1
    │  
256 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
257 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   ├── infraternal v0.1.0 (*)
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal v0.1.0 (*)
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-fuzz v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-backup v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-relay v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-release v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   ├── infraternal-plugin-release v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   ├── infraternal-fuzz v0.1.0 (*)
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:314:1
    │  
314 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
315 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-release v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   ├── hyper v1.11.1
      │           │   │   ├── axum v0.8.9 (*)
      │           │   │   ├── axum-server v0.8.0 (*)
      │           │   │   ├── hyper-util v0.1.21
      │           │   │   │   ├── axum v0.8.9 (*)
      │           │   │   │   ├── axum-server v0.8.0 (*)
      │           │   │   │   ├── infraternal v0.1.0 (*)
      │           │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── (dev) infraternal v0.1.0 (*)
      │           ├── (dev) infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-mesh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-backup v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-relay v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-release v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds

Final-head scripts/verify fast transcript 12/13; head 2ba357265b7a235938fff004d606704332881b8c; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence. ```text │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:254:1 │ 254 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 255 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:256:1 │ 256 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 257 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4/Cargo.lock:314:1 │ 314 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 315 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds ```

kayg commented

2026-10-12 17:02:38 +00:00

Author

Owner

Final-head scripts/verify fast transcript 13/13; head 2ba357265b; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence.

    Finished `release` profile [optimized] target(s) in 0.66s
/home/kayg/.cache/codex-scratch/access-rules-v4/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 21857264 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Final-head scripts/verify fast transcript 13/13; head 2ba357265b7a235938fff004d606704332881b8c; exit 1 (static binary size only). Verbatim output. Incidental build-host timing lines are mandatory gate output, not performance evidence. ```text Finished `release` profile [optimized] target(s) in 0.66s /home/kayg/.cache/codex-scratch/access-rules-v4/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 21857264 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented

2026-10-12 17:04:46 +00:00

Author

Owner

Supplemental ts_verify_fast transcript 1/2; head 2ba357265b; exit 0. Verbatim output. Incidental build-host timings are gate output, not performance evidence.

Running as unit: run-p3703559-i16284783.scope; invocation ID: 70651e6f6f89478198f40978c749fadb

==> Vendored Ghostty artifact checksums
dist/ghostty-web.js: OK
dist/ghostty-vt.wasm: OK
dist/index.d.ts: OK

==> TypeScript protocol compiler

==> Tracer compiler, precompression and bundle transfer budget
bun install v1.4.2 (744846f84)

+ @types/bun@1.3.8
+ @types/node@22.19.0
+ @types/ws@8.5.10
+ playwright@1.61.1
+ typescript@5.9.3
+ ws@8.18.3
+ @scure/bip39@2.2.0
+ geist@1.7.2

38 packages installed [520.00ms]
$ bun x tsc --project tsconfig.json
bun test v1.4.2 (744846f84)

precompress.test.ts:
(pass) text sidecars round-trip deterministically; compressed formats remain identity [29.32ms]

browser-build.test.ts:
(pass) the browser renderer has no unresolved Vite Node-file shim request [25.73ms]

src/perf-detector.test.ts:
(pass) FrameDetector > estimates the refresh from the median and snaps it [1.03ms]
(pass) FrameDetector > nothing is a drop before the rate is known [0.10ms]
(pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.23ms]
(pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.24ms]
(pass) FrameDetector > the first frame after a pause is not an interval [0.18ms]
(pass) FrameDetector > fps, p95 and window read the ring [0.36ms]
(pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.43ms]
(pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.11ms]

src/canvas/recency.test.ts:
(pass) touch moves an item to the front and never duplicates it [0.42ms]
(pass) repeating the front item changes nothing [0.10ms]
(pass) the list is capped, so the oldest items fall off [0.10ms]
(pass) top skips items that are no longer live, without losing them [0.09ms]
(pass) recentRows: five used windows in reverse order of use, from 54 windows [0.24ms]
(pass) recentRows: a view with three windows and no use shows them in order [0.06ms]
(pass) recentRows: used windows lead, the rest fill up to five in window order [0.09ms]

src/canvas/windows/details-facts.test.ts:
(pass) host facts become plain-language details rows [1.10ms]
(pass) unknown optional host facts stay absent instead of appearing as placeholders [0.35ms]
(pass) extended info off: the machine tab shows only the essentials, ungrouped, and there is no More section [0.44ms]
(pass) extended info on: every fact sits under System, Resources or Access [0.38ms]
(pass) the header follows the machine's own facts, not the platform the host list guessed [0.22ms]
(pass) before facts arrive the host's platform names the header [0.11ms]
(pass) a reported system with no platform mark still names the header and shows no mark [0.10ms]

src/canvas/mesh/protocol.test.ts:
(pass) the server's own list becomes nodes, tags and grants, by name [1.16ms]
(pass) without `access` (today's server) the person may view and may not edit [0.44ms]
(pass) fields the server does not send are absent, never invented [0.25ms]
(pass) anything that is not a list is refused, whole [9.49ms]
(pass) a node's own tag list and the tag table agree even when a server sends only one [0.33ms]
(pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.53ms]
(pass) answers carry the new revision, and a create the new arrow's id [0.14ms]
(pass) endpoints go out as the server writes them: a node by id, a tag by name [0.91ms]

src/canvas/mesh/layout.test.ts:
(pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [1.21ms]
(pass) the layout is deterministic and does not depend on input order [5.86ms]
(pass) no two cards overlap, and every card lies inside the graph [7.77ms]
(pass) the sheet is wider than tall, roughly 16:10 [2.52ms]
(pass) a pinned node stays where it was put and the others do not move [3.68ms]
(pass) a pin beyond the sheet grows the graph [0.90ms]
(pass) a host's other tags do not move it; a tag nobody carries still has its node [0.38ms]
(pass) 1,000 nodes lay out in a few milliseconds [9.93ms]

src/canvas/layout/stops.test.ts:
(pass) a view that fits the viewport has one stop, centred [0.31ms]
(pass) a wide view has one stop per column and the last stop ends at the right edge [0.13ms]
(pass) a view taller than the viewport is scaled down so it fits [0.02ms]
(pass) nearestStop picks the stop whose centre is closest [0.14ms]
(pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.21ms]
(pass) a small graph keeps one stop per node column [0.12ms]
(pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.10ms]
(pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.09ms]

src/canvas/layout/grid.test.ts:
(pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.56ms]
(pass) closing the new half gives the layout back exactly, in the model [1.78ms]
(pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.85ms]
(pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.47ms]
(pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.86ms]
(pass) closing the window split down gives its band back to the window above and to the partner [0.64ms]
(pass) a window split down in a plain column stacks under it and moves the windows below down [0.32ms]
(pass) new window right opens a full-size column after the whole group, never inside it [0.50ms]
(pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.16ms]
(pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.20ms]
(pass) random sequences of split right, split down, new window right and close never break the grid [46.49ms]
(pass) closing every window of a group returns the view to nothing, with no problem on the way [0.38ms]
(pass) a full-width band under a group moves nothing and extends the group by one band [0.21ms]
(pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.17ms]

src/canvas/layout/geometry.test.ts:
(pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.54ms]
(pass) a chain of neighbours is pushed in turn [0.14ms]
(pass) snapping rounds to whole cells [0.06ms]
(pass) reach follows grants through tags and keeps the relay [0.34ms]
(pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.27ms]
(pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.04ms]
(pass) a desktop column is the same alone and in a strip [0.02ms]

src/canvas/sessions/live-inventory.test.ts:
(pass) a host snapshot replaces cached session rows and keeps only live shims [3.99ms]
(pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.56ms]
(pass) inventory remembers a remote session and refuses a cross-host attach [0.41ms]
(pass) superseded status snapshots release records for sessions this device never opened [1.63ms]
(pass) superseding a sidecar preserves status for a window opened on this device [0.16ms]
(pass) a census predating a new shell does not permanently retire its confirmed live ID [0.14ms]
(pass) a final Close before the first positive census never revives a new ID [0.12ms]
(pass) a later absence retires a new ID after its first positive census [0.13ms]
(pass) another host's census cannot clear a new shell's census fence [0.09ms]
(pass) another host's close cannot clear a new shell's census fence [0.02ms]

src/canvas/sessions/details-live.test.ts:
(pass) a refused host facts action stops its recurring timer [1.86ms]
(pass) a detected operating system supplies the live popover mark [0.97ms]

src/canvas/sessions/live.test.ts:
(pass) an enrolled host opens by UUID and splits keep that authority [0.79ms]
(pass) unknown and ambiguous labels never open an embedded shell [0.08ms]
(pass) removed hosts disappear from inventory and cannot route a new shell [0.12ms]

src/canvas/sessions/gone-review.test.ts:
(pass) selecting a known gone session keeps its final exited state [0.19ms]
(pass) a known retired status survives repeated selection and generic ended answers [0.18ms]

src/canvas/sessions/open-refusal.test.ts:
(pass) memory refusal retains the reason and current counters [0.84ms]
(pass) legacy refusals still work and malformed counters never reach the message [2.89ms]
(pass) product copy names the host and counters and never renders untrusted server text [0.94ms]
(pass) oversized refusal JSON is ignored before parsing [0.20ms]

src/canvas/model/document.test.ts:
(pass) a document holds references and layout, never content [0.42ms]
(pass) a document survives JSON and rebuilds the same columns [0.67ms]
(pass) a target that no longer exists is dropped, and an emptied column with it [0.11ms]
(pass) parseDocument rejects anything that is not a document of this format [0.42ms]
(pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.28ms]
(pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.42ms]
(pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.33ms]
(pass) a plain view is saved without spans or bands, exactly as before D212 [0.08ms]

src/canvas/addhost/real.test.ts:
(pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.26ms]
(pass) parsing the server's data > the server key needs its public key and fingerprint [0.06ms]
(pass) parsing the server's data > an install command needs a lifetime [0.04ms]
(pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [1.92ms]
(pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.22ms]
(pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [1.48ms]
(pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.23ms]
(pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.14ms]
(pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.11ms]
(pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.27ms]
(pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.39ms]

src/canvas/addhost/authority.on-demand.test.ts:
(pass) CA wrapping matches the contract's HKDF domain and separates generations [1.24ms]

src/canvas/addhost/model.test.ts:
(pass) stagesOf > a host with no event is waiting everywhere [0.29ms]
(pass) stagesOf > check before sign-in is detecting how to sign in [0.27ms]
(pass) stagesOf > the sign-in report finishes detect and starts the system check [0.15ms]
(pass) stagesOf > install, facts and connect map to install, enrol and first session [0.21ms]
(pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.23ms]
(pass) stagesOf > an unsupported host fails the system check, after sign-in [0.12ms]
(pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.12ms]
(pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.16ms]
(pass) authLabel > names the method and a trusted network provider only [0.07ms]
(pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.18ms]
(pass) guideFor > each failure kind names its fix [0.14ms]
(pass) guideFor > mesh-policy words say possible, not certain [0.03ms]
(pass) parseTarget > reads user, host and port [1.11ms]
(pass) parseTarget > refuses what cannot name a host [0.11ms]
(pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [1.35ms]
(pass) parseSshConfig > recognises config text [0.09ms]
(pass) parseSshConfig > a hostname that is an option is dropped [0.05ms]
(pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.08ms]
(pass) plain words > no headline carries an arrow, an id or an API noun [0.16ms]
(pass) only a completed canonical host identity becomes terminal authority [0.15ms]
(pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.08ms]
(pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.08ms]
(pass) matchListed > a name that is exactly one host's id or address names that host [0.20ms]
(pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.05ms]
(pass) matchListed > a partial name that starts several hosts names none and waits [0.03ms]
(pass) matchListed > a new name that starts no host is neither named nor waiting [0.02ms]
(pass) install diagnostics name the failed step and public host error [0.10ms]
(pass) missing payload tells the operator the architecture and expected server path [0.10ms]
(pass) an already added host says so and offers opening its existing terminal [0.05ms]
(pass) release payload verification names the architecture step and plain reason [0.03ms]

src/canvas/addhost/wizard.test.ts:
(pass) a saved-key prompt completing after close never starts an SSH attempt [0.48ms]
(pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.39ms]
(pass) ready CA begins the requested installation mode without another prompt [0.13ms]
(pass) closing during CA confirmation never starts an SSH attempt [0.29ms]
(pass) a typed root login requires explicit consent before any installation [0.13ms]

../../packages/ui/src/spring.test.ts:
(pass) a missed frame does not stretch a settled spring [0.55ms]
(pass) motion follows elapsed time across frame rates and damping regimes [0.56ms]

chunk-classes.test.ts:
(pass) the first screen is critical, the canvas product module and what only it uses are deferred [0.97ms]
(pass) a chunk that both sides use stays critical [0.16ms]
(pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.12ms]

test/recovery-ui.test.ts:
(pass) compiled recovery UI mode off obeys its URL boundary [4.60ms]
(pass) compiled recovery UI mode preview obeys its URL boundary [3.06ms]
(pass) compiled recovery UI mode 1 obeys its URL boundary [3.44ms]

test/recovery-crypto.test.ts:
(pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [13.32ms]
(pass) 100 repeated wrapping operations generate independent salts and nonces [27.63ms]

test/recovery-rotation.test.ts:
(pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [11.90ms]
(pass) abandoned word acknowledgement uploads nothing [4.28ms]
(pass) settled acknowledgement cannot upload later (dismissed) [4.81ms]
(pass) settled acknowledgement cannot upload later (no acknowledgement) [3.97ms]

test/recovery-wait.test.ts:
(pass) server remaining wait 0s is accepted through the capability policy maximum [4.81ms]
(pass) server remaining wait 86400s is accepted through the capability policy maximum [7.28ms]
(pass) server remaining wait 90000s is accepted through the capability policy maximum [1.86ms]
(pass) server remaining wait 172800s is accepted through the capability policy maximum [1.45ms]
(pass) malformed or excessive remaining wait -1 is denied [2.38ms]
(pass) malformed or excessive remaining wait 0.5 is denied [1.48ms]
(pass) malformed or excessive remaining wait 172801 is denied [1.49ms]
(pass) malformed or excessive remaining wait 9007199254740992 is denied [4.33ms]
(pass) malformed or excessive remaining wait 90000 is denied [1.62ms]

 168 pass
 0 fail
 11332 expect() calls
Ran 168 tests across 26 files. [440.00ms]
$ bun run build.ts
built chunk-z93cxfvm.js, chunk-bcrmm064.js, chunk-3g02wn4t.js, chunk-tedat940.js, chunk-j89yt8th.js, chunk-p4pq9b17.js, chunk-a895a34j.js, chunk-gtm292qm.js, chunk-za9tr8mr.js, chunk-9e6np2qe.js, chunk-hcqkhvhy.js, chunk-5s6a3m50.js, main.js, chunk-969atqet.js, chunk-15nnyy73.js, chunk-vxv25w33.js, chunk-7nythy32.js, chunk-9k3apg3q.js, chunk-c1dgfc87.js, chunk-8evve6vk.js, chunk-yr0r38s4.js, chunk-8t7pe4ht.js, chunk-59sgpjfh.js, chunk-axbkkqp1.js, chunk-mxj8jhhc.js, chunk-z7hrjq9a.js, chunk-setawe6n.js, chunk-gck2q043.js, chunk-d2w5wypd.js, chunk-etz6pfw7.js, chunk-detsxrn6.js, chunk-7fb0ge0v.js, chunk-ct8b5b1p.js, chunk-aw2yjx7v.js, chunk-xg0g7k1d.js, chunk-b2q1b13a.js, chunk-ffv6qzk4.js, chunk-q56hm25z.js, chunk-9xd3g65e.js, chunk-28rbcdd5.js, chunk-61xwpgvs.js, chunk-ca8fvbxs.js, chunk-433eyr4g.js, chunk-8b78s18n.js, chunk-r2jbbdt4.js, chunk-37zpdn0r.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-f42879qe.js, chunk-f2r0hhqc.js, chunk-2bcfkj59.js, chunk-1gmd2m5q.js, chunk-sqt7s3gg.js
critical chunk-p4pq9b17.js: identity=707 gzip=368 brotli=306 bytes
critical chunk-8t7pe4ht.js: identity=1104 gzip=666 brotli=604 bytes
critical chunk-sqt7s3gg.js: identity=42395 gzip=14485 brotli=13009 bytes
deferred chunk-tedat940.js: identity=43000 gzip=16581 brotli=14605 bytes
critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-q56hm25z.js: identity=10693 gzip=4125 brotli=3760 bytes
critical chunk-mxj8jhhc.js: identity=707945 gzip=204703 brotli=165886 bytes
onDemand chunk-9e6np2qe.js: identity=191 gzip=170 brotli=130 bytes

Supplemental ts_verify_fast transcript 1/2; head 2ba357265b7a235938fff004d606704332881b8c; exit 0. Verbatim output. Incidental build-host timings are gate output, not performance evidence. ```text Running as unit: run-p3703559-i16284783.scope; invocation ID: 70651e6f6f89478198f40978c749fadb ==> Vendored Ghostty artifact checksums dist/ghostty-web.js: OK dist/ghostty-vt.wasm: OK dist/index.d.ts: OK ==> TypeScript protocol compiler ==> Tracer compiler, precompression and bundle transfer budget bun install v1.4.2 (744846f84) + @types/bun@1.3.8 + @types/node@22.19.0 + @types/ws@8.5.10 + playwright@1.61.1 + typescript@5.9.3 + ws@8.18.3 + @scure/bip39@2.2.0 + geist@1.7.2 38 packages installed [520.00ms] $ bun x tsc --project tsconfig.json bun test v1.4.2 (744846f84) precompress.test.ts: (pass) text sidecars round-trip deterministically; compressed formats remain identity [29.32ms] browser-build.test.ts: (pass) the browser renderer has no unresolved Vite Node-file shim request [25.73ms] src/perf-detector.test.ts: (pass) FrameDetector > estimates the refresh from the median and snaps it [1.03ms] (pass) FrameDetector > nothing is a drop before the rate is known [0.10ms] (pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.23ms] (pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.24ms] (pass) FrameDetector > the first frame after a pause is not an interval [0.18ms] (pass) FrameDetector > fps, p95 and window read the ring [0.36ms] (pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.43ms] (pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.11ms] src/canvas/recency.test.ts: (pass) touch moves an item to the front and never duplicates it [0.42ms] (pass) repeating the front item changes nothing [0.10ms] (pass) the list is capped, so the oldest items fall off [0.10ms] (pass) top skips items that are no longer live, without losing them [0.09ms] (pass) recentRows: five used windows in reverse order of use, from 54 windows [0.24ms] (pass) recentRows: a view with three windows and no use shows them in order [0.06ms] (pass) recentRows: used windows lead, the rest fill up to five in window order [0.09ms] src/canvas/windows/details-facts.test.ts: (pass) host facts become plain-language details rows [1.10ms] (pass) unknown optional host facts stay absent instead of appearing as placeholders [0.35ms] (pass) extended info off: the machine tab shows only the essentials, ungrouped, and there is no More section [0.44ms] (pass) extended info on: every fact sits under System, Resources or Access [0.38ms] (pass) the header follows the machine's own facts, not the platform the host list guessed [0.22ms] (pass) before facts arrive the host's platform names the header [0.11ms] (pass) a reported system with no platform mark still names the header and shows no mark [0.10ms] src/canvas/mesh/protocol.test.ts: (pass) the server's own list becomes nodes, tags and grants, by name [1.16ms] (pass) without `access` (today's server) the person may view and may not edit [0.44ms] (pass) fields the server does not send are absent, never invented [0.25ms] (pass) anything that is not a list is refused, whole [9.49ms] (pass) a node's own tag list and the tag table agree even when a server sends only one [0.33ms] (pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.53ms] (pass) answers carry the new revision, and a create the new arrow's id [0.14ms] (pass) endpoints go out as the server writes them: a node by id, a tag by name [0.91ms] src/canvas/mesh/layout.test.ts: (pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [1.21ms] (pass) the layout is deterministic and does not depend on input order [5.86ms] (pass) no two cards overlap, and every card lies inside the graph [7.77ms] (pass) the sheet is wider than tall, roughly 16:10 [2.52ms] (pass) a pinned node stays where it was put and the others do not move [3.68ms] (pass) a pin beyond the sheet grows the graph [0.90ms] (pass) a host's other tags do not move it; a tag nobody carries still has its node [0.38ms] (pass) 1,000 nodes lay out in a few milliseconds [9.93ms] src/canvas/layout/stops.test.ts: (pass) a view that fits the viewport has one stop, centred [0.31ms] (pass) a wide view has one stop per column and the last stop ends at the right edge [0.13ms] (pass) a view taller than the viewport is scaled down so it fits [0.02ms] (pass) nearestStop picks the stop whose centre is closest [0.14ms] (pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.21ms] (pass) a small graph keeps one stop per node column [0.12ms] (pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.10ms] (pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.09ms] src/canvas/layout/grid.test.ts: (pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.56ms] (pass) closing the new half gives the layout back exactly, in the model [1.78ms] (pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.85ms] (pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.47ms] (pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.86ms] (pass) closing the window split down gives its band back to the window above and to the partner [0.64ms] (pass) a window split down in a plain column stacks under it and moves the windows below down [0.32ms] (pass) new window right opens a full-size column after the whole group, never inside it [0.50ms] (pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.16ms] (pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.20ms] (pass) random sequences of split right, split down, new window right and close never break the grid [46.49ms] (pass) closing every window of a group returns the view to nothing, with no problem on the way [0.38ms] (pass) a full-width band under a group moves nothing and extends the group by one band [0.21ms] (pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.17ms] src/canvas/layout/geometry.test.ts: (pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.54ms] (pass) a chain of neighbours is pushed in turn [0.14ms] (pass) snapping rounds to whole cells [0.06ms] (pass) reach follows grants through tags and keeps the relay [0.34ms] (pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.27ms] (pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.04ms] (pass) a desktop column is the same alone and in a strip [0.02ms] src/canvas/sessions/live-inventory.test.ts: (pass) a host snapshot replaces cached session rows and keeps only live shims [3.99ms] (pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.56ms] (pass) inventory remembers a remote session and refuses a cross-host attach [0.41ms] (pass) superseded status snapshots release records for sessions this device never opened [1.63ms] (pass) superseding a sidecar preserves status for a window opened on this device [0.16ms] (pass) a census predating a new shell does not permanently retire its confirmed live ID [0.14ms] (pass) a final Close before the first positive census never revives a new ID [0.12ms] (pass) a later absence retires a new ID after its first positive census [0.13ms] (pass) another host's census cannot clear a new shell's census fence [0.09ms] (pass) another host's close cannot clear a new shell's census fence [0.02ms] src/canvas/sessions/details-live.test.ts: (pass) a refused host facts action stops its recurring timer [1.86ms] (pass) a detected operating system supplies the live popover mark [0.97ms] src/canvas/sessions/live.test.ts: (pass) an enrolled host opens by UUID and splits keep that authority [0.79ms] (pass) unknown and ambiguous labels never open an embedded shell [0.08ms] (pass) removed hosts disappear from inventory and cannot route a new shell [0.12ms] src/canvas/sessions/gone-review.test.ts: (pass) selecting a known gone session keeps its final exited state [0.19ms] (pass) a known retired status survives repeated selection and generic ended answers [0.18ms] src/canvas/sessions/open-refusal.test.ts: (pass) memory refusal retains the reason and current counters [0.84ms] (pass) legacy refusals still work and malformed counters never reach the message [2.89ms] (pass) product copy names the host and counters and never renders untrusted server text [0.94ms] (pass) oversized refusal JSON is ignored before parsing [0.20ms] src/canvas/model/document.test.ts: (pass) a document holds references and layout, never content [0.42ms] (pass) a document survives JSON and rebuilds the same columns [0.67ms] (pass) a target that no longer exists is dropped, and an emptied column with it [0.11ms] (pass) parseDocument rejects anything that is not a document of this format [0.42ms] (pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.28ms] (pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.42ms] (pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.33ms] (pass) a plain view is saved without spans or bands, exactly as before D212 [0.08ms] src/canvas/addhost/real.test.ts: (pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.26ms] (pass) parsing the server's data > the server key needs its public key and fingerprint [0.06ms] (pass) parsing the server's data > an install command needs a lifetime [0.04ms] (pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [1.92ms] (pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.22ms] (pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [1.48ms] (pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.23ms] (pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.14ms] (pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.11ms] (pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.27ms] (pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.39ms] src/canvas/addhost/authority.on-demand.test.ts: (pass) CA wrapping matches the contract's HKDF domain and separates generations [1.24ms] src/canvas/addhost/model.test.ts: (pass) stagesOf > a host with no event is waiting everywhere [0.29ms] (pass) stagesOf > check before sign-in is detecting how to sign in [0.27ms] (pass) stagesOf > the sign-in report finishes detect and starts the system check [0.15ms] (pass) stagesOf > install, facts and connect map to install, enrol and first session [0.21ms] (pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.23ms] (pass) stagesOf > an unsupported host fails the system check, after sign-in [0.12ms] (pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.12ms] (pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.16ms] (pass) authLabel > names the method and a trusted network provider only [0.07ms] (pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.18ms] (pass) guideFor > each failure kind names its fix [0.14ms] (pass) guideFor > mesh-policy words say possible, not certain [0.03ms] (pass) parseTarget > reads user, host and port [1.11ms] (pass) parseTarget > refuses what cannot name a host [0.11ms] (pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [1.35ms] (pass) parseSshConfig > recognises config text [0.09ms] (pass) parseSshConfig > a hostname that is an option is dropped [0.05ms] (pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.08ms] (pass) plain words > no headline carries an arrow, an id or an API noun [0.16ms] (pass) only a completed canonical host identity becomes terminal authority [0.15ms] (pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.08ms] (pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.08ms] (pass) matchListed > a name that is exactly one host's id or address names that host [0.20ms] (pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.05ms] (pass) matchListed > a partial name that starts several hosts names none and waits [0.03ms] (pass) matchListed > a new name that starts no host is neither named nor waiting [0.02ms] (pass) install diagnostics name the failed step and public host error [0.10ms] (pass) missing payload tells the operator the architecture and expected server path [0.10ms] (pass) an already added host says so and offers opening its existing terminal [0.05ms] (pass) release payload verification names the architecture step and plain reason [0.03ms] src/canvas/addhost/wizard.test.ts: (pass) a saved-key prompt completing after close never starts an SSH attempt [0.48ms] (pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.39ms] (pass) ready CA begins the requested installation mode without another prompt [0.13ms] (pass) closing during CA confirmation never starts an SSH attempt [0.29ms] (pass) a typed root login requires explicit consent before any installation [0.13ms] ../../packages/ui/src/spring.test.ts: (pass) a missed frame does not stretch a settled spring [0.55ms] (pass) motion follows elapsed time across frame rates and damping regimes [0.56ms] chunk-classes.test.ts: (pass) the first screen is critical, the canvas product module and what only it uses are deferred [0.97ms] (pass) a chunk that both sides use stays critical [0.16ms] (pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.12ms] test/recovery-ui.test.ts: (pass) compiled recovery UI mode off obeys its URL boundary [4.60ms] (pass) compiled recovery UI mode preview obeys its URL boundary [3.06ms] (pass) compiled recovery UI mode 1 obeys its URL boundary [3.44ms] test/recovery-crypto.test.ts: (pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [13.32ms] (pass) 100 repeated wrapping operations generate independent salts and nonces [27.63ms] test/recovery-rotation.test.ts: (pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [11.90ms] (pass) abandoned word acknowledgement uploads nothing [4.28ms] (pass) settled acknowledgement cannot upload later (dismissed) [4.81ms] (pass) settled acknowledgement cannot upload later (no acknowledgement) [3.97ms] test/recovery-wait.test.ts: (pass) server remaining wait 0s is accepted through the capability policy maximum [4.81ms] (pass) server remaining wait 86400s is accepted through the capability policy maximum [7.28ms] (pass) server remaining wait 90000s is accepted through the capability policy maximum [1.86ms] (pass) server remaining wait 172800s is accepted through the capability policy maximum [1.45ms] (pass) malformed or excessive remaining wait -1 is denied [2.38ms] (pass) malformed or excessive remaining wait 0.5 is denied [1.48ms] (pass) malformed or excessive remaining wait 172801 is denied [1.49ms] (pass) malformed or excessive remaining wait 9007199254740992 is denied [4.33ms] (pass) malformed or excessive remaining wait 90000 is denied [1.62ms] 168 pass 0 fail 11332 expect() calls Ran 168 tests across 26 files. [440.00ms] $ bun run build.ts built chunk-z93cxfvm.js, chunk-bcrmm064.js, chunk-3g02wn4t.js, chunk-tedat940.js, chunk-j89yt8th.js, chunk-p4pq9b17.js, chunk-a895a34j.js, chunk-gtm292qm.js, chunk-za9tr8mr.js, chunk-9e6np2qe.js, chunk-hcqkhvhy.js, chunk-5s6a3m50.js, main.js, chunk-969atqet.js, chunk-15nnyy73.js, chunk-vxv25w33.js, chunk-7nythy32.js, chunk-9k3apg3q.js, chunk-c1dgfc87.js, chunk-8evve6vk.js, chunk-yr0r38s4.js, chunk-8t7pe4ht.js, chunk-59sgpjfh.js, chunk-axbkkqp1.js, chunk-mxj8jhhc.js, chunk-z7hrjq9a.js, chunk-setawe6n.js, chunk-gck2q043.js, chunk-d2w5wypd.js, chunk-etz6pfw7.js, chunk-detsxrn6.js, chunk-7fb0ge0v.js, chunk-ct8b5b1p.js, chunk-aw2yjx7v.js, chunk-xg0g7k1d.js, chunk-b2q1b13a.js, chunk-ffv6qzk4.js, chunk-q56hm25z.js, chunk-9xd3g65e.js, chunk-28rbcdd5.js, chunk-61xwpgvs.js, chunk-ca8fvbxs.js, chunk-433eyr4g.js, chunk-8b78s18n.js, chunk-r2jbbdt4.js, chunk-37zpdn0r.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-f42879qe.js, chunk-f2r0hhqc.js, chunk-2bcfkj59.js, chunk-1gmd2m5q.js, chunk-sqt7s3gg.js critical chunk-p4pq9b17.js: identity=707 gzip=368 brotli=306 bytes critical chunk-8t7pe4ht.js: identity=1104 gzip=666 brotli=604 bytes critical chunk-sqt7s3gg.js: identity=42395 gzip=14485 brotli=13009 bytes deferred chunk-tedat940.js: identity=43000 gzip=16581 brotli=14605 bytes critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-q56hm25z.js: identity=10693 gzip=4125 brotli=3760 bytes critical chunk-mxj8jhhc.js: identity=707945 gzip=204703 brotli=165886 bytes onDemand chunk-9e6np2qe.js: identity=191 gzip=170 brotli=130 bytes ```

kayg commented

2026-10-12 17:04:47 +00:00

Author

Owner

Supplemental ts_verify_fast transcript 2/2; head 2ba357265b; exit 0. Verbatim output. Incidental build-host timings are gate output, not performance evidence.

onDemand chunk-detsxrn6.js: identity=1170 gzip=707 brotli=587 bytes
onDemand chunk-setawe6n.js: identity=2824 gzip=1387 brotli=1196 bytes
onDemand chunk-z7hrjq9a.js: identity=6198 gzip=2791 brotli=2524 bytes
onDemand chunk-8b78s18n.js: identity=6773 gzip=3176 brotli=2882 bytes
critical chunk-1gmd2m5q.js: identity=199 gzip=162 brotli=136 bytes
onDemand chunk-j89yt8th.js: identity=3891 gzip=1735 brotli=1516 bytes
onDemand chunk-gck2q043.js: identity=4575 gzip=2011 brotli=1784 bytes
onDemand chunk-xg0g7k1d.js: identity=4640 gzip=1929 brotli=1701 bytes
onDemand chunk-2bcfkj59.js: identity=1063 gzip=653 brotli=521 bytes
critical chunk-c1dgfc87.js: identity=590 gzip=327 brotli=319 bytes
onDemand chunk-r2jbbdt4.js: identity=31922 gzip=12262 brotli=11035 bytes
onDemand chunk-ct8b5b1p.js: identity=11529 gzip=4654 brotli=4252 bytes
critical faulty-terminal.worker.js: identity=1086 gzip=559 brotli=480 bytes
critical backdrop.worker.js: identity=243 gzip=212 brotli=165 bytes
critical chunk-8evve6vk.js: identity=2519 gzip=1008 brotli=876 bytes
onDemand chunk-aw2yjx7v.js: identity=5359 gzip=2578 brotli=2301 bytes
onDemand chunk-b2q1b13a.js: identity=7662 gzip=3396 brotli=2978 bytes
onDemand chunk-5s6a3m50.js: identity=2108 gzip=1037 brotli=869 bytes
critical chunk-a895a34j.js: identity=88 gzip=88 brotli=74 bytes
critical chunk-vxv25w33.js: identity=5443 gzip=2605 brotli=2380 bytes
critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes
critical chunk-bcrmm064.js: identity=4499 gzip=1856 brotli=1635 bytes
onDemand chunk-ca8fvbxs.js: identity=48283 gzip=15178 brotli=13487 bytes
onDemand chunk-gtm292qm.js: identity=228 gzip=178 brotli=165 bytes
critical chunk-9k3apg3q.js: identity=17627 gzip=6253 brotli=5565 bytes
onDemand chunk-37zpdn0r.js: identity=2462 gzip=1106 brotli=933 bytes
onDemand chunk-ffv6qzk4.js: identity=13384 gzip=5027 brotli=4498 bytes
critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes
critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-15nnyy73.js: identity=2557 gzip=1180 brotli=1009 bytes
onDemand chunk-59sgpjfh.js: identity=1026 gzip=621 brotli=496 bytes
onDemand chunk-za9tr8mr.js: identity=2420 gzip=1198 brotli=1082 bytes
deferred chunk-etz6pfw7.js: identity=97656 gzip=33165 brotli=29329 bytes
onDemand chunk-hcqkhvhy.js: identity=6265 gzip=2105 brotli=1866 bytes
critical chunk-yr0r38s4.js: identity=386 gzip=238 brotli=196 bytes
onDemand chunk-3g02wn4t.js: identity=5784 gzip=2189 brotli=1938 bytes
critical main.js: identity=111029 gzip=40357 brotli=35032 bytes
critical chunk-f42879qe.js: identity=9810 gzip=4016 brotli=3459 bytes
critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes
onDemand chunk-d2w5wypd.js: identity=1616 gzip=866 brotli=739 bytes
onDemand chunk-7fb0ge0v.js: identity=540 gzip=351 brotli=316 bytes
critical chunk-433eyr4g.js: identity=162 gzip=150 brotli=127 bytes
critical chunk-7nythy32.js: identity=15859 gzip=6182 brotli=5484 bytes
critical chunk-z93cxfvm.js: identity=21235 gzip=6857 brotli=6128 bytes
critical chunk-969atqet.js: identity=8377 gzip=3575 brotli=3180 bytes
JavaScript transfer, critical: identity=951648 gzip=294993/307200 brotli=245357/256000 bytes
JavaScript transfer, deferred: identity=140656 gzip=49746/51200 brotli=43934/45056 bytes
JavaScript transfer, onDemand: identity=185163 gzip=72610/20480 brotli=64565/18432 bytes
JavaScript transfer, onDemand largest chunk chunk-ca8fvbxs.js: gzip=15178/20480 brotli=13487/18432 bytes (class total gzip=72610 brotli=64565, not limited)
fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes
fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes
fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes
fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes
fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes
fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes
fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes
fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes
fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes
fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes
fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes
fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes
fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes
fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes
fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes
fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes
fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes
fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes
fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes
fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes
Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes

==> Rust stream oracle (for the differential test)

==> TypeScript protocol tests
bun test v1.4.2 (744846f84)

src/mesh-review-revocation.test.ts:
(pass) review forbidden event cancels pending snapshot publication [3.24ms]
(pass) subscription forbidden ends delivery before a late refresh rejection [1.78ms]
(pass) subscription not found ends delivery before a late refresh rejection [3.86ms]
(pass) subscription invalid input ends delivery before a late refresh rejection [1.49ms]
(pass) subscription mesh unavailable ends delivery before a late refresh rejection [2.01ms]
(pass) synchronous subscription refusal releases the transport exactly once [0.47ms]

src/codec.test.ts:
(pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [23.53ms]
(pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.40ms]
(pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.26ms]
(pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.32ms]
(pass) split mux header preserves trailing Close [0.62ms]

src/mesh-review-paged-error.test.ts:
(pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [3.40ms]
(pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.43ms]
(pass) a newer paged event owns publication before an earlier refresh resumes [5.47ms]

src/mesh-review-refresh.test.ts:
(pass) review superseded refresh failure cannot replace authoritative resync [1.77ms]
(pass) superseded failure preserves a newer pending refresh [3.10ms]

src/stream.test.ts:
stream differential: 134 streams, 11439 schedules, zero divergences
(pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [6262.79ms]
(pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [14.85ms]

src/mesh.test.ts:
(pass) Mesh actions map to their typed action IDs and JSON inputs [3.28ms]
(pass) Mesh watch coalesces change bursts and never publishes an older revision [8.26ms]
(pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.23ms]

src/mesh-review-continuation.test.ts:
(pass) review continuation stops after stop [1.87ms]
(pass) review continuation stops after forbidden [1.49ms]
(pass) review continuation stops after superseded [1.27ms]

src/mesh-pagination.test.ts:
(pass) list assembles bounded pages using the same filter [0.51ms]
(pass) a changed revision discards earlier pages before assembling its restart [0.22ms]
(pass) malformed continuation is refused: {"revision":1,"offset":0} [0.32ms]
(pass) malformed continuation is refused: {"revision":2,"offset":1} [0.03ms]
(pass) malformed continuation is refused: {"revision":1,"offset":2} [0.01ms]
(pass) watch never publishes a partial page; withdrawn=false [5.11ms]
(pass) watch never publishes a partial page; withdrawn=true [1.37ms]
(pass) a superseding equal-revision resync wins over pending page assembly [1.88ms]

src/mesh-review-resync.test.ts:
(pass) review watch applies same-revision authoritative resync [0.61ms]
(pass) authoritative resync keeps priority over an equal-revision pending list [1.83ms]

src/mesh-vectors.test.ts:
(pass) every shared Mesh action vector passes through the typed client unchanged [8.24ms]
(pass) shared Mesh event vectors drive the typed watch adapter [6.39ms]

 36 pass
 0 fail
 34462 expect() calls
Ran 36 tests across 10 files. [6.44s]

Supplemental ts_verify_fast transcript 2/2; head 2ba357265b7a235938fff004d606704332881b8c; exit 0. Verbatim output. Incidental build-host timings are gate output, not performance evidence. ```text onDemand chunk-detsxrn6.js: identity=1170 gzip=707 brotli=587 bytes onDemand chunk-setawe6n.js: identity=2824 gzip=1387 brotli=1196 bytes onDemand chunk-z7hrjq9a.js: identity=6198 gzip=2791 brotli=2524 bytes onDemand chunk-8b78s18n.js: identity=6773 gzip=3176 brotli=2882 bytes critical chunk-1gmd2m5q.js: identity=199 gzip=162 brotli=136 bytes onDemand chunk-j89yt8th.js: identity=3891 gzip=1735 brotli=1516 bytes onDemand chunk-gck2q043.js: identity=4575 gzip=2011 brotli=1784 bytes onDemand chunk-xg0g7k1d.js: identity=4640 gzip=1929 brotli=1701 bytes onDemand chunk-2bcfkj59.js: identity=1063 gzip=653 brotli=521 bytes critical chunk-c1dgfc87.js: identity=590 gzip=327 brotli=319 bytes onDemand chunk-r2jbbdt4.js: identity=31922 gzip=12262 brotli=11035 bytes onDemand chunk-ct8b5b1p.js: identity=11529 gzip=4654 brotli=4252 bytes critical faulty-terminal.worker.js: identity=1086 gzip=559 brotli=480 bytes critical backdrop.worker.js: identity=243 gzip=212 brotli=165 bytes critical chunk-8evve6vk.js: identity=2519 gzip=1008 brotli=876 bytes onDemand chunk-aw2yjx7v.js: identity=5359 gzip=2578 brotli=2301 bytes onDemand chunk-b2q1b13a.js: identity=7662 gzip=3396 brotli=2978 bytes onDemand chunk-5s6a3m50.js: identity=2108 gzip=1037 brotli=869 bytes critical chunk-a895a34j.js: identity=88 gzip=88 brotli=74 bytes critical chunk-vxv25w33.js: identity=5443 gzip=2605 brotli=2380 bytes critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes critical chunk-bcrmm064.js: identity=4499 gzip=1856 brotli=1635 bytes onDemand chunk-ca8fvbxs.js: identity=48283 gzip=15178 brotli=13487 bytes onDemand chunk-gtm292qm.js: identity=228 gzip=178 brotli=165 bytes critical chunk-9k3apg3q.js: identity=17627 gzip=6253 brotli=5565 bytes onDemand chunk-37zpdn0r.js: identity=2462 gzip=1106 brotli=933 bytes onDemand chunk-ffv6qzk4.js: identity=13384 gzip=5027 brotli=4498 bytes critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-15nnyy73.js: identity=2557 gzip=1180 brotli=1009 bytes onDemand chunk-59sgpjfh.js: identity=1026 gzip=621 brotli=496 bytes onDemand chunk-za9tr8mr.js: identity=2420 gzip=1198 brotli=1082 bytes deferred chunk-etz6pfw7.js: identity=97656 gzip=33165 brotli=29329 bytes onDemand chunk-hcqkhvhy.js: identity=6265 gzip=2105 brotli=1866 bytes critical chunk-yr0r38s4.js: identity=386 gzip=238 brotli=196 bytes onDemand chunk-3g02wn4t.js: identity=5784 gzip=2189 brotli=1938 bytes critical main.js: identity=111029 gzip=40357 brotli=35032 bytes critical chunk-f42879qe.js: identity=9810 gzip=4016 brotli=3459 bytes critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes onDemand chunk-d2w5wypd.js: identity=1616 gzip=866 brotli=739 bytes onDemand chunk-7fb0ge0v.js: identity=540 gzip=351 brotli=316 bytes critical chunk-433eyr4g.js: identity=162 gzip=150 brotli=127 bytes critical chunk-7nythy32.js: identity=15859 gzip=6182 brotli=5484 bytes critical chunk-z93cxfvm.js: identity=21235 gzip=6857 brotli=6128 bytes critical chunk-969atqet.js: identity=8377 gzip=3575 brotli=3180 bytes JavaScript transfer, critical: identity=951648 gzip=294993/307200 brotli=245357/256000 bytes JavaScript transfer, deferred: identity=140656 gzip=49746/51200 brotli=43934/45056 bytes JavaScript transfer, onDemand: identity=185163 gzip=72610/20480 brotli=64565/18432 bytes JavaScript transfer, onDemand largest chunk chunk-ca8fvbxs.js: gzip=15178/20480 brotli=13487/18432 bytes (class total gzip=72610 brotli=64565, not limited) fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes ==> Rust stream oracle (for the differential test) ==> TypeScript protocol tests bun test v1.4.2 (744846f84) src/mesh-review-revocation.test.ts: (pass) review forbidden event cancels pending snapshot publication [3.24ms] (pass) subscription forbidden ends delivery before a late refresh rejection [1.78ms] (pass) subscription not found ends delivery before a late refresh rejection [3.86ms] (pass) subscription invalid input ends delivery before a late refresh rejection [1.49ms] (pass) subscription mesh unavailable ends delivery before a late refresh rejection [2.01ms] (pass) synchronous subscription refusal releases the transport exactly once [0.47ms] src/codec.test.ts: (pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [23.53ms] (pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.40ms] (pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.26ms] (pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.32ms] (pass) split mux header preserves trailing Close [0.62ms] src/mesh-review-paged-error.test.ts: (pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [3.40ms] (pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.43ms] (pass) a newer paged event owns publication before an earlier refresh resumes [5.47ms] src/mesh-review-refresh.test.ts: (pass) review superseded refresh failure cannot replace authoritative resync [1.77ms] (pass) superseded failure preserves a newer pending refresh [3.10ms] src/stream.test.ts: stream differential: 134 streams, 11439 schedules, zero divergences (pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [6262.79ms] (pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [14.85ms] src/mesh.test.ts: (pass) Mesh actions map to their typed action IDs and JSON inputs [3.28ms] (pass) Mesh watch coalesces change bursts and never publishes an older revision [8.26ms] (pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.23ms] src/mesh-review-continuation.test.ts: (pass) review continuation stops after stop [1.87ms] (pass) review continuation stops after forbidden [1.49ms] (pass) review continuation stops after superseded [1.27ms] src/mesh-pagination.test.ts: (pass) list assembles bounded pages using the same filter [0.51ms] (pass) a changed revision discards earlier pages before assembling its restart [0.22ms] (pass) malformed continuation is refused: {"revision":1,"offset":0} [0.32ms] (pass) malformed continuation is refused: {"revision":2,"offset":1} [0.03ms] (pass) malformed continuation is refused: {"revision":1,"offset":2} [0.01ms] (pass) watch never publishes a partial page; withdrawn=false [5.11ms] (pass) watch never publishes a partial page; withdrawn=true [1.37ms] (pass) a superseding equal-revision resync wins over pending page assembly [1.88ms] src/mesh-review-resync.test.ts: (pass) review watch applies same-revision authoritative resync [0.61ms] (pass) authoritative resync keeps priority over an equal-revision pending list [1.83ms] src/mesh-vectors.test.ts: (pass) every shared Mesh action vector passes through the typed client unchanged [8.24ms] (pass) shared Mesh event vectors drive the typed watch adapter [6.39ms] 36 pass 0 fail 34462 expect() calls Ran 36 tests across 10 files. [6.44s] ```

kayg commented

2026-10-12 17:05:28 +00:00

Author

Owner

Spec v4 documentation finished and pushed on access-rules-v4 at 2ba357265b, base b92e846da9. Seven atomic documentation commits; diff is exactly access-rules.md, three byte-identical round-three reports and v4-resolution-checks.md under docs/design/. No product code, decision file, dependency, budget, UI or deployment changed. Job build cache and generated Python cache removed; remaining temporary transcript files are removed after this upload. Issue stays open.

Round-three disposition: 9/9 P1 and 1/1 P2 have specified repairs; two P0s remain open owner questions. R3S-01 recommendation: name matching only on machines the person added or an admin marked “Names match people here”, one-time confirmed sign-in elsewhere. R3S-02 recommendation: outgoing mesh from someone-else-controlled sessions blocked by default; owner may explicitly allow “Connect to other machines as me” with “They can connect to other machines using your access.” Owner access loss ends everyone's control. These are recommendations, not owner-approved defaults. AI-token-created provenance is retained separately.

Trace: 111/111 distinct IDs/severities; P0=36/P1=58/P2=17; 101 specified resolutions, 3 accepted P2 limits, 5 historical partials linked to 2 open P0s. Q8 and AI answers folded: default 30 unused days/configurable/Never, qualifying-use clock and sign-out suppression, immutable owner/node credential type, self-reported renamable AI label, one chip, mandatory MCP own sign-in. Integrity: 3 JSON blocks parse/schema refs resolve, 3 round-three imports byte-identical, diff check passes. Retained RuleBodyV3 probe: 33 examples, 7 independent pairs, 10000 round trips/0 failures, 23 hostile-name classes (Unicode 16.0.0), 17/17 malformed refused. New runtime/adapter authorization is not tested by that probe. Evidence/self-review: docs/design/access-rules-verification/v4-resolution-checks.md, all 12 written scenario replays and PROCESS/round-three checklists.

Final-head scripts/verify fast exit 1: fmt/native fmt/CLI compile-out/clippy/workspace tests/cargo-deny PASS; static build FAIL, unchanged x86_64 size 21857264 vs 16404816 bytes (5452448 over). Aarch64/TypeScript dispatcher rows skipped after static failure. Supplemental ts_verify_fast exit 0: compiler/unit/production build/byte budgets/differential/protocol checks, including 36 final protocol tests and 34462 assertions. No #118 waiver needed. Complete final fast output is preserved verbatim in 13 transcript comments; supplemental output in 2 more. Passing the full gate requires D243 size integration work outside this docs-only brief. Build-host timing lines are mandatory output, not performance measurements.

Review steps: read the model and two owner questions in access-rules.md; compare the 111-row resolution table to the imported reports; replay the 12 scenarios in v4-resolution-checks.md. Independent verification must still challenge the written repairs. No screenshots claimed because no UI was built.

Final-head fast gate tail, verbatim:

==> static builds
    Finished `release` profile [optimized] target(s) in 0.66s
/home/kayg/.cache/codex-scratch/access-rules-v4/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 21857264 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Spec v4 documentation finished and pushed on access-rules-v4 at 2ba357265b7a235938fff004d606704332881b8c, base b92e846da90ec56b7f403b55f514a4755b211107. Seven atomic documentation commits; diff is exactly access-rules.md, three byte-identical round-three reports and v4-resolution-checks.md under docs/design/. No product code, decision file, dependency, budget, UI or deployment changed. Job build cache and generated Python cache removed; remaining temporary transcript files are removed after this upload. Issue stays open. Round-three disposition: 9/9 P1 and 1/1 P2 have specified repairs; two P0s remain open owner questions. R3S-01 recommendation: name matching only on machines the person added or an admin marked “Names match people here”, one-time confirmed sign-in elsewhere. R3S-02 recommendation: outgoing mesh from someone-else-controlled sessions blocked by default; owner may explicitly allow “Connect to other machines as me” with “They can connect to other machines using your access.” Owner access loss ends everyone's control. These are recommendations, not owner-approved defaults. AI-token-created provenance is retained separately. Trace: 111/111 distinct IDs/severities; P0=36/P1=58/P2=17; 101 specified resolutions, 3 accepted P2 limits, 5 historical partials linked to 2 open P0s. Q8 and AI answers folded: default 30 unused days/configurable/Never, qualifying-use clock and sign-out suppression, immutable owner/node credential type, self-reported renamable AI label, one chip, mandatory MCP own sign-in. Integrity: 3 JSON blocks parse/schema refs resolve, 3 round-three imports byte-identical, diff check passes. Retained RuleBodyV3 probe: 33 examples, 7 independent pairs, 10000 round trips/0 failures, 23 hostile-name classes (Unicode 16.0.0), 17/17 malformed refused. New runtime/adapter authorization is not tested by that probe. Evidence/self-review: docs/design/access-rules-verification/v4-resolution-checks.md, all 12 written scenario replays and PROCESS/round-three checklists. Final-head scripts/verify fast exit 1: fmt/native fmt/CLI compile-out/clippy/workspace tests/cargo-deny PASS; static build FAIL, unchanged x86_64 size 21857264 vs 16404816 bytes (5452448 over). Aarch64/TypeScript dispatcher rows skipped after static failure. Supplemental ts_verify_fast exit 0: compiler/unit/production build/byte budgets/differential/protocol checks, including 36 final protocol tests and 34462 assertions. No #118 waiver needed. Complete final fast output is preserved verbatim in 13 transcript comments; supplemental output in 2 more. Passing the full gate requires D243 size integration work outside this docs-only brief. Build-host timing lines are mandatory output, not performance measurements. Review steps: read the model and two owner questions in access-rules.md; compare the 111-row resolution table to the imported reports; replay the 12 scenarios in v4-resolution-checks.md. Independent verification must still challenge the written repairs. No screenshots claimed because no UI was built. Final-head fast gate tail, verbatim: ```text ==> static builds Finished `release` profile [optimized] target(s) in 0.66s /home/kayg/.cache/codex-scratch/access-rules-v4/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 21857264 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented

2026-10-12 17:08:15 +00:00

Author

Owner

Starting owner-answer incorporation on access-rules-v4b, base 2ba357265b. Read all 119 comments on #186, including the 2026-10-12 round-three answers, and confirmed parent #147 has 0 comments. I will update only docs/design/access-rules.md.

Starting owner-answer incorporation on access-rules-v4b, base 2ba357265b7a235938fff004d606704332881b8c. Read all 119 comments on #186, including the 2026-10-12 round-three answers, and confirmed parent #147 has 0 comments. I will update only docs/design/access-rules.md.

kayg commented

2026-10-12 17:13:33 +00:00

Author

Owner

Step 1 resolves R3S-01 in docs/design/access-rules.md. Commit 9ea37b33c0 updates the own-username scope and resolves S01, R2S-04 and F2-SURF-09. The table now records 105 specified resolutions, 3 accepted P2 limitations and 2 R3S-02-linked historical partials. git diff --check passed. R3S-02 remains open in this intermediate commit.

Step 1 resolves R3S-01 in docs/design/access-rules.md. Commit 9ea37b33c0685b250cddb271f6d78d7b40a2e0ce updates the own-username scope and resolves S01, R2S-04 and F2-SURF-09. The table now records 105 specified resolutions, 3 accepted P2 limitations and 2 R3S-02-linked historical partials. git diff --check passed. R3S-02 remains open in this intermediate commit.

kayg commented

2026-10-12 17:15:19 +00:00

Author

Owner

Step 2 resolves R3S-02 in docs/design/access-rules.md at e177c9b584. The spec now defines the visible expiring control rule, separate onward-connection opt-in, default refusal reason, D242 cut-off, audit attribution and AI-agent behavior; control maps to RuleBodyV3 use plus the existing until ending. Table: 108 specified resolutions, 3 accepted P2 limitations, 111 IDs. Commit whitespace check passed.

Step 2 resolves R3S-02 in docs/design/access-rules.md at e177c9b5846fb895a54355a922b417b73975a020. The spec now defines the visible expiring control rule, separate onward-connection opt-in, default refusal reason, D242 cut-off, audit attribution and AI-agent behavior; `control` maps to RuleBodyV3 `use` plus the existing `until` ending. Table: 108 specified resolutions, 3 accepted P2 limitations, 111 IDs. Commit whitespace check passed.

kayg referenced this issue

2026-10-12 17:23:18 +00:00

Research: our own logs, metrics and graphs across every machine — fast, no exporters, great defaults #193

kayg commented

2026-10-12 17:34:35 +00:00

Author

Owner

Gate finding at head e177c9b584: scripts/verify fast failed remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight at crates/infraternal-agent/src/remote_client_tests.rs:402 (73 passed, 1 failed, 12 ignored). Verbatim test output includes tcp_proxy_spacing_us=162057; that is incidental gate output, not performance evidence. This test is outside the specified #118 baseline exceptions, so no waiver is claimed. The changed path is docs/design/access-rules.md only; the gate is continuing.

Gate finding at head e177c9b5846fb895a54355a922b417b73975a020: `scripts/verify fast` failed `remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight` at crates/infraternal-agent/src/remote_client_tests.rs:402 (73 passed, 1 failed, 12 ignored). Verbatim test output includes `tcp_proxy_spacing_us=162057`; that is incidental gate output, not performance evidence. This test is outside the specified #118 baseline exceptions, so no waiver is claimed. The changed path is docs/design/access-rules.md only; the gate is continuing.

kayg referenced this issue

2026-10-12 17:44:18 +00:00

Research: our own logs, metrics and graphs across every machine — fast, no exporters, great defaults #193

kayg commented

2026-10-12 17:47:12 +00:00

Author

Owner

Final-head scripts/verify fast transcript 1/9; head e177c9b584; exit 1. Verbatim output. Incidental build-host timing lines are gate output, not performance evidence.

METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=295.96 p99_ms=314.24 result=PASS

==> fmt

==> VT native fmt

==> CLI plugin compile-out
disabled CLI plugin dependencies: absent from normal dependency graph
   Compiling proc-macro2 v1.0.107
   Compiling quote v1.0.47
   Compiling unicode-ident v1.0.26
   Compiling libc v0.2.190
   Compiling serde_core v1.0.229
   Compiling memchr v2.8.3
   Compiling autocfg v1.5.1
   Compiling zmij v1.0.23
   Compiling cfg-if v1.0.5
   Compiling cfg_aliases v0.2.2
   Compiling utf8parse v0.2.2
   Compiling arrayvec v0.7.8
   Compiling is_terminal_polyfill v1.70.2
   Compiling anstyle-parse v1.0.0
   Compiling nix v0.30.1
   Compiling colorchoice v1.0.5
   Compiling anstyle-query v1.1.5
   Compiling anstyle v1.0.14
   Compiling serde_json v1.0.151
   Compiling serde v1.0.229
   Compiling memoffset v0.9.1
   Compiling getrandom v0.4.3
   Compiling itoa v1.0.18
   Compiling thiserror v2.0.21
   Compiling anstream v1.0.0
   Compiling bitflags v2.13.2
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-shim)
   Compiling vte v0.15.0
   Compiling heck v0.5.0
   Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-plugin-api)
   Compiling strsim v0.11.1
   Compiling clap_lex v1.1.1
   Compiling bytes v1.12.1
   Compiling pin-project-lite v0.2.17
   Compiling unicode-width v0.2.2
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal)
   Compiling clap_builder v4.6.7
   Compiling vt100 v0.16.2
   Compiling syn v3.0.6
   Compiling errno v0.3.14
   Compiling mio v1.2.4
   Compiling socket2 v0.6.5
   Compiling signal-hook-registry v1.4.8
   Compiling uuid v1.27.0
   Compiling serde_derive v1.0.229
   Compiling clap_derive v4.6.7
   Compiling tokio-macros v2.7.2
   Compiling thiserror-impl v2.0.21
   Compiling tokio v1.53.2
   Compiling clap v4.6.7
    Finished `test` profile [unoptimized + debuginfo] target(s) in 2m 37s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/infraternal-d0028d263474a180)

running 24 tests
test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok
test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok
test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok
test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok
test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok
test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok
test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok
test status_tests::custom_named_server_service_is_reported_as_running ... ok
test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok
test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok

test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s


==> clippy
    Checking cfg-if v1.0.5
   Compiling libc v0.2.190
   Compiling serde v1.0.229
   Compiling serde_core v1.0.229
   Compiling version_check v0.9.5
   Compiling shlex v2.0.1
   Compiling find-msvc-tools v0.1.14
    Checking memchr v2.8.3
    Checking pin-project-lite v0.2.17
    Checking itoa v1.0.18
   Compiling syn v3.0.6
   Compiling syn v2.0.119
    Checking typenum v1.20.1
   Compiling generic-array v0.14.7
    Checking bytes v1.12.1
   Compiling pkg-config v0.3.34
   Compiling vcpkg v0.2.15
    Checking once_cell v1.21.4
   Compiling icu_properties_data v2.3.0
    Checking subtle v2.6.1
   Compiling icu_normalizer_data v2.3.0
    Checking log v0.4.34
    Checking tracing-core v0.1.36
    Checking futures-core v0.3.34
    Checking stable_deref_trait v1.2.1
   Compiling num-traits v0.2.19
    Checking smallvec v1.16.2
    Checking futures-sink v0.3.34
   Compiling jobserver v0.1.35
    Checking slab v0.4.12
   Compiling crossbeam-utils v0.8.23
   Compiling parking_lot_core v0.9.12
    Checking cpufeatures v0.2.17
    Checking block-buffer v0.10.4
    Checking writeable v0.6.4
    Checking getrandom v0.2.17
    Checking errno v0.3.14
    Checking socket2 v0.6.5
    Checking rand_core v0.6.4
    Checking mio v1.2.4
   Compiling cc v1.6.0
    Checking litemap v0.8.3
    Checking signal-hook-registry v1.4.8
    Checking crypto-common v0.1.7
    Checking digest v0.10.7
    Checking utf8_iter v1.0.4
   Compiling serde_json v1.0.151
    Checking zmij v1.0.23
    Checking equivalent v1.0.2
    Checking percent-encoding v2.3.2
   Compiling scopeguard v1.2.0
    Checking form_urlencoded v1.2.2
   Compiling lock_api v0.4.14
    Checking futures-task v0.3.34
    Checking hashbrown v0.17.1
    Checking futures-io v0.3.34
   Compiling libsqlite3-sys v0.30.1
    Checking indexmap v2.14.2
   Compiling synstructure v0.14.0
   Compiling serde_derive v1.0.229
   Compiling displaydoc v0.2.7
   Compiling zerovec-derive v0.11.6
   Compiling tokio-macros v2.7.2
   Compiling thiserror-impl v2.0.21
   Compiling futures-macro v0.3.34
   Compiling tracing-attributes v0.1.31
   Compiling zerofrom-derive v0.1.8
   Compiling yoke-derive v0.8.4
    Checking tokio v1.53.2
   Compiling foldhash v0.1.5
    Checking futures-util v0.3.34
   Compiling allocator-api2 v0.2.21
    Checking tracing v0.1.44
   Compiling hashbrown v0.15.5
    Checking thiserror v2.0.21
   Compiling parking_lot v0.12.5
    Checking zerofrom v0.1.8
    Checking futures-channel v0.3.34
    Checking yoke v0.8.3
   Compiling parking v2.2.1
   Compiling crc-catalog v2.5.0
   Compiling zerovec v0.11.8
   Compiling zerotrie v0.2.5
    Checking bitflags v2.13.2
   Compiling crc v3.4.0
   Compiling tinystr v0.8.4
   Compiling potential_utf v0.1.6
   Compiling sha2 v0.10.9
   Compiling event-listener v5.4.2
   Compiling crossbeam-queue v0.3.14
   Compiling icu_collections v2.3.0
   Compiling icu_locale_core v2.3.0
   Compiling futures-intrusive v0.5.0
   Compiling hashlink v0.10.0
   Compiling spin v0.9.9
   Compiling ryu v1.0.23
   Compiling base64 v0.22.1
   Compiling flume v0.11.1
   Compiling futures-executor v0.3.34
   Compiling icu_provider v2.3.1
   Compiling atoi v2.0.0
   Compiling either v1.18.0
   Compiling serde_urlencoded v0.7.1
   Compiling icu_properties v2.3.0
   Compiling icu_normalizer v2.3.0
    Checking tokio-stream v0.1.19
   Compiling dotenvy v0.15.7
   Compiling hex v0.4.3
   Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-plugin-api)
   Compiling nix v0.30.1
    Checking memoffset v0.9.1
    Checking rand_core v0.10.1
   Compiling getrandom v0.4.3
    Checking zeroize v1.9.0
    Checking arrayvec v0.7.8
   Compiling openssl-src v300.6.1+3.6.3
   Compiling idna_adapter v1.2.2
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-shim)
    Checking infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-protocol)
    Checking foreign-types-shared v0.1.1
   Compiling openssl v0.10.81
   Compiling idna v1.1.0
    Checking vte v0.15.0
   Compiling openssl-sys v0.9.117
    Checking foreign-types v0.3.2
   Compiling openssl-macros v0.1.1
   Compiling zerocopy v0.8.60
   Compiling zerocopy-derive v0.8.60
   Compiling url v2.5.8
    Checking uuid v1.27.0
   Compiling ring v0.17.14
    Checking http v1.5.0
   Compiling getrandom v0.3.4
    Checking untrusted v0.9.0
    Checking rustls-pki-types v1.15.1
    Checking cpufeatures v0.3.1
   Compiling rustls v0.23.45
    Checking tinyvec v1.13.3
    Checking chacha20 v0.10.2
   Compiling quinn-udp v0.5.16
   Compiling sqlx-core v0.8.6
   Compiling time-core v0.1.9
    Checking regex-syntax v0.8.11
    Checking minimal-lexical v0.2.1
   Compiling thiserror v1.0.69
   Compiling tokio-openssl v0.6.5
   Compiling num-conv v0.2.2
   Compiling httparse v1.10.1
    Checking nom v7.1.3
   Compiling time-macros v0.2.32
    Checking rand_core v0.9.5
    Checking rand v0.10.3
    Checking regex-automata v0.4.18
    Checking http-body v1.1.0
    Checking rand_pcg v0.10.2
   Compiling quinn v0.11.12
   Compiling thiserror-impl v1.0.69
   Compiling synstructure v0.13.2
    Checking sqlx-sqlite v0.8.6
    Checking rustc-hash v2.1.3
    Checking deranged v0.5.8
    Checking powerfmt v0.2.1
    Checking lru-slab v0.1.3
   Compiling asn1-rs-derive v0.5.1
    Checking rusticata-macros v4.1.0
    Checking tokio-util v0.7.19
   Compiling asn1-rs-impl v0.2.0
    Checking tower-service v0.3.3
    Checking data-encoding v2.11.1
    Checking num-integer v0.1.47
    Checking time v0.3.55
    Checking try-lock v0.2.5
   Compiling oid-registry v0.7.1
    Checking base64 v0.21.7
   Compiling pastey v0.1.1
    Checking atomic-waker v1.1.2
    Checking fnv v1.0.7
    Checking lazy_static v1.5.1
    Checking httpdate v1.0.3
    Checking want v0.3.2
    Checking h2 v0.4.19
    Checking num-bigint v0.4.8
   Compiling webauthn-attestation-ca v0.5.5
   Compiling rustversion v1.0.23
    Checking tower-layer v0.3.3
    Checking base64urlsafedata v0.5.5
   Compiling unicase v2.10.0
    Checking mime v0.3.17
   Compiling mime_guess v2.0.5
    Checking http-body-util v0.1.5
    Checking sha1 v0.10.7
   Compiling sqlx-macros-core v0.8.6
    Checking asn1-rs v0.6.2
   Compiling fs-err v3.3.2
    Checking sync_wrapper v1.0.2
   Compiling webauthn-rs-core v0.5.5
    Checking rustls-webpki v0.103.15
    Checking webauthn-rs-proto v0.5.5
    Checking hex-conservative v0.2.3
    Checking ppv-lite86 v0.2.21
    Checking half v2.7.1
    Checking base64ct v1.8.3
    Checking der-parser v9.0.0
    Checking rand_chacha v0.9.0
    Checking rand_chacha v0.3.1
    Checking serde_cbor_2 v0.13.0
    Checking password-hash v0.5.0
    Checking rand v0.9.5
    Checking x509-parser v0.16.0
   Compiling sqlx-macros v0.8.6
    Checking hyper v1.11.1
    Checking rand v0.8.8
    Checking bitcoin_hashes v0.14.101
    Checking tower v0.5.3
    Checking tungstenite v0.29.0
    Checking axum-core v0.5.6
    Checking sharded-slab v0.1.7
    Checking tokio-tungstenite v0.29.0
    Checking matchers v0.2.0
    Checking unicode-normalization v0.1.25
    Checking tracing-serde v0.2.0
    Checking hyper-util v0.1.21
    Checking blake2 v0.10.6
    Checking arc-swap v1.9.2
    Checking serde_path_to_error v0.1.20
    Checking tracing-log v0.2.0
    Checking thread_local v1.1.10
    Checking nu-ansi-term v0.50.3
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-server)
    Checking http-range-header v0.4.2
    Checking matchit v0.8.4
    Checking argon2 v0.5.3
    Checking utf8parse v0.2.2
    Checking anstyle v1.0.14
    Checking colorchoice v1.0.5
    Checking tower-http v0.6.11
    Checking tracing-subscriber v0.3.23
    Checking bip39 v2.2.2
    Checking quinn-proto v0.11.19
    Checking axum v0.8.9
    Checking anstyle-parse v1.0.0
    Checking anstyle-query v1.1.5
    Checking sqlx v0.8.6
    Checking is_terminal_polyfill v1.70.2
   Compiling libfuzzer-sys v0.4.13
    Checking strsim v0.11.1
    Checking clap_lex v1.1.1
   Compiling clap_derive v4.6.7
    Checking anstream v1.0.0
    Checking arbitrary v1.4.2
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal)
    Checking clap_builder v4.6.7
    Checking inout v0.1.4
    Checking unicode-width v0.2.2
    Checking cipher v0.4.4
    Checking vt100 v0.16.2
    Checking universal-hash v0.5.1
    Checking opaque-debug v0.3.1
    Checking ctr v0.9.2
    Checking aes v0.8.4
    Checking polyval v0.6.2
    Checking ghash v0.5.1
    Checking hmac v0.12.1
    Checking aead v0.5.2
   Compiling crossbeam-epoch v0.9.21
    Checking hkdf v0.12.4
    Checking infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-mesh)
    Checking infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/ssh)
    Checking infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/host-facts)
    Checking infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/release)
    Checking infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/backup)
    Checking infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/relay)
    Checking aes-gcm v0.10.3
   Compiling crossbeam-deque v0.8.8
   Compiling rayon-core v1.13.0
    Checking plotters-backend v0.3.7
    Checking ciborium-io v0.2.2
    Checking plotters-svg v0.3.7
    Checking itertools v0.13.0
    Checking cast v0.3.0
    Checking ciborium-ll v0.2.2
    Checking same-file v1.0.6
    Checking plotters v0.3.7
    Checking ciborium v0.2.2
    Checking regex v1.13.1
    Checking walkdir v2.5.0
    Checking tinytemplate v1.2.1
    Checking oorandom v11.1.5
    Checking anes v0.1.6
    Checking criterion-plot v0.6.0
    Checking rayon v1.12.0
    Checking clap v4.6.7
    Checking criterion v0.7.0
    Checking infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/mesh)
    Checking infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/remote)
    Checking axum-server v0.8.0
    Checking webauthn-rs v0.5.5
    Checking infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-agent)
    Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/fuzz)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 4m 51s

==> test
   Compiling memchr v2.8.3
   Compiling typenum v1.20.1
   Compiling serde_core v1.0.229
   Compiling futures-core v0.3.34
   Compiling once_cell v1.21.4
   Compiling stable_deref_trait v1.2.1
   Compiling writeable v0.6.4
   Compiling getrandom v0.2.17
   Compiling subtle v2.6.1
   Compiling zerofrom v0.1.8
   Compiling litemap v0.8.3
   Compiling log v0.4.34
   Compiling utf8_iter v1.0.4
   Compiling icu_normalizer_data v2.3.0
   Compiling rand_core v0.6.4
   Compiling yoke v0.8.3
   Compiling smallvec v1.16.2
   Compiling tracing-core v0.1.36
   Compiling cpufeatures v0.2.17
   Compiling icu_properties_data v2.3.0
   Compiling percent-encoding v2.3.2
   Compiling tokio v1.53.2
   Compiling num-traits v0.2.19
   Compiling futures-sink v0.3.34
   Compiling scopeguard v1.2.0
   Compiling futures-io v0.3.34
   Compiling zerovec v0.11.8
   Compiling generic-array v0.14.7
   Compiling zerotrie v0.2.5
   Compiling form_urlencoded v1.2.2
   Compiling equivalent v1.0.2
   Compiling slab v0.4.12
   Compiling futures-task v0.3.34
   Compiling lock_api v0.4.14
   Compiling hashbrown v0.17.1
   Compiling thiserror v2.0.21
   Compiling tracing v0.1.44
   Compiling crossbeam-utils v0.8.23
   Compiling foldhash v0.1.5
   Compiling allocator-api2 v0.2.21
   Compiling futures-util v0.3.34
   Compiling ryu v1.0.23
   Compiling crypto-common v0.1.7
   Compiling block-buffer v0.10.4
   Compiling tinystr v0.8.4
   Compiling potential_utf v0.1.6
   Compiling parking v2.2.1
   Compiling crc-catalog v2.5.0
   Compiling indexmap v2.14.2
   Compiling digest v0.10.7
   Compiling hashbrown v0.15.5
   Compiling spin v0.9.9
   Compiling icu_locale_core v2.3.0
   Compiling icu_collections v2.3.0
   Compiling event-listener v5.4.2
   Compiling crc v3.4.0
   Compiling serde v1.0.229
   Compiling serde_json v1.0.151
   Compiling parking_lot_core v0.9.12
   Compiling mio v1.2.4
   Compiling socket2 v0.6.5
   Compiling hashlink v0.10.0
   Compiling parking_lot v0.12.5
   Compiling either v1.18.0
   Compiling futures-channel v0.3.34
   Compiling icu_provider v2.3.1
   Compiling sha2 v0.10.9
   Compiling crossbeam-queue v0.3.14
   Compiling libsqlite3-sys v0.30.1
   Compiling futures-intrusive v0.5.0
   Compiling hex v0.4.3
   Compiling atoi v2.0.0
   Compiling icu_properties v2.3.0
   Compiling icu_normalizer v2.3.0
   Compiling serde_urlencoded v0.7.1
   Compiling flume v0.11.1
   Compiling base64 v0.22.1
   Compiling tokio-stream v0.1.19
   Compiling futures-executor v0.3.34
   Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-plugin-api)
   Compiling nix v0.30.1
   Compiling rand_core v0.10.1
   Compiling zeroize v1.9.0
   Compiling idna_adapter v1.2.2
   Compiling vte v0.15.0
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-shim)
   Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-protocol)
   Compiling idna v1.1.0
   Compiling getrandom v0.4.3
   Compiling foreign-types-shared v0.1.1
   Compiling openssl-sys v0.9.117
   Compiling zerocopy v0.8.60
   Compiling untrusted v0.9.0
   Compiling foreign-types v0.3.2
   Compiling uuid v1.27.0
   Compiling rustls-pki-types v1.15.1
   Compiling url v2.5.8
   Compiling ring v0.17.14
   Compiling http v1.5.0
   Compiling cpufeatures v0.3.1
   Compiling tinyvec v1.13.3
   Compiling chacha20 v0.10.2
   Compiling rand_pcg v0.10.2
   Compiling lru-slab v0.1.3
   Compiling openssl v0.10.81
   Compiling rustc-hash v2.1.3
   Compiling quinn-udp v0.5.16
   Compiling sqlx-core v0.8.6
   Compiling getrandom v0.3.4
   Compiling rand v0.10.3
   Compiling regex-syntax v0.8.11
   Compiling num-conv v0.2.2
   Compiling minimal-lexical v0.2.1
   Compiling time-core v0.1.9
   Compiling rand_core v0.9.5
   Compiling http-body v1.1.0
   Compiling rustls-webpki v0.103.15
   Compiling nom v7.1.3
   Compiling time-macros v0.2.32
   Compiling deranged v0.5.8
   Compiling powerfmt v0.2.1
   Compiling thiserror v1.0.69
   Compiling ppv-lite86 v0.2.21
   Compiling half v2.7.1
   Compiling httparse v1.10.1
   Compiling rustls v0.23.45
   Compiling rand_chacha v0.9.0
   Compiling sqlx-sqlite v0.8.6
   Compiling regex-automata v0.4.18
   Compiling tokio-util v0.7.19
   Compiling tower-service v0.3.3
   Compiling data-encoding v2.11.1
   Compiling num-integer v0.1.47
   Compiling rand v0.9.5
   Compiling tokio-openssl v0.6.5
   Compiling rusticata-macros v4.1.0
   Compiling fnv v1.0.7
   Compiling httpdate v1.0.3
   Compiling time v0.3.55
   Compiling try-lock v0.2.5
   Compiling base64 v0.21.7
   Compiling lazy_static v1.5.1
   Compiling atomic-waker v1.1.2
   Compiling num-bigint v0.4.8
   Compiling want v0.3.2
   Compiling mime v0.3.17
   Compiling h2 v0.4.19
   Compiling unicase v2.10.0
   Compiling base64urlsafedata v0.5.5
   Compiling tower-layer v0.3.3
   Compiling http-body-util v0.1.5
   Compiling sha1 v0.10.7
   Compiling mime_guess v2.0.5
   Compiling sqlx-macros-core v0.8.6
   Compiling sync_wrapper v1.0.2
   Compiling webauthn-attestation-ca v0.5.5
   Compiling webauthn-rs-proto v0.5.5
   Compiling serde_cbor_2 v0.13.0
   Compiling rand_chacha v0.3.1
   Compiling tungstenite v0.29.0
   Compiling asn1-rs v0.6.2
   Compiling hex-conservative v0.2.3
   Compiling base64ct v1.8.3
   Compiling matchers v0.2.0
   Compiling axum-core v0.5.6
   Compiling quinn-proto v0.11.19
   Compiling rand v0.8.8
   Compiling sqlx-macros v0.8.6
   Compiling tower v0.5.3
   Compiling bitcoin_hashes v0.14.101
   Compiling arc-swap v1.9.2
   Compiling fs-err v3.3.2
   Compiling password-hash v0.5.0
   Compiling tokio-tungstenite v0.29.0
   Compiling sharded-slab v0.1.7
   Compiling unicode-normalization v0.1.25
   Compiling oid-registry v0.7.1
   Compiling der-parser v9.0.0
   Compiling tracing-serde v0.2.0
   Compiling blake2 v0.10.6
   Compiling serde_path_to_error v0.1.20
   Compiling tracing-log v0.2.0
   Compiling thread_local v1.1.10
   Compiling nu-ansi-term v0.50.3
   Compiling http-range-header v0.4.2
   Compiling matchit v0.8.4
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-server)
   Compiling sqlx v0.8.6
   Compiling bip39 v2.2.2
   Compiling clap v4.6.7
   Compiling x509-parser v0.16.0
   Compiling argon2 v0.5.3
   Compiling inout v0.1.4
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal)
   Compiling tower-http v0.6.11
   Compiling tracing-subscriber v0.3.23
   Compiling universal-hash v0.5.1

Final-head `scripts/verify fast` transcript 1/9; head e177c9b5846fb895a54355a922b417b73975a020; exit 1. Verbatim output. Incidental build-host timing lines are gate output, not performance evidence. ```text METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=295.96 p99_ms=314.24 result=PASS ==> fmt ==> VT native fmt ==> CLI plugin compile-out disabled CLI plugin dependencies: absent from normal dependency graph Compiling proc-macro2 v1.0.107 Compiling quote v1.0.47 Compiling unicode-ident v1.0.26 Compiling libc v0.2.190 Compiling serde_core v1.0.229 Compiling memchr v2.8.3 Compiling autocfg v1.5.1 Compiling zmij v1.0.23 Compiling cfg-if v1.0.5 Compiling cfg_aliases v0.2.2 Compiling utf8parse v0.2.2 Compiling arrayvec v0.7.8 Compiling is_terminal_polyfill v1.70.2 Compiling anstyle-parse v1.0.0 Compiling nix v0.30.1 Compiling colorchoice v1.0.5 Compiling anstyle-query v1.1.5 Compiling anstyle v1.0.14 Compiling serde_json v1.0.151 Compiling serde v1.0.229 Compiling memoffset v0.9.1 Compiling getrandom v0.4.3 Compiling itoa v1.0.18 Compiling thiserror v2.0.21 Compiling anstream v1.0.0 Compiling bitflags v2.13.2 Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-shim) Compiling vte v0.15.0 Compiling heck v0.5.0 Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-plugin-api) Compiling strsim v0.11.1 Compiling clap_lex v1.1.1 Compiling bytes v1.12.1 Compiling pin-project-lite v0.2.17 Compiling unicode-width v0.2.2 Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal) Compiling clap_builder v4.6.7 Compiling vt100 v0.16.2 Compiling syn v3.0.6 Compiling errno v0.3.14 Compiling mio v1.2.4 Compiling socket2 v0.6.5 Compiling signal-hook-registry v1.4.8 Compiling uuid v1.27.0 Compiling serde_derive v1.0.229 Compiling clap_derive v4.6.7 Compiling tokio-macros v2.7.2 Compiling thiserror-impl v2.0.21 Compiling tokio v1.53.2 Compiling clap v4.6.7 Finished `test` profile [unoptimized + debuginfo] target(s) in 2m 37s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/infraternal-d0028d263474a180) running 24 tests test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok test status_tests::custom_named_server_service_is_reported_as_running ... ok test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s ==> clippy Checking cfg-if v1.0.5 Compiling libc v0.2.190 Compiling serde v1.0.229 Compiling serde_core v1.0.229 Compiling version_check v0.9.5 Compiling shlex v2.0.1 Compiling find-msvc-tools v0.1.14 Checking memchr v2.8.3 Checking pin-project-lite v0.2.17 Checking itoa v1.0.18 Compiling syn v3.0.6 Compiling syn v2.0.119 Checking typenum v1.20.1 Compiling generic-array v0.14.7 Checking bytes v1.12.1 Compiling pkg-config v0.3.34 Compiling vcpkg v0.2.15 Checking once_cell v1.21.4 Compiling icu_properties_data v2.3.0 Checking subtle v2.6.1 Compiling icu_normalizer_data v2.3.0 Checking log v0.4.34 Checking tracing-core v0.1.36 Checking futures-core v0.3.34 Checking stable_deref_trait v1.2.1 Compiling num-traits v0.2.19 Checking smallvec v1.16.2 Checking futures-sink v0.3.34 Compiling jobserver v0.1.35 Checking slab v0.4.12 Compiling crossbeam-utils v0.8.23 Compiling parking_lot_core v0.9.12 Checking cpufeatures v0.2.17 Checking block-buffer v0.10.4 Checking writeable v0.6.4 Checking getrandom v0.2.17 Checking errno v0.3.14 Checking socket2 v0.6.5 Checking rand_core v0.6.4 Checking mio v1.2.4 Compiling cc v1.6.0 Checking litemap v0.8.3 Checking signal-hook-registry v1.4.8 Checking crypto-common v0.1.7 Checking digest v0.10.7 Checking utf8_iter v1.0.4 Compiling serde_json v1.0.151 Checking zmij v1.0.23 Checking equivalent v1.0.2 Checking percent-encoding v2.3.2 Compiling scopeguard v1.2.0 Checking form_urlencoded v1.2.2 Compiling lock_api v0.4.14 Checking futures-task v0.3.34 Checking hashbrown v0.17.1 Checking futures-io v0.3.34 Compiling libsqlite3-sys v0.30.1 Checking indexmap v2.14.2 Compiling synstructure v0.14.0 Compiling serde_derive v1.0.229 Compiling displaydoc v0.2.7 Compiling zerovec-derive v0.11.6 Compiling tokio-macros v2.7.2 Compiling thiserror-impl v2.0.21 Compiling futures-macro v0.3.34 Compiling tracing-attributes v0.1.31 Compiling zerofrom-derive v0.1.8 Compiling yoke-derive v0.8.4 Checking tokio v1.53.2 Compiling foldhash v0.1.5 Checking futures-util v0.3.34 Compiling allocator-api2 v0.2.21 Checking tracing v0.1.44 Compiling hashbrown v0.15.5 Checking thiserror v2.0.21 Compiling parking_lot v0.12.5 Checking zerofrom v0.1.8 Checking futures-channel v0.3.34 Checking yoke v0.8.3 Compiling parking v2.2.1 Compiling crc-catalog v2.5.0 Compiling zerovec v0.11.8 Compiling zerotrie v0.2.5 Checking bitflags v2.13.2 Compiling crc v3.4.0 Compiling tinystr v0.8.4 Compiling potential_utf v0.1.6 Compiling sha2 v0.10.9 Compiling event-listener v5.4.2 Compiling crossbeam-queue v0.3.14 Compiling icu_collections v2.3.0 Compiling icu_locale_core v2.3.0 Compiling futures-intrusive v0.5.0 Compiling hashlink v0.10.0 Compiling spin v0.9.9 Compiling ryu v1.0.23 Compiling base64 v0.22.1 Compiling flume v0.11.1 Compiling futures-executor v0.3.34 Compiling icu_provider v2.3.1 Compiling atoi v2.0.0 Compiling either v1.18.0 Compiling serde_urlencoded v0.7.1 Compiling icu_properties v2.3.0 Compiling icu_normalizer v2.3.0 Checking tokio-stream v0.1.19 Compiling dotenvy v0.15.7 Compiling hex v0.4.3 Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-plugin-api) Compiling nix v0.30.1 Checking memoffset v0.9.1 Checking rand_core v0.10.1 Compiling getrandom v0.4.3 Checking zeroize v1.9.0 Checking arrayvec v0.7.8 Compiling openssl-src v300.6.1+3.6.3 Compiling idna_adapter v1.2.2 Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-shim) Checking infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-protocol) Checking foreign-types-shared v0.1.1 Compiling openssl v0.10.81 Compiling idna v1.1.0 Checking vte v0.15.0 Compiling openssl-sys v0.9.117 Checking foreign-types v0.3.2 Compiling openssl-macros v0.1.1 Compiling zerocopy v0.8.60 Compiling zerocopy-derive v0.8.60 Compiling url v2.5.8 Checking uuid v1.27.0 Compiling ring v0.17.14 Checking http v1.5.0 Compiling getrandom v0.3.4 Checking untrusted v0.9.0 Checking rustls-pki-types v1.15.1 Checking cpufeatures v0.3.1 Compiling rustls v0.23.45 Checking tinyvec v1.13.3 Checking chacha20 v0.10.2 Compiling quinn-udp v0.5.16 Compiling sqlx-core v0.8.6 Compiling time-core v0.1.9 Checking regex-syntax v0.8.11 Checking minimal-lexical v0.2.1 Compiling thiserror v1.0.69 Compiling tokio-openssl v0.6.5 Compiling num-conv v0.2.2 Compiling httparse v1.10.1 Checking nom v7.1.3 Compiling time-macros v0.2.32 Checking rand_core v0.9.5 Checking rand v0.10.3 Checking regex-automata v0.4.18 Checking http-body v1.1.0 Checking rand_pcg v0.10.2 Compiling quinn v0.11.12 Compiling thiserror-impl v1.0.69 Compiling synstructure v0.13.2 Checking sqlx-sqlite v0.8.6 Checking rustc-hash v2.1.3 Checking deranged v0.5.8 Checking powerfmt v0.2.1 Checking lru-slab v0.1.3 Compiling asn1-rs-derive v0.5.1 Checking rusticata-macros v4.1.0 Checking tokio-util v0.7.19 Compiling asn1-rs-impl v0.2.0 Checking tower-service v0.3.3 Checking data-encoding v2.11.1 Checking num-integer v0.1.47 Checking time v0.3.55 Checking try-lock v0.2.5 Compiling oid-registry v0.7.1 Checking base64 v0.21.7 Compiling pastey v0.1.1 Checking atomic-waker v1.1.2 Checking fnv v1.0.7 Checking lazy_static v1.5.1 Checking httpdate v1.0.3 Checking want v0.3.2 Checking h2 v0.4.19 Checking num-bigint v0.4.8 Compiling webauthn-attestation-ca v0.5.5 Compiling rustversion v1.0.23 Checking tower-layer v0.3.3 Checking base64urlsafedata v0.5.5 Compiling unicase v2.10.0 Checking mime v0.3.17 Compiling mime_guess v2.0.5 Checking http-body-util v0.1.5 Checking sha1 v0.10.7 Compiling sqlx-macros-core v0.8.6 Checking asn1-rs v0.6.2 Compiling fs-err v3.3.2 Checking sync_wrapper v1.0.2 Compiling webauthn-rs-core v0.5.5 Checking rustls-webpki v0.103.15 Checking webauthn-rs-proto v0.5.5 Checking hex-conservative v0.2.3 Checking ppv-lite86 v0.2.21 Checking half v2.7.1 Checking base64ct v1.8.3 Checking der-parser v9.0.0 Checking rand_chacha v0.9.0 Checking rand_chacha v0.3.1 Checking serde_cbor_2 v0.13.0 Checking password-hash v0.5.0 Checking rand v0.9.5 Checking x509-parser v0.16.0 Compiling sqlx-macros v0.8.6 Checking hyper v1.11.1 Checking rand v0.8.8 Checking bitcoin_hashes v0.14.101 Checking tower v0.5.3 Checking tungstenite v0.29.0 Checking axum-core v0.5.6 Checking sharded-slab v0.1.7 Checking tokio-tungstenite v0.29.0 Checking matchers v0.2.0 Checking unicode-normalization v0.1.25 Checking tracing-serde v0.2.0 Checking hyper-util v0.1.21 Checking blake2 v0.10.6 Checking arc-swap v1.9.2 Checking serde_path_to_error v0.1.20 Checking tracing-log v0.2.0 Checking thread_local v1.1.10 Checking nu-ansi-term v0.50.3 Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-server) Checking http-range-header v0.4.2 Checking matchit v0.8.4 Checking argon2 v0.5.3 Checking utf8parse v0.2.2 Checking anstyle v1.0.14 Checking colorchoice v1.0.5 Checking tower-http v0.6.11 Checking tracing-subscriber v0.3.23 Checking bip39 v2.2.2 Checking quinn-proto v0.11.19 Checking axum v0.8.9 Checking anstyle-parse v1.0.0 Checking anstyle-query v1.1.5 Checking sqlx v0.8.6 Checking is_terminal_polyfill v1.70.2 Compiling libfuzzer-sys v0.4.13 Checking strsim v0.11.1 Checking clap_lex v1.1.1 Compiling clap_derive v4.6.7 Checking anstream v1.0.0 Checking arbitrary v1.4.2 Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal) Checking clap_builder v4.6.7 Checking inout v0.1.4 Checking unicode-width v0.2.2 Checking cipher v0.4.4 Checking vt100 v0.16.2 Checking universal-hash v0.5.1 Checking opaque-debug v0.3.1 Checking ctr v0.9.2 Checking aes v0.8.4 Checking polyval v0.6.2 Checking ghash v0.5.1 Checking hmac v0.12.1 Checking aead v0.5.2 Compiling crossbeam-epoch v0.9.21 Checking hkdf v0.12.4 Checking infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-mesh) Checking infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/ssh) Checking infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/host-facts) Checking infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/release) Checking infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/backup) Checking infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/relay) Checking aes-gcm v0.10.3 Compiling crossbeam-deque v0.8.8 Compiling rayon-core v1.13.0 Checking plotters-backend v0.3.7 Checking ciborium-io v0.2.2 Checking plotters-svg v0.3.7 Checking itertools v0.13.0 Checking cast v0.3.0 Checking ciborium-ll v0.2.2 Checking same-file v1.0.6 Checking plotters v0.3.7 Checking ciborium v0.2.2 Checking regex v1.13.1 Checking walkdir v2.5.0 Checking tinytemplate v1.2.1 Checking oorandom v11.1.5 Checking anes v0.1.6 Checking criterion-plot v0.6.0 Checking rayon v1.12.0 Checking clap v4.6.7 Checking criterion v0.7.0 Checking infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/mesh) Checking infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/remote) Checking axum-server v0.8.0 Checking webauthn-rs v0.5.5 Checking infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-agent) Checking infraternal-fuzz v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/fuzz) Finished `dev` profile [unoptimized + debuginfo] target(s) in 4m 51s ==> test Compiling memchr v2.8.3 Compiling typenum v1.20.1 Compiling serde_core v1.0.229 Compiling futures-core v0.3.34 Compiling once_cell v1.21.4 Compiling stable_deref_trait v1.2.1 Compiling writeable v0.6.4 Compiling getrandom v0.2.17 Compiling subtle v2.6.1 Compiling zerofrom v0.1.8 Compiling litemap v0.8.3 Compiling log v0.4.34 Compiling utf8_iter v1.0.4 Compiling icu_normalizer_data v2.3.0 Compiling rand_core v0.6.4 Compiling yoke v0.8.3 Compiling smallvec v1.16.2 Compiling tracing-core v0.1.36 Compiling cpufeatures v0.2.17 Compiling icu_properties_data v2.3.0 Compiling percent-encoding v2.3.2 Compiling tokio v1.53.2 Compiling num-traits v0.2.19 Compiling futures-sink v0.3.34 Compiling scopeguard v1.2.0 Compiling futures-io v0.3.34 Compiling zerovec v0.11.8 Compiling generic-array v0.14.7 Compiling zerotrie v0.2.5 Compiling form_urlencoded v1.2.2 Compiling equivalent v1.0.2 Compiling slab v0.4.12 Compiling futures-task v0.3.34 Compiling lock_api v0.4.14 Compiling hashbrown v0.17.1 Compiling thiserror v2.0.21 Compiling tracing v0.1.44 Compiling crossbeam-utils v0.8.23 Compiling foldhash v0.1.5 Compiling allocator-api2 v0.2.21 Compiling futures-util v0.3.34 Compiling ryu v1.0.23 Compiling crypto-common v0.1.7 Compiling block-buffer v0.10.4 Compiling tinystr v0.8.4 Compiling potential_utf v0.1.6 Compiling parking v2.2.1 Compiling crc-catalog v2.5.0 Compiling indexmap v2.14.2 Compiling digest v0.10.7 Compiling hashbrown v0.15.5 Compiling spin v0.9.9 Compiling icu_locale_core v2.3.0 Compiling icu_collections v2.3.0 Compiling event-listener v5.4.2 Compiling crc v3.4.0 Compiling serde v1.0.229 Compiling serde_json v1.0.151 Compiling parking_lot_core v0.9.12 Compiling mio v1.2.4 Compiling socket2 v0.6.5 Compiling hashlink v0.10.0 Compiling parking_lot v0.12.5 Compiling either v1.18.0 Compiling futures-channel v0.3.34 Compiling icu_provider v2.3.1 Compiling sha2 v0.10.9 Compiling crossbeam-queue v0.3.14 Compiling libsqlite3-sys v0.30.1 Compiling futures-intrusive v0.5.0 Compiling hex v0.4.3 Compiling atoi v2.0.0 Compiling icu_properties v2.3.0 Compiling icu_normalizer v2.3.0 Compiling serde_urlencoded v0.7.1 Compiling flume v0.11.1 Compiling base64 v0.22.1 Compiling tokio-stream v0.1.19 Compiling futures-executor v0.3.34 Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-plugin-api) Compiling nix v0.30.1 Compiling rand_core v0.10.1 Compiling zeroize v1.9.0 Compiling idna_adapter v1.2.2 Compiling vte v0.15.0 Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-shim) Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-protocol) Compiling idna v1.1.0 Compiling getrandom v0.4.3 Compiling foreign-types-shared v0.1.1 Compiling openssl-sys v0.9.117 Compiling zerocopy v0.8.60 Compiling untrusted v0.9.0 Compiling foreign-types v0.3.2 Compiling uuid v1.27.0 Compiling rustls-pki-types v1.15.1 Compiling url v2.5.8 Compiling ring v0.17.14 Compiling http v1.5.0 Compiling cpufeatures v0.3.1 Compiling tinyvec v1.13.3 Compiling chacha20 v0.10.2 Compiling rand_pcg v0.10.2 Compiling lru-slab v0.1.3 Compiling openssl v0.10.81 Compiling rustc-hash v2.1.3 Compiling quinn-udp v0.5.16 Compiling sqlx-core v0.8.6 Compiling getrandom v0.3.4 Compiling rand v0.10.3 Compiling regex-syntax v0.8.11 Compiling num-conv v0.2.2 Compiling minimal-lexical v0.2.1 Compiling time-core v0.1.9 Compiling rand_core v0.9.5 Compiling http-body v1.1.0 Compiling rustls-webpki v0.103.15 Compiling nom v7.1.3 Compiling time-macros v0.2.32 Compiling deranged v0.5.8 Compiling powerfmt v0.2.1 Compiling thiserror v1.0.69 Compiling ppv-lite86 v0.2.21 Compiling half v2.7.1 Compiling httparse v1.10.1 Compiling rustls v0.23.45 Compiling rand_chacha v0.9.0 Compiling sqlx-sqlite v0.8.6 Compiling regex-automata v0.4.18 Compiling tokio-util v0.7.19 Compiling tower-service v0.3.3 Compiling data-encoding v2.11.1 Compiling num-integer v0.1.47 Compiling rand v0.9.5 Compiling tokio-openssl v0.6.5 Compiling rusticata-macros v4.1.0 Compiling fnv v1.0.7 Compiling httpdate v1.0.3 Compiling time v0.3.55 Compiling try-lock v0.2.5 Compiling base64 v0.21.7 Compiling lazy_static v1.5.1 Compiling atomic-waker v1.1.2 Compiling num-bigint v0.4.8 Compiling want v0.3.2 Compiling mime v0.3.17 Compiling h2 v0.4.19 Compiling unicase v2.10.0 Compiling base64urlsafedata v0.5.5 Compiling tower-layer v0.3.3 Compiling http-body-util v0.1.5 Compiling sha1 v0.10.7 Compiling mime_guess v2.0.5 Compiling sqlx-macros-core v0.8.6 Compiling sync_wrapper v1.0.2 Compiling webauthn-attestation-ca v0.5.5 Compiling webauthn-rs-proto v0.5.5 Compiling serde_cbor_2 v0.13.0 Compiling rand_chacha v0.3.1 Compiling tungstenite v0.29.0 Compiling asn1-rs v0.6.2 Compiling hex-conservative v0.2.3 Compiling base64ct v1.8.3 Compiling matchers v0.2.0 Compiling axum-core v0.5.6 Compiling quinn-proto v0.11.19 Compiling rand v0.8.8 Compiling sqlx-macros v0.8.6 Compiling tower v0.5.3 Compiling bitcoin_hashes v0.14.101 Compiling arc-swap v1.9.2 Compiling fs-err v3.3.2 Compiling password-hash v0.5.0 Compiling tokio-tungstenite v0.29.0 Compiling sharded-slab v0.1.7 Compiling unicode-normalization v0.1.25 Compiling oid-registry v0.7.1 Compiling der-parser v9.0.0 Compiling tracing-serde v0.2.0 Compiling blake2 v0.10.6 Compiling serde_path_to_error v0.1.20 Compiling tracing-log v0.2.0 Compiling thread_local v1.1.10 Compiling nu-ansi-term v0.50.3 Compiling http-range-header v0.4.2 Compiling matchit v0.8.4 Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-server) Compiling sqlx v0.8.6 Compiling bip39 v2.2.2 Compiling clap v4.6.7 Compiling x509-parser v0.16.0 Compiling argon2 v0.5.3 Compiling inout v0.1.4 Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal) Compiling tower-http v0.6.11 Compiling tracing-subscriber v0.3.23 Compiling universal-hash v0.5.1 ```

kayg commented

2026-10-12 17:47:13 +00:00

Author

Owner

Final-head scripts/verify fast transcript 2/9; head e177c9b584; exit 1. Verbatim output. Incidental build-host timing lines are gate output, not performance evidence.

   Compiling cipher v0.4.4
   Compiling opaque-debug v0.3.1
   Compiling vt100 v0.16.2
   Compiling hyper v1.11.1
   Compiling hmac v0.12.1
   Compiling ctr v0.9.2
   Compiling polyval v0.6.2
   Compiling aes v0.8.4
   Compiling aead v0.5.2
   Compiling hkdf v0.12.4
   Compiling crossbeam-epoch v0.9.21
   Compiling plotters-backend v0.3.7
   Compiling ghash v0.5.1
   Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-mesh)
   Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/ssh)
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/host-facts)
   Compiling infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/release)
   Compiling infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/backup)
   Compiling infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/relay)
   Compiling aes-gcm v0.10.3
   Compiling webauthn-rs-core v0.5.5
   Compiling crossbeam-deque v0.8.8
   Compiling ciborium-io v0.2.2
   Compiling plotters-svg v0.3.7
   Compiling hyper-util v0.1.21
   Compiling ciborium-ll v0.2.2
   Compiling rayon-core v1.13.0
   Compiling itertools v0.13.0
   Compiling same-file v1.0.6
   Compiling cast v0.3.0
   Compiling quinn v0.11.12
   Compiling axum v0.8.9
   Compiling axum-server v0.8.0
   Compiling rayon v1.12.0
   Compiling walkdir v2.5.0
   Compiling ciborium v0.2.2
   Compiling plotters v0.3.7
   Compiling regex v1.13.1
   Compiling criterion-plot v0.6.0
   Compiling tinytemplate v1.2.1
   Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/mesh)
   Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/remote)
   Compiling oorandom v11.1.5
   Compiling anes v0.1.6
   Compiling webauthn-rs v0.5.5
   Compiling criterion v0.7.0
   Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-agent)
    Finished `test` profile [unoptimized + debuginfo] target(s) in 3m 50s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/infraternal-d549e36661370196)

running 65 tests
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok
test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok
test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok
test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok
test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok
test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test status_tests::custom_named_server_service_is_reported_as_running ... ok
test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok

test result: ok. 65 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.22s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/agent_daemon-5de2ce691037a6fb)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 34.82s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/agent_queues-e091edc68b27f96c)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 44.37s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/agent_review-d94b1e14e60e4ef2)

running 8 tests
test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 34.49s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/agent_sessions-02290b123f5f2fd1)

running 3 tests
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok
test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok
test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.92s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/idle_canary-26b2a47f3626ff86)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.14s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/remote_output-174b9538baf046d1)

running 1 test
test remote_refusal_matches_its_declared_cli_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/session_bounds_review-72c64f17fd25b658)

running 1 test
test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.56s

     Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/session_exit_events-11a4cce005fc09ec)

running 1 test
test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.46s

     Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/session_retention-2365452bec4dac67)

running 1 test
test bounded_owned_exit_reconnects_as_ended_with_status ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.72s

     Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/setup_output-0aeb77f16924cef7)

running 1 test
test setup_output_keeps_legacy_and_versioned_readers ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/shim-c81baaf26e3012d1)

running 13 tests
test replacement_connection_and_malformed_limit ... ok
test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok
test disallowed_signal_only_disconnects_peer ... ok
test real_shell_reconnect_resize_and_delivered_exit ... ok
test double_fork_survives_parent_death ... ok
active
test user_scope_survives_parent_unit_stop ... ok
test unowned_normal_exit_retires_promptly_and_records_status ... ok
test owned_exit_releases_promptly_on_window_close ... ok
test detached_shell_exit_reaps_shim_within_one_second ... ok
test delivered_exit_cannot_release_another_owning_window ... ok
test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok
test attached_backpressure_and_detached_progress ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.01s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/ssh_askpass-617ca478b5d79487)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.54s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/vt_credit-0a8dc350571af348)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 28.66s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/vt_reconnect-ecf739816bc14d42)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 22.07s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/infraternal_agent-dc304b9d51d0941a)

running 86 tests
test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok
test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok
test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok
test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok
test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok
test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok
test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok
test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok
test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok
test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok
test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok
test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok
test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok
test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope
test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok
test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok
test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... FAILED
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok

Final-head `scripts/verify fast` transcript 2/9; head e177c9b5846fb895a54355a922b417b73975a020; exit 1. Verbatim output. Incidental build-host timing lines are gate output, not performance evidence. ```text Compiling cipher v0.4.4 Compiling opaque-debug v0.3.1 Compiling vt100 v0.16.2 Compiling hyper v1.11.1 Compiling hmac v0.12.1 Compiling ctr v0.9.2 Compiling polyval v0.6.2 Compiling aes v0.8.4 Compiling aead v0.5.2 Compiling hkdf v0.12.4 Compiling crossbeam-epoch v0.9.21 Compiling plotters-backend v0.3.7 Compiling ghash v0.5.1 Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-mesh) Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/ssh) Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/host-facts) Compiling infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/release) Compiling infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/backup) Compiling infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/relay) Compiling aes-gcm v0.10.3 Compiling webauthn-rs-core v0.5.5 Compiling crossbeam-deque v0.8.8 Compiling ciborium-io v0.2.2 Compiling plotters-svg v0.3.7 Compiling hyper-util v0.1.21 Compiling ciborium-ll v0.2.2 Compiling rayon-core v1.13.0 Compiling itertools v0.13.0 Compiling same-file v1.0.6 Compiling cast v0.3.0 Compiling quinn v0.11.12 Compiling axum v0.8.9 Compiling axum-server v0.8.0 Compiling rayon v1.12.0 Compiling walkdir v2.5.0 Compiling ciborium v0.2.2 Compiling plotters v0.3.7 Compiling regex v1.13.1 Compiling criterion-plot v0.6.0 Compiling tinytemplate v1.2.1 Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/mesh) Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/remote) Compiling oorandom v11.1.5 Compiling anes v0.1.6 Compiling webauthn-rs v0.5.5 Compiling criterion v0.7.0 Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-agent) Finished `test` profile [unoptimized + debuginfo] target(s) in 3m 50s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/infraternal-d549e36661370196) running 65 tests test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test status_tests::custom_named_server_service_is_reported_as_running ... ok test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test result: ok. 65 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.22s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/agent_daemon-5de2ce691037a6fb) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 34.82s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/agent_queues-e091edc68b27f96c) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 44.37s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/agent_review-d94b1e14e60e4ef2) running 8 tests test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 34.49s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/agent_sessions-02290b123f5f2fd1) running 3 tests test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.92s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/idle_canary-26b2a47f3626ff86) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.14s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/remote_output-174b9538baf046d1) running 1 test test remote_refusal_matches_its_declared_cli_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/session_bounds_review-72c64f17fd25b658) running 1 test test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.56s Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/session_exit_events-11a4cce005fc09ec) running 1 test test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.46s Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/session_retention-2365452bec4dac67) running 1 test test bounded_owned_exit_reconnects_as_ended_with_status ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.72s Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/setup_output-0aeb77f16924cef7) running 1 test test setup_output_keeps_legacy_and_versioned_readers ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/shim-c81baaf26e3012d1) running 13 tests test replacement_connection_and_malformed_limit ... ok test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok test disallowed_signal_only_disconnects_peer ... ok test real_shell_reconnect_resize_and_delivered_exit ... ok test double_fork_survives_parent_death ... ok active test user_scope_survives_parent_unit_stop ... ok test unowned_normal_exit_retires_promptly_and_records_status ... ok test owned_exit_releases_promptly_on_window_close ... ok test detached_shell_exit_reaps_shim_within_one_second ... ok test delivered_exit_cannot_release_another_owning_window ... ok test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok test attached_backpressure_and_detached_progress ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.01s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/ssh_askpass-617ca478b5d79487) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.54s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/vt_credit-0a8dc350571af348) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 28.66s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/vt_reconnect-ecf739816bc14d42) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 22.07s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/access-rules-v4b/target/debug/deps/infraternal_agent-dc304b9d51d0941a) running 86 tests test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000 test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... FAILED test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok ```

kayg commented

2026-10-12 17:47:14 +00:00

Author

Owner

Final-head scripts/verify fast transcript 3/9; head e177c9b584; exit 1. Verbatim output. Incidental build-host timing lines are gate output, not performance evidence.

test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok

failures:

---- remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight stdout ----
tcp_proxy_spacing_us=162057

thread 'remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight' (4075743) panicked at crates/infraternal-agent/src/remote_client_tests.rs:402:5:
the relay serialized independent packet flight times
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight

test result: FAILED. 73 passed; 1 failed; 12 ignored; 0 measured; 0 filtered out; finished in 11.15s

error: test failed, to rerun pass `-p infraternal-agent --lib`

==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   ├── infraternal-fuzz v0.1.0
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0 (*)
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-mesh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   ├── infraternal-plugin-release v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-mesh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   ├── infraternal-fuzz v0.1.0 (*)
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-mesh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)

Final-head `scripts/verify fast` transcript 3/9; head e177c9b5846fb895a54355a922b417b73975a020; exit 1. Verbatim output. Incidental build-host timing lines are gate output, not performance evidence. ```text test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok failures: ---- remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight stdout ---- tcp_proxy_spacing_us=162057 thread 'remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight' (4075743) panicked at crates/infraternal-agent/src/remote_client_tests.rs:402:5: the relay serialized independent packet flight times note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace failures: remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight test result: FAILED. 73 passed; 1 failed; 12 ignored; 0 measured; 0 filtered out; finished in 11.15s error: test failed, to rerun pass `-p infraternal-agent --lib` ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) ```

kayg commented

2026-10-12 17:47:15 +00:00

Author

Owner

Final-head scripts/verify fast transcript 4/9; head e177c9b584; exit 1. Verbatim output. Incidental build-host timing lines are gate output, not performance evidence.

     │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-mesh v0.1.0 (*)
         ├── infraternal-plugin-release v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-mesh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   ├── hyper v1.11.1
         │   │   ├── axum v0.8.9
         │   │   │   ├── infraternal-fuzz v0.1.0
         │   │   │   └── infraternal-server v0.1.0
         │   │   │       ├── infraternal v0.1.0
         │   │   │       └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── axum-server v0.8.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── hyper-util v0.1.21
         │   │   │   ├── axum v0.8.9 (*)
         │   │   │   ├── axum-server v0.8.0 (*)
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   │   ├── infraternal v0.1.0 (*)
         │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal v0.1.0 (*)
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-mesh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   └── infraternal-plugin-mesh v0.1.0
             │   │   │       ├── infraternal v0.1.0 (*)
             │   │   │       ├── infraternal-agent v0.1.0 (*)
             │   │   │       ├── infraternal-fuzz v0.1.0 (*)
             │   │   │       └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-backup v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   │   ├── infraternal-plugin-relay v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-release v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   ├── infraternal-plugin-release v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:197:1
    │  
197 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
198 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   ├── infraternal-fuzz v0.1.0 (*)
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-mesh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │       └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-backup v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-relay v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-release v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)

Final-head `scripts/verify fast` transcript 4/9; head e177c9b5846fb895a54355a922b417b73975a020; exit 1. Verbatim output. Incidental build-host timing lines are gate output, not performance evidence. ```text │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ ├── hyper v1.11.1 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:197:1 │ 197 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 198 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ```

kayg commented

2026-10-12 17:47:16 +00:00

Author

Owner

Final-head scripts/verify fast transcript 5/9; head e177c9b584; exit 1. Verbatim output. Incidental build-host timing lines are gate output, not performance evidence.

          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-mesh v0.1.0 (*)
              ├── infraternal-plugin-release v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:199:1
    │  
199 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
201 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:202:1
    │  
202 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:204:1
    │  
204 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
205 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
206 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:248:1
    │  
248 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
249 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)

Final-head `scripts/verify fast` transcript 5/9; head e177c9b5846fb895a54355a922b417b73975a020; exit 1. Verbatim output. Incidental build-host timing lines are gate output, not performance evidence. ```text ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:199:1 │ 199 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 201 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:202:1 │ 202 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:204:1 │ 204 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 205 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 206 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:248:1 │ 248 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 249 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) ```

kayg commented

2026-10-12 17:47:17 +00:00

Author

Owner

Final-head scripts/verify fast transcript 6/9; head e177c9b584; exit 1. Verbatim output. Incidental build-host timing lines are gate output, not performance evidence.

      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-mesh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-backup v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-relay v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-release v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-release v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-release v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │   │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-release v0.1.0 (*)

Final-head `scripts/verify fast` transcript 6/9; head e177c9b5846fb895a54355a922b417b73975a020; exit 1. Verbatim output. Incidental build-host timing lines are gate output, not performance evidence. ```text │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) ```

kayg commented

2026-10-12 17:47:18 +00:00

Author

Owner

Final-head scripts/verify fast transcript 7/9; head e177c9b584; exit 1. Verbatim output. Incidental build-host timing lines are gate output, not performance evidence.

      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── (dev) infraternal v0.1.0 (*)
      │       ├── (dev) infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:251:1
    │  
251 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
252 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │       ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-release v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:254:1
    │  
254 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
255 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   ├── infraternal v0.1.0 (*)
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0
      │       │   └── infraternal-server v0.1.0
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── infraternal-fuzz v0.1.0 (*)
      │       ├── infraternal-fuzz v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)

Final-head `scripts/verify fast` transcript 7/9; head e177c9b5846fb895a54355a922b417b73975a020; exit 1. Verbatim output. Incidental build-host timing lines are gate output, not performance evidence. ```text │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:251:1 │ 251 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 252 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:254:1 │ 254 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 255 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) ```

kayg commented

2026-10-12 17:47:19 +00:00

Author

Owner

Final-head scripts/verify fast transcript 8/9; head e177c9b584; exit 1. Verbatim output. Incidental build-host timing lines are gate output, not performance evidence.

      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:256:1
    │  
256 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
257 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   ├── infraternal v0.1.0 (*)
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal v0.1.0 (*)
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-fuzz v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-backup v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-relay v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-release v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   ├── infraternal-plugin-release v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   ├── infraternal-fuzz v0.1.0 (*)
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:314:1
    │  
314 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
315 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-release v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   ├── hyper v1.11.1
      │           │   │   ├── axum v0.8.9 (*)
      │           │   │   ├── axum-server v0.8.0 (*)
      │           │   │   ├── hyper-util v0.1.21
      │           │   │   │   ├── axum v0.8.9 (*)
      │           │   │   │   ├── axum-server v0.8.0 (*)
      │           │   │   │   ├── infraternal v0.1.0 (*)
      │           │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── (dev) infraternal v0.1.0 (*)
      │           ├── (dev) infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-mesh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-backup v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-relay v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-release v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
   Compiling proc-macro2 v1.0.107
   Compiling quote v1.0.47
   Compiling unicode-ident v1.0.26
   Compiling libc v0.2.190
   Compiling cfg-if v1.0.5
   Compiling shlex v2.0.1
   Compiling serde v1.0.229
   Compiling find-msvc-tools v0.1.14
   Compiling autocfg v1.5.1
   Compiling serde_core v1.0.229
   Compiling pin-project-lite v0.2.17
   Compiling version_check v0.9.5
   Compiling vcpkg v0.2.15
   Compiling pkg-config v0.3.34
   Compiling bytes v1.12.1
   Compiling icu_normalizer_data v2.3.0
   Compiling cc v1.6.0
   Compiling generic-array v0.14.7
   Compiling once_cell v1.21.4
   Compiling icu_properties_data v2.3.0
   Compiling memchr v2.8.3
   Compiling log v0.4.34
   Compiling itoa v1.0.18
   Compiling tracing-core v0.1.36
   Compiling futures-core v0.3.34
   Compiling stable_deref_trait v1.2.1
   Compiling smallvec v1.16.2
   Compiling futures-sink v0.3.34
   Compiling thiserror v2.0.21
   Compiling subtle v2.6.1
   Compiling parking_lot_core v0.9.12
   Compiling slab v0.4.12
   Compiling zmij v1.0.23
   Compiling typenum v1.20.1
   Compiling num-traits v0.2.19
   Compiling writeable v0.6.4
   Compiling litemap v0.8.3
   Compiling crossbeam-utils v0.8.23
   Compiling utf8_iter v1.0.4
   Compiling equivalent v1.0.2
   Compiling syn v3.0.6
   Compiling syn v2.0.119
   Compiling percent-encoding v2.3.2
   Compiling scopeguard v1.2.0
   Compiling block-buffer v0.10.4
   Compiling crypto-common v0.1.7
   Compiling lock_api v0.4.14
   Compiling form_urlencoded v1.2.2
   Compiling digest v0.10.7
   Compiling libsqlite3-sys v0.30.1
   Compiling socket2 v0.6.5
   Compiling errno v0.3.14
   Compiling signal-hook-registry v1.4.8
   Compiling mio v1.2.4
   Compiling cpufeatures v0.2.17
   Compiling futures-io v0.3.34
   Compiling futures-task v0.3.34
   Compiling hashbrown v0.17.1
   Compiling indexmap v2.14.2
   Compiling serde_json v1.0.151
   Compiling allocator-api2 v0.2.21
   Compiling foldhash v0.1.5
   Compiling parking_lot v0.12.5
   Compiling futures-util v0.3.34
   Compiling hashbrown v0.15.5
   Compiling tokio v1.53.2
   Compiling openssl-src v300.6.1+3.6.3
   Compiling futures-channel v0.3.34
   Compiling synstructure v0.14.0
   Compiling displaydoc v0.2.7
   Compiling zerovec-derive v0.11.6
   Compiling serde_derive v1.0.229
   Compiling tracing-attributes v0.1.31
   Compiling tokio-macros v2.7.2
   Compiling zerofrom-derive v0.1.8
   Compiling yoke-derive v0.8.4
   Compiling thiserror-impl v2.0.21
   Compiling futures-macro v0.3.34
   Compiling cfg_aliases v0.2.2
   Compiling parking v2.2.1
   Compiling crc-catalog v2.5.0
   Compiling crc v3.4.0
   Compiling event-listener v5.4.2
   Compiling openssl-sys v0.9.117
   Compiling hashlink v0.10.0
   Compiling zerofrom v0.1.8
   Compiling sha2 v0.10.9
   Compiling crossbeam-queue v0.3.14
   Compiling tracing v0.1.44
   Compiling futures-intrusive v0.5.0
   Compiling spin v0.9.9
   Compiling tokio-stream v0.1.19
   Compiling zerocopy v0.8.60
   Compiling bitflags v2.13.2
   Compiling base64 v0.22.1
   Compiling yoke v0.8.3
   Compiling heck v0.5.0
   Compiling zerovec v0.11.8
   Compiling zerotrie v0.2.5
   Compiling ryu v1.0.23
   Compiling rand_core v0.10.1
   Compiling tinystr v0.8.4
   Compiling potential_utf v0.1.6
   Compiling icu_locale_core v2.3.0
   Compiling icu_collections v2.3.0
   Compiling flume v0.11.1
   Compiling atoi v2.0.0
   Compiling futures-executor v0.3.34
   Compiling zerocopy-derive v0.8.60
   Compiling icu_provider v2.3.1
   Compiling getrandom v0.4.3
   Compiling icu_properties v2.3.0
   Compiling icu_normalizer v2.3.0
   Compiling getrandom v0.2.17
   Compiling either v1.18.0
   Compiling serde_urlencoded v0.7.1
   Compiling hex v0.4.3
   Compiling idna_adapter v1.2.2
   Compiling dotenvy v0.15.7
   Compiling idna v1.1.0
   Compiling http v1.5.0
   Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-plugin-api)
   Compiling memoffset v0.9.1
   Compiling getrandom v0.3.4
   Compiling openssl v0.10.81
   Compiling foreign-types-shared v0.1.1
   Compiling url v2.5.8
   Compiling foreign-types v0.3.2
   Compiling zeroize v1.9.0
   Compiling nix v0.30.1
   Compiling openssl-macros v0.1.1
   Compiling ring v0.17.14
   Compiling sqlx-core v0.8.6
   Compiling httparse v1.10.1
   Compiling minimal-lexical v0.2.1
   Compiling time-core v0.1.9
   Compiling num-conv v0.2.2
   Compiling thiserror v1.0.69
   Compiling arrayvec v0.7.8
   Compiling nom v7.1.3
   Compiling time-macros v0.2.32
   Compiling http-body v1.1.0
   Compiling rand_core v0.9.5
   Compiling uuid v1.27.0
   Compiling thiserror-impl v1.0.69
   Compiling synstructure v0.13.2
   Compiling sqlx-sqlite v0.8.6
   Compiling untrusted v0.9.0
   Compiling deranged v0.5.8
   Compiling powerfmt v0.2.1
   Compiling rusticata-macros v4.1.0
   Compiling asn1-rs-derive v0.5.1
   Compiling tokio-util v0.7.19
   Compiling rustls-pki-types v1.15.1
   Compiling asn1-rs-impl v0.2.0
   Compiling tower-service v0.3.3
   Compiling ppv-lite86 v0.2.21

Final-head `scripts/verify fast` transcript 8/9; head e177c9b5846fb895a54355a922b417b73975a020; exit 1. Verbatim output. Incidental build-host timing lines are gate output, not performance evidence. ```text │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:256:1 │ 256 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 257 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/Cargo.lock:314:1 │ 314 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 315 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Compiling proc-macro2 v1.0.107 Compiling quote v1.0.47 Compiling unicode-ident v1.0.26 Compiling libc v0.2.190 Compiling cfg-if v1.0.5 Compiling shlex v2.0.1 Compiling serde v1.0.229 Compiling find-msvc-tools v0.1.14 Compiling autocfg v1.5.1 Compiling serde_core v1.0.229 Compiling pin-project-lite v0.2.17 Compiling version_check v0.9.5 Compiling vcpkg v0.2.15 Compiling pkg-config v0.3.34 Compiling bytes v1.12.1 Compiling icu_normalizer_data v2.3.0 Compiling cc v1.6.0 Compiling generic-array v0.14.7 Compiling once_cell v1.21.4 Compiling icu_properties_data v2.3.0 Compiling memchr v2.8.3 Compiling log v0.4.34 Compiling itoa v1.0.18 Compiling tracing-core v0.1.36 Compiling futures-core v0.3.34 Compiling stable_deref_trait v1.2.1 Compiling smallvec v1.16.2 Compiling futures-sink v0.3.34 Compiling thiserror v2.0.21 Compiling subtle v2.6.1 Compiling parking_lot_core v0.9.12 Compiling slab v0.4.12 Compiling zmij v1.0.23 Compiling typenum v1.20.1 Compiling num-traits v0.2.19 Compiling writeable v0.6.4 Compiling litemap v0.8.3 Compiling crossbeam-utils v0.8.23 Compiling utf8_iter v1.0.4 Compiling equivalent v1.0.2 Compiling syn v3.0.6 Compiling syn v2.0.119 Compiling percent-encoding v2.3.2 Compiling scopeguard v1.2.0 Compiling block-buffer v0.10.4 Compiling crypto-common v0.1.7 Compiling lock_api v0.4.14 Compiling form_urlencoded v1.2.2 Compiling digest v0.10.7 Compiling libsqlite3-sys v0.30.1 Compiling socket2 v0.6.5 Compiling errno v0.3.14 Compiling signal-hook-registry v1.4.8 Compiling mio v1.2.4 Compiling cpufeatures v0.2.17 Compiling futures-io v0.3.34 Compiling futures-task v0.3.34 Compiling hashbrown v0.17.1 Compiling indexmap v2.14.2 Compiling serde_json v1.0.151 Compiling allocator-api2 v0.2.21 Compiling foldhash v0.1.5 Compiling parking_lot v0.12.5 Compiling futures-util v0.3.34 Compiling hashbrown v0.15.5 Compiling tokio v1.53.2 Compiling openssl-src v300.6.1+3.6.3 Compiling futures-channel v0.3.34 Compiling synstructure v0.14.0 Compiling displaydoc v0.2.7 Compiling zerovec-derive v0.11.6 Compiling serde_derive v1.0.229 Compiling tracing-attributes v0.1.31 Compiling tokio-macros v2.7.2 Compiling zerofrom-derive v0.1.8 Compiling yoke-derive v0.8.4 Compiling thiserror-impl v2.0.21 Compiling futures-macro v0.3.34 Compiling cfg_aliases v0.2.2 Compiling parking v2.2.1 Compiling crc-catalog v2.5.0 Compiling crc v3.4.0 Compiling event-listener v5.4.2 Compiling openssl-sys v0.9.117 Compiling hashlink v0.10.0 Compiling zerofrom v0.1.8 Compiling sha2 v0.10.9 Compiling crossbeam-queue v0.3.14 Compiling tracing v0.1.44 Compiling futures-intrusive v0.5.0 Compiling spin v0.9.9 Compiling tokio-stream v0.1.19 Compiling zerocopy v0.8.60 Compiling bitflags v2.13.2 Compiling base64 v0.22.1 Compiling yoke v0.8.3 Compiling heck v0.5.0 Compiling zerovec v0.11.8 Compiling zerotrie v0.2.5 Compiling ryu v1.0.23 Compiling rand_core v0.10.1 Compiling tinystr v0.8.4 Compiling potential_utf v0.1.6 Compiling icu_locale_core v2.3.0 Compiling icu_collections v2.3.0 Compiling flume v0.11.1 Compiling atoi v2.0.0 Compiling futures-executor v0.3.34 Compiling zerocopy-derive v0.8.60 Compiling icu_provider v2.3.1 Compiling getrandom v0.4.3 Compiling icu_properties v2.3.0 Compiling icu_normalizer v2.3.0 Compiling getrandom v0.2.17 Compiling either v1.18.0 Compiling serde_urlencoded v0.7.1 Compiling hex v0.4.3 Compiling idna_adapter v1.2.2 Compiling dotenvy v0.15.7 Compiling idna v1.1.0 Compiling http v1.5.0 Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-plugin-api) Compiling memoffset v0.9.1 Compiling getrandom v0.3.4 Compiling openssl v0.10.81 Compiling foreign-types-shared v0.1.1 Compiling url v2.5.8 Compiling foreign-types v0.3.2 Compiling zeroize v1.9.0 Compiling nix v0.30.1 Compiling openssl-macros v0.1.1 Compiling ring v0.17.14 Compiling sqlx-core v0.8.6 Compiling httparse v1.10.1 Compiling minimal-lexical v0.2.1 Compiling time-core v0.1.9 Compiling num-conv v0.2.2 Compiling thiserror v1.0.69 Compiling arrayvec v0.7.8 Compiling nom v7.1.3 Compiling time-macros v0.2.32 Compiling http-body v1.1.0 Compiling rand_core v0.9.5 Compiling uuid v1.27.0 Compiling thiserror-impl v1.0.69 Compiling synstructure v0.13.2 Compiling sqlx-sqlite v0.8.6 Compiling untrusted v0.9.0 Compiling deranged v0.5.8 Compiling powerfmt v0.2.1 Compiling rusticata-macros v4.1.0 Compiling asn1-rs-derive v0.5.1 Compiling tokio-util v0.7.19 Compiling rustls-pki-types v1.15.1 Compiling asn1-rs-impl v0.2.0 Compiling tower-service v0.3.3 Compiling ppv-lite86 v0.2.21 ```

kayg commented

2026-10-12 17:47:20 +00:00

Author

Owner

Final-head scripts/verify fast transcript 9/9; head e177c9b584; exit 1. Verbatim output. Incidental build-host timing lines are gate output, not performance evidence.

   Compiling data-encoding v2.11.1
   Compiling rustls v0.23.45
   Compiling tinyvec v1.13.3
   Compiling time v0.3.55
   Compiling rand_chacha v0.9.0
   Compiling cpufeatures v0.3.1
   Compiling rand v0.9.5
   Compiling chacha20 v0.10.2
   Compiling rand_core v0.6.4
   Compiling quinn-udp v0.5.16
   Compiling sqlx-macros-core v0.8.6
   Compiling num-integer v0.1.47
   Compiling try-lock v0.2.5
   Compiling tokio-openssl v0.6.5
   Compiling oid-registry v0.7.1
   Compiling httpdate v1.0.3
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-shim)
   Compiling pastey v0.1.1
   Compiling atomic-waker v1.1.2
   Compiling base64 v0.21.7
   Compiling lazy_static v1.5.1
   Compiling fnv v1.0.7
   Compiling h2 v0.4.19
   Compiling num-bigint v0.4.8
   Compiling want v0.3.2
   Compiling rand v0.10.3
   Compiling vte v0.15.0
   Compiling sqlx-macros v0.8.6
   Compiling rand_pcg v0.10.2
   Compiling quinn v0.11.12
   Compiling base64urlsafedata v0.5.5
   Compiling webauthn-attestation-ca v0.5.5
   Compiling rustversion v1.0.23
   Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-protocol)
   Compiling asn1-rs v0.6.2
   Compiling rustc-hash v2.1.3
   Compiling unicase v2.10.0
   Compiling rustls-webpki v0.103.15
   Compiling lru-slab v0.1.3
   Compiling tower-layer v0.3.3
   Compiling mime v0.3.17
   Compiling half v2.7.1
   Compiling mime_guess v2.0.5
   Compiling http-body-util v0.1.5
   Compiling sha1 v0.10.7
   Compiling fs-err v3.3.2
   Compiling sync_wrapper v1.0.2
   Compiling utf8parse v0.2.2
   Compiling regex-syntax v0.8.11
   Compiling webauthn-rs-core v0.5.5
   Compiling tungstenite v0.29.0
   Compiling anstyle-parse v1.0.0
   Compiling serde_cbor_2 v0.13.0
   Compiling webauthn-rs-proto v0.5.5
   Compiling der-parser v9.0.0
   Compiling rand_chacha v0.3.1
   Compiling hex-conservative v0.2.3
   Compiling anstyle-query v1.1.5
   Compiling x509-parser v0.16.0
   Compiling colorchoice v1.0.5
   Compiling base64ct v1.8.3
   Compiling anstyle v1.0.14
   Compiling is_terminal_polyfill v1.70.2
   Compiling bitcoin_hashes v0.14.101
   Compiling password-hash v0.5.0
   Compiling anstream v1.0.0
   Compiling rand v0.8.8
   Compiling regex-automata v0.4.18
   Compiling tokio-tungstenite v0.29.0
   Compiling hyper v1.11.1
   Compiling arc-swap v1.9.2
   Compiling tower v0.5.3
   Compiling axum-core v0.5.6
   Compiling sqlx v0.8.6
   Compiling sharded-slab v0.1.7
   Compiling unicode-normalization v0.1.25
   Compiling tracing-serde v0.2.0
   Compiling blake2 v0.10.6
   Compiling serde_path_to_error v0.1.20
   Compiling tracing-log v0.2.0
   Compiling thread_local v1.1.10
   Compiling nu-ansi-term v0.50.3
   Compiling http-range-header v0.4.2
   Compiling clap_lex v1.1.1
   Compiling matchit v0.8.4
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-server)
   Compiling strsim v0.11.1
   Compiling hyper-util v0.1.21
   Compiling argon2 v0.5.3
   Compiling tower-http v0.6.11
   Compiling axum v0.8.9
   Compiling bip39 v2.2.2
   Compiling clap_derive v4.6.7
   Compiling clap_builder v4.6.7
   Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-mesh)
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/host-facts)
   Compiling matchers v0.2.0
   Compiling quinn-proto v0.11.19
   Compiling infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/release)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal)
   Compiling infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/relay)
   Compiling tracing-subscriber v0.3.23
   Compiling infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/backup)
   Compiling clap v4.6.7
   Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/mesh)
   Compiling axum-server v0.8.0
   Compiling webauthn-rs v0.5.5
   Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/remote)
   Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/ssh)
   Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-agent)
    Finished `release` profile [optimized] target(s) in 15m 42s
/home/kayg/.cache/codex-scratch/access-rules-v4b/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 21857264 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | FAIL (101)   |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Final-head `scripts/verify fast` transcript 9/9; head e177c9b5846fb895a54355a922b417b73975a020; exit 1. Verbatim output. Incidental build-host timing lines are gate output, not performance evidence. ```text Compiling data-encoding v2.11.1 Compiling rustls v0.23.45 Compiling tinyvec v1.13.3 Compiling time v0.3.55 Compiling rand_chacha v0.9.0 Compiling cpufeatures v0.3.1 Compiling rand v0.9.5 Compiling chacha20 v0.10.2 Compiling rand_core v0.6.4 Compiling quinn-udp v0.5.16 Compiling sqlx-macros-core v0.8.6 Compiling num-integer v0.1.47 Compiling try-lock v0.2.5 Compiling tokio-openssl v0.6.5 Compiling oid-registry v0.7.1 Compiling httpdate v1.0.3 Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-shim) Compiling pastey v0.1.1 Compiling atomic-waker v1.1.2 Compiling base64 v0.21.7 Compiling lazy_static v1.5.1 Compiling fnv v1.0.7 Compiling h2 v0.4.19 Compiling num-bigint v0.4.8 Compiling want v0.3.2 Compiling rand v0.10.3 Compiling vte v0.15.0 Compiling sqlx-macros v0.8.6 Compiling rand_pcg v0.10.2 Compiling quinn v0.11.12 Compiling base64urlsafedata v0.5.5 Compiling webauthn-attestation-ca v0.5.5 Compiling rustversion v1.0.23 Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-protocol) Compiling asn1-rs v0.6.2 Compiling rustc-hash v2.1.3 Compiling unicase v2.10.0 Compiling rustls-webpki v0.103.15 Compiling lru-slab v0.1.3 Compiling tower-layer v0.3.3 Compiling mime v0.3.17 Compiling half v2.7.1 Compiling mime_guess v2.0.5 Compiling http-body-util v0.1.5 Compiling sha1 v0.10.7 Compiling fs-err v3.3.2 Compiling sync_wrapper v1.0.2 Compiling utf8parse v0.2.2 Compiling regex-syntax v0.8.11 Compiling webauthn-rs-core v0.5.5 Compiling tungstenite v0.29.0 Compiling anstyle-parse v1.0.0 Compiling serde_cbor_2 v0.13.0 Compiling webauthn-rs-proto v0.5.5 Compiling der-parser v9.0.0 Compiling rand_chacha v0.3.1 Compiling hex-conservative v0.2.3 Compiling anstyle-query v1.1.5 Compiling x509-parser v0.16.0 Compiling colorchoice v1.0.5 Compiling base64ct v1.8.3 Compiling anstyle v1.0.14 Compiling is_terminal_polyfill v1.70.2 Compiling bitcoin_hashes v0.14.101 Compiling password-hash v0.5.0 Compiling anstream v1.0.0 Compiling rand v0.8.8 Compiling regex-automata v0.4.18 Compiling tokio-tungstenite v0.29.0 Compiling hyper v1.11.1 Compiling arc-swap v1.9.2 Compiling tower v0.5.3 Compiling axum-core v0.5.6 Compiling sqlx v0.8.6 Compiling sharded-slab v0.1.7 Compiling unicode-normalization v0.1.25 Compiling tracing-serde v0.2.0 Compiling blake2 v0.10.6 Compiling serde_path_to_error v0.1.20 Compiling tracing-log v0.2.0 Compiling thread_local v1.1.10 Compiling nu-ansi-term v0.50.3 Compiling http-range-header v0.4.2 Compiling clap_lex v1.1.1 Compiling matchit v0.8.4 Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-server) Compiling strsim v0.11.1 Compiling hyper-util v0.1.21 Compiling argon2 v0.5.3 Compiling tower-http v0.6.11 Compiling axum v0.8.9 Compiling bip39 v2.2.2 Compiling clap_derive v4.6.7 Compiling clap_builder v4.6.7 Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-mesh) Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/host-facts) Compiling matchers v0.2.0 Compiling quinn-proto v0.11.19 Compiling infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/release) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal) Compiling infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/relay) Compiling tracing-subscriber v0.3.23 Compiling infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/backup) Compiling clap v4.6.7 Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/mesh) Compiling axum-server v0.8.0 Compiling webauthn-rs v0.5.5 Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/remote) Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/plugins/ssh) Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/access-rules-v4b/crates/infraternal-agent) Finished `release` profile [optimized] target(s) in 15m 42s /home/kayg/.cache/codex-scratch/access-rules-v4b/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 21857264 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | FAIL (101) | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```

kayg commented

2026-10-12 17:48:00 +00:00

Author

Owner

Finished the documentation update at head e177c9b584. Two atomic commits resolve R3S-01 and R3S-02; only docs/design/access-rules.md changed. The working tree is clean. git diff --check origin/access-rules-v4..HEAD passed. The table has 111 unique IDs: 108 resolved and 3 accepted P2 limitations.

Final scripts/verify fast exited 1. Verbatim output excerpt:

/home/kayg/.cache/codex-scratch/access-rules-v4b/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 21857264 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | FAIL (101)   |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

The failing tcp_proxy_preserves_spacing_between_packets_already_in_flight test is recorded above; it is outside the specified #118 exceptions, and no waiver is claimed. The static size matches the previously recorded v4 failure. No push was performed because the shared worktree instruction says not to push outside the worktree. Issue remains open.

Finished the documentation update at head e177c9b5846fb895a54355a922b417b73975a020. Two atomic commits resolve R3S-01 and R3S-02; only docs/design/access-rules.md changed. The working tree is clean. `git diff --check origin/access-rules-v4..HEAD` passed. The table has 111 unique IDs: 108 resolved and 3 accepted P2 limitations. Final `scripts/verify fast` exited 1. Verbatim output excerpt: ```text /home/kayg/.cache/codex-scratch/access-rules-v4b/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 21857264 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 21857264 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | FAIL (101) | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ``` The failing `tcp_proxy_preserves_spacing_between_packets_already_in_flight` test is recorded above; it is outside the specified #118 exceptions, and no waiver is claimed. The static size matches the previously recorded v4 failure. No push was performed because the shared worktree instruction says not to push outside the worktree. Issue remains open.

kayg referenced this issue

2026-10-12 18:03:10 +00:00

Research: our own logs, metrics and graphs across every machine — fast, no exporters, great defaults #193

kayg commented

2026-10-12 19:49:58 +00:00

Author

Owner

Access mockup round 3 (machine line) pushed: branch mockup-access-r3, head d81a7276d8.
Captures: apps/tracer/captures/access-r3/ (l1 console line, l2 rules-only, l3 list narrowed, l4 mesh reach highlighted, l5 only you, l6 hidden machine; 1440x900, 393x852, 375x667; ink and paper; plus -closeup- 2x crops).
URL: /?mock=1&proto=clusters&scene=1&mesh=r1&access=r2 (add &mesh-default=deny for rules-only counts, &edition=ee for only-you, &access-hidden=1 for hidden-machine rules).
Gates: bun run check clean, bun test src 196 pass, access-r3 spec 8 assertion tests + 14 capture tests pass, round-2 chip tests 6/6. Web budgets (production build): critical gzip 294994/307200, deferred 49824/51200, largest on-demand 15176/20480 (before: 294983, 49818, 15176). scripts/verify fast: Rust gate static builds FAIL (binary size, pre-existing), cargo test FAIL (101, no Rust touched).

Access mockup round 3 (machine line) pushed: branch mockup-access-r3, head d81a7276d88e5e9bde28c8a5c0567eba5e3235f2. Captures: apps/tracer/captures/access-r3/ (l1 console line, l2 rules-only, l3 list narrowed, l4 mesh reach highlighted, l5 only you, l6 hidden machine; 1440x900, 393x852, 375x667; ink and paper; plus -closeup- 2x crops). URL: /?mock=1&proto=clusters&scene=1&mesh=r1&access=r2 (add &mesh-default=deny for rules-only counts, &edition=ee for only-you, &access-hidden=1 for hidden-machine rules). Gates: bun run check clean, bun test src 196 pass, access-r3 spec 8 assertion tests + 14 capture tests pass, round-2 chip tests 6/6. Web budgets (production build): critical gzip 294994/307200, deferred 49824/51200, largest on-demand 15176/20480 (before: 294983, 49818, 15176). scripts/verify fast: Rust gate static builds FAIL (binary size, pre-existing), cargo test FAIL (101, no Rust touched).

kayg commented

2026-10-13 04:20:21 +00:00

Author

Owner

Access r3 mockup reviewed (2× close-ups, phone + desktop, ink + paper) and published to the clusters preview at 844298b7: http://10.69.69.125:47401/?mock=1&proto=clusters&scene=1&mesh=r1&access=r2

Fixed: no tint on "Can reach it" at rest; phone rows ~32 px apart with 44 px targets; Mesh frame l4b-mesh-reach-arrows-only shows only arrows into build-01 bright. Budgets: critical 294,986/307,200, deferred 49,820/51,200, largest chunk 15,179/20,480 gzip. Waiting on owner review.

Access r3 mockup reviewed (2× close-ups, phone + desktop, ink + paper) and published to the clusters preview at `844298b7`: http://10.69.69.125:47401/?mock=1&proto=clusters&scene=1&mesh=r1&access=r2 Fixed: no tint on "Can reach it" at rest; phone rows ~32 px apart with 44 px targets; Mesh frame `l4b-mesh-reach-arrows-only` shows only arrows into build-01 bright. Budgets: critical 294,986/307,200, deferred 49,820/51,200, largest chunk 15,179/20,480 gzip. Waiting on owner review.

kayg commented

2026-10-13 05:38:43 +00:00

Author

Owner

Phone close-up (2×), access r3 at 844298b7:

Phone close-up (2×), access r3 at 844298b7: ![access-r3-phone-closeup.png](https://git.kayg.org/attachments/66ea4bd2-1b5c-444f-96cb-8ab86779f247)

kayg referenced this issue

2026-10-13 05:39:06 +00:00

Evidence on issues, not in the repo; slim the repo (D262) #200

kayg referenced this issue

2026-10-13 05:43:21 +00:00

Evidence on issues, not in the repo; slim the repo (D262) #200

kayg commented

2026-10-13 08:21:12 +00:00

Author

Owner

Designer round 4 on branch mockup-access-r3, head 970b6592 (merged origin/dev first).

1. The connector beside a Mesh card's pill. It starts a rule: drag it onto another card to let this machine reach that one. Real job, kept. It vanished because of an 8 px gap between pill and button and pointer-events: none until shown. Fix: the pill carries an invisible bridge over the gap (the rest of a card takes no pointer events, so the header cannot be the hover region), keyboard focus shows it, touch always shows it, and a tap that goes nowhere shows the tooltip sentence as a toast. Measured at 1440x900, 40-step and 2-step pointer travel: opacity 1 and the element under the pointer.

2. Chips. One fix in the shared chip (packages/ui/styles.css). At DPR 4, all five kinds, ink and paper: text centre within 0.25 px of the pill centre, mark within 0.5 px of the text centre (tag # 0.75 px, thin slanted strokes), ink padding left 8.3 / right 8.4 px, baseline equal to the line's. Test: apps/tracer/test/chips-optical.spec.ts.
Real chips at DPR 1, 2, 4 (drawn 4x):
Synthetic bench:

3. Edit in place. Every changeable word of a rule is a button; it opens its choices at the word (shared anchored popover + choice list); picking applies at once with a toast "Changed to ..." and Undo; invalid values are listed disabled with the reason ("already a rule", "would remove files only"); a row that lets more through says "+4 people". The row keeps its place. The old end-of-row menu is now one button: add a limit, remove. No "Edit rule" panel remains; the Mesh arrow's Edit leads to the list.
Desktop ink:
Unhappy states:
Phone 393x852:
375x667:

Budgets (D188, unchanged limits), default build, before -> after: critical gzip 295,371 -> 295,366 (brotli 245,928 -> 245,938); deferred gzip 50,866 -> 50,864 (brotli 44,958 -> 45,010 of 45,056: only 46 B left, the tap hint costs bytes); largest on-demand chunk gzip 15,946 -> 15,947 of 20,480.

Tests: access-inline-edit.spec.ts 23/23 (after the final assertion fix the four phone/small cases were rerun and pass), chips-optical.spec.ts 2/2, bun test src/canvas/mock 32/32, tsc clean.

Designer round 4 on branch `mockup-access-r3`, head 970b6592 (merged origin/dev first). **1. The connector beside a Mesh card's pill.** It starts a rule: drag it onto another card to let this machine reach that one. Real job, kept. It vanished because of an 8 px gap between pill and button and pointer-events: none until shown. Fix: the pill carries an invisible bridge over the gap (the rest of a card takes no pointer events, so the header cannot be the hover region), keyboard focus shows it, touch always shows it, and a tap that goes nowhere shows the tooltip sentence as a toast. Measured at 1440x900, 40-step and 2-step pointer travel: opacity 1 and the element under the pointer. ![hover](https://git.kayg.org/attachments/cc19b467-0369-4a53-b5c4-dcc2649944f6) ![tap on phone](https://git.kayg.org/attachments/983ceee1-4c77-4cee-b354-1330717e028e) **2. Chips.** One fix in the shared chip (packages/ui/styles.css). At DPR 4, all five kinds, ink and paper: text centre within 0.25 px of the pill centre, mark within 0.5 px of the text centre (tag # 0.75 px, thin slanted strokes), ink padding left 8.3 / right 8.4 px, baseline equal to the line's. Test: apps/tracer/test/chips-optical.spec.ts. Real chips at DPR 1, 2, 4 (drawn 4x): ![ink](https://git.kayg.org/attachments/e45623fe-0e2d-4bc1-9a2c-9646cc409003) ![paper](https://git.kayg.org/attachments/bd93259e-9216-4615-8c6b-7317e76bb4f7) Synthetic bench: ![ink](https://git.kayg.org/attachments/42322b58-64c2-46b0-89b2-5a921112116f) ![paper](https://git.kayg.org/attachments/b13bf0fc-6904-42e2-ae00-f2cb303d8a94) **3. Edit in place.** Every changeable word of a rule is a button; it opens its choices at the word (shared anchored popover + choice list); picking applies at once with a toast "Changed to ..." and Undo; invalid values are listed disabled with the reason ("already a rule", "would remove files only"); a row that lets more through says "+4 people". The row keeps its place. The old end-of-row menu is now one button: add a limit, remove. No "Edit rule" panel remains; the Mesh arrow's Edit leads to the list. Desktop ink: ![open](https://git.kayg.org/attachments/f23432d7-f5bc-46bb-861a-a3437f6bc6b8) ![changed + Undo](https://git.kayg.org/attachments/87f93843-a45e-40bf-8753-ec31867adda0) ![after Undo](https://git.kayg.org/attachments/227b98a9-ab35-4cc1-a768-311f51cb1b06) Unhappy states: ![disabled reason](https://git.kayg.org/attachments/4c9c9027-d6cb-4b50-a6c2-2a024ab14f73) ![duplicate](https://git.kayg.org/attachments/ea9fcf63-32c6-47e6-bc8a-6c83a0fbdad5) Phone 393x852: ![open](https://git.kayg.org/attachments/9956d3ad-b46b-45ef-bef8-a9f0c069388b) ![changed](https://git.kayg.org/attachments/354215e4-0850-4778-be2d-984d3007666a) 375x667: ![open, above the word](https://git.kayg.org/attachments/bf5d5eb6-0bf3-4f7b-aece-57f9e8981d6f) ![disabled](https://git.kayg.org/attachments/dc19559d-307e-465d-905b-18a22b7c9e8b) **Budgets (D188, unchanged limits), default build, before -> after:** critical gzip 295,371 -> 295,366 (brotli 245,928 -> 245,938); deferred gzip 50,866 -> 50,864 (brotli 44,958 -> 45,010 of 45,056: only 46 B left, the tap hint costs bytes); largest on-demand chunk gzip 15,946 -> 15,947 of 20,480. Tests: access-inline-edit.spec.ts 23/23 (after the final assertion fix the four phone/small cases were rerun and pass), chips-optical.spec.ts 2/2, bun test src/canvas/mock 32/32, tsc clean.

kayg commented

2026-10-13 08:25:02 +00:00

Author

Owner

Corrected captures for the two review points (popover glass blurs to 28 px at every card level; each choice has its description under the name). Head: 7d2b0637

Corrected captures for the two review points (popover glass blurs to 28 px at every card level; each choice has its description under the name). Head: 7d2b0637 ![fix-verb-desktop-ink.png](https://git.kayg.org/attachments/940444d1-ff46-4cf9-93f2-735b2f0f69cf) ![fix-verb-small-ink.png](https://git.kayg.org/attachments/f45ac89e-acec-4d32-b0f2-2ddfb4bae6e6)

kayg commented

2026-10-13 08:25:28 +00:00

Author

Owner

Reviewed and published to the clusters preview at 7d2b0637: http://10.69.69.125:47401/?mock=1&proto=clusters&scene=1&mesh=r1&access=r2 — Mesh → stays reachable (hover bridge, touch, keyboard), chips centred via the shared chip, rules edit in place with Undo, choice list blur 28 px and descriptions on their own line. Deferred brotli margin 46 B (45,010/45,056).

Reviewed and published to the clusters preview at 7d2b0637: http://10.69.69.125:47401/?mock=1&proto=clusters&scene=1&mesh=r1&access=r2 — Mesh → stays reachable (hover bridge, touch, keyboard), chips centred via the shared chip, rules edit in place with Undo, choice list blur 28 px and descriptions on their own line. Deferred brotli margin 46 B (45,010/45,056).

kayg referenced this issue

2026-10-16 21:36:46 +00:00

Mesh: SSH over the mesh (D197 M1, D235) #221

~~kayg referenced this issue 2026-10-28 17:53:56 +00:00~~

Orchestrator handover 2026-10-28: moving to a new machine #254

kayg referenced this issue

2026-10-28 18:00:45 +00:00

Orchestrator handover 2026-10-28: moving to a new machine #254

kayg referenced this issue

2026-10-31 16:20:34 +00:00

Mesh: SSH over the mesh (D197 M1, D235) #221

kayg referenced this issue