sbom U3b perf: run the output reference scan in spawn_blocking (off the async executor)
Created by pmeunier on Aug 4, 2026, 9:34 PM
State:
RTSJGLYXRSUQXC5MUS3W7NJLHFSQKIY7XLUDBQETGXYYLWZTA5HQCsbom U3b-3: fold reachable deb->deb lock edges into build SBOM (complete_edges BFS: scanned + reused deb closure)
Created by pmeunier on Aug 4, 2026, 9:26 PM
State:
GB2DLYFX7AVDSPWUUCF7FLYYTMU3OL4RAQ4STJWTJYEOR2262CRACeval-vm: Rust host embedding a sandboxed OCaml bytecode VM (increments 1-2) — curated prim table (no IO), async host prims bridged into Lwt (Lwt.all overlaps); crates ocaml-vm-sys/-build/-vm + demo
Created by pmeunier on Aug 4, 2026, 9:23 PM
State:
ODR2WEX4J2WYP7D37DNVKVSYSM6K4HK2BXGT6Y24A5JYTMOTG4LACelpe-sched: privileged cgroup-v2 validation tests (ignored) — prove ELPE_DEFAULT_CORES caps+pins an undeclared action (cpu.max=quota, cpuset pinned to N cores) and that no default leaves it uncapped (cpu.max=max); finishes task A validation
Created by pmeunier on Aug 4, 2026, 9:18 PM
State:
3FPL4SFQFVKIGELUSWQFARNHVAGES2UO4XIXT47LMBWE5TNJBEWACsbom U3b-2: emit real scanned dependency graph in build SBOM (built_edges -> cyclonedx_of_build ~edges)
Created by pmeunier on Aug 4, 2026, 9:10 PM
State:
Z72USAIXFGYI2ZXBLQ2SAXNGP327OOZMYFQXHNC7BAXA3GPIBMWACsbom U3b-1: Nix-style reference scan of derivation outputs -> real dep edges in DerivationResult.paths (non-ubuntu only)
Created by pmeunier on Aug 4, 2026, 9:04 PM
State:
XCECPZVVLVWSENXBGXDS27UJQHECGLKXG2UPRMGJU3T7QCN5W5TQCimage: Phase 2a fix — define class system before its qcow2/installer/bootstrap/install_vm users
Created by pmeunier on Aug 4, 2026, 9:05 PM
State:
3XOB633I7QD7E74KHLOTGMMYMMLISSV2VHJBIUGWORIUNAJ2X52ACimage: Phase 2a — relocate the store out of the rootfs (store_layer + combined_root_snippet), /run/current-system -> real Image.system store path stamped at assembly
Created by pmeunier on Aug 4, 2026, 9:04 PM
State:
QCRDGD7OIGK27LMXMTXDBFLA5G5X52RX2QNQUMTLUHFE763ZCCOQCsbom U6: schemas/merge.sh — derive multi-arch CycloneDX deliverable via cyclonedx-cli merge of per-target locks
Created by pmeunier on Aug 4, 2026, 9:00 PM
State:
OTFRGVZ3A3D4GLNPH66OTSNM5V6EZ7JUICDNSHEIE4SCKUO3B2AACelpe: design note — eval VM as Rust host + embedded bytecode runtime (Lwt<->tokio bridge + host-provided curated prims table); spike-validated
Created by pmeunier on Aug 4, 2026, 8:55 PM
State:
SUND4OVLJG5CZVL75P3RFZ5ELVMULFYQQLPCBNPGGMMCMR5L4IQQCrust: --extern crate name is the dep's lib target name, not its package name (md-5 lib is md5); fixes 'unresolved crate md5' building the elpe backend in the nix-free self-build
Created by pmeunier on Aug 4, 2026, 8:44 PM
State:
6IJ4X2VD3IPC7VBQGK33PC6SOBXV7EPVKIT3WUE2K3DIQEBHFUSQCsbom U4: interop harness — validate CycloneDX + syft-convert to schema-valid SPDX; drop dead elpe-sbom refs
Created by pmeunier on Aug 4, 2026, 8:42 PM
State:
FLJ7OXI5LXSULMZ3XQIIDPQL3W5RMPCZYZGGHBTSDPNPGVJPSEAQCbuild: pull libprotobuf-dev + add its /usr/include to REAPI protoc includes so google/protobuf well-known types resolve in the nix-free self-build (host build unaffected: PROTOC_INCLUDE/guarded path)
Created by pmeunier on Aug 4, 2026, 8:40 PM
State:
LUN54KJWYJYQCJAVCJKK2W37RXPCOE3ZM4JZWN2VEIJLPTQ5UE3ACsandbox: allow reading /elpe (the content-addressed store) during evaluation — Image.read_sysusers parses packages' sysusers.d from the store; it's the /nix analogue, read-only, no secrets
Created by pmeunier on Aug 4, 2026, 8:32 PM
State:
3T4FMUMTPEL4TDCLSHOIDFUVMP33MZWRLSKT362N2DS3TE3F62PQCresolve conflict: integrate anchored /pattern .ignore fix into refactored parse_ignore_line (keep default_src_ignores)
Created by pmeunier on Aug 4, 2026, 8:29 PM
State:
EQSQBGNESLWAAQ2274V2CY4OKP3K2CMC2V5D3W5LCCXEWVM3TBGACelpe local_src: honor anchored /pattern in .ignore (leading-slash gitignore anchoring); the 168MB root log leaked into every src copy despite /log in .ignore, causing hash churn + a Cargo.lock perm race
Created by pmeunier on Aug 4, 2026, 8:26 PM
State:
FMO2Y3BON4JLAJZICKXOJBGE627UIMNCRF3ADVOO4BJWKD56V7XQCsbom: U2(b) full lean — CycloneDX only; drop SPDX serialisers, elpe sbom cmd, lock -sbom
Created by pmeunier on Aug 4, 2026, 8:23 PM
State:
GGOTAICYZECNTUCPDOPTUSQWNCXOHPSZRPI4LLUB3DSFAJID5CAQCimage: retry_store — harden read_sysusers against the frontend/backend store permission race (EACCES)
Created by pmeunier on Aug 4, 2026, 8:22 PM
State:
BNB2H37SVKFBWS4ULHXXUDANU4IY4N4BRRSK4K5HG5NXSFS3SU2QCimage: generations Phase 1 — Image.system toplevel (generation identity), /run/current-system + /etc/elpe snapshot, faithful service round-trip in configuration.ml
Created by pmeunier on Aug 4, 2026, 8:15 PM
State:
DJAY3WWFXE3KX7UILXAFE53Y5WAUFOA32QYMA2CO6VXBWQKAEJSACelfedit: keep trailing DT_NEEDED on runpath-only edits (fixes libLLVM.so.21 losing libedit/libzstd/libxml2 NEEDED -> rustc 'undefined symbol: history' in nix-free backend rebuild)
Created by pmeunier on Aug 4, 2026, 5:58 PM
State:
7BFXB547JWGVXO3534IRUU7OETAGFI6QIRZULL32ZCMDLJLG66WACsbom: U2(a) emit declarative dep graph in of_lock exports (SPDX DEPENDS_ON + CycloneDX dependencies)
Created by pmeunier on Aug 4, 2026, 5:53 PM
State:
FKSMWIESRAOTUAZU4PMT6POZCJIFAXRJ6BMGOY4RH4XIOAR5PUGAC