extract: atomic deb extraction — decompress into a .extract-tmp sibling then rename into place, so a crash mid-extract never leaves a half-populated final store path that later builds trust (root cause of the 'tar: command not found' / chmod poison)
Created by pmeunier on Aug 5, 2026, 3:57 AM
State:
5AU4WCWT53BWVAARWYDLGKY73DTETBGDGNV7QADVKPEOYPSHKE4ACeval-vm: increment 4 — host_read_source (local_src leaf, CWD path policy in Rust; caml_failwith bridge) + OCaml Vm_prelude packaging the effect surface & Lwt run-loop so user bytecode is clean. Multi-source bytecode compile.
Created by pmeunier on Aug 4, 2026, 9:46 PM
State:
6G3FYMI3GJIRZOYYGDXOXUYISVXEW2HFNYGXTR7S6EIBWWASCUEQCcap policy travels frontend->backend over gRPC. New SetCapPolicy RPC + CapPolicy{CapMode mode, uint32 value} proto message; backend installs a process-global policy override (elpe_sched::set_default_policy) that container.rs reads via default_policy() at both acquire sites, taking precedence over ELPE_DEFAULT_CORES. OCaml gains a cap_policy sum type (Uncapped|Fixed n|Adaptive pct), elpe build -cores SPEC (N or psi:N) parses+pushes it before building; absent flag pushes nothing (non-breaking). Rust+OCaml green
Created by pmeunier on Aug 4, 2026, 9:46 PM
State:
LAA7KRM6OANICFZ36RITW64F65436FUGUX2HA6LWSQ4K6VD2LG6QCsbom CI: flake checks.sbom-validate (offline CycloneDX + syft->SPDX) + packages.sbom-multiarch (cyclonedx-cli merge)
Created by pmeunier on Aug 4, 2026, 9:40 PM
State:
NBHNS5WFDLEA2U3RAWBU7QSUWSXB5YZLMVW7GJFDRCZCLY2YEDZQCelpe-sched: CapPolicy becomes a sum type (Uncapped | Fixed(n) | Adaptive{yield_at_pct}) with PSI back-pressure. ELPE_DEFAULT_CORES gains psi:<pct>/pressure:<pct>: an undeclared action waits (polling /proc/pressure/cpu 'some avg10') while CPU pressure >= threshold, so a desktop-cum-CI-runner yields to interactive use and refills when idle. Fixed(n) unchanged, Uncapped still the non-breaking default. Pure tests: parse grammar, adaptive slice (quarter machine), PSI parse, resolve declared-wins
Created by pmeunier on Aug 4, 2026, 9:39 PM
State:
BTNV6Y3MVWC2DQB3K4SKJYCB4CKGIN2K52PWPOHG6ARL2Q7GHC5QCeval-vm: increment 3 — first real effect leaf host_backend_call (async bytes-in/bytes-out over a real socket round-trip, bridged into Lwt; two calls overlap). Bytes marshaling both ways via caml_string_length/caml_alloc_string.
Created by pmeunier on Aug 4, 2026, 9:36 PM
State:
NAKITNENNYMW752542HYO7OKKJ5YNA5GFJTPM7L4IM2EIASA3VQQCsbom U3b perf: run the output reference scan in spawn_blocking (off the async executor)
Created by pmeunier on Aug 4, 2026, 9:34 PM
State:
RTSJGLYXRSUQXC5MUS3W7NJLHFSQKIY7XLUDBQETGXYYLWZTA5HQCsbom U3b-3: fold reachable deb->deb lock edges into build SBOM (complete_edges BFS: scanned + reused deb closure)
Created by pmeunier on Aug 4, 2026, 9:26 PM
State:
GB2DLYFX7AVDSPWUUCF7FLYYTMU3OL4RAQ4STJWTJYEOR2262CRACeval-vm: Rust host embedding a sandboxed OCaml bytecode VM (increments 1-2) — curated prim table (no IO), async host prims bridged into Lwt (Lwt.all overlaps); crates ocaml-vm-sys/-build/-vm + demo
Created by pmeunier on Aug 4, 2026, 9:23 PM
State:
ODR2WEX4J2WYP7D37DNVKVSYSM6K4HK2BXGT6Y24A5JYTMOTG4LACelpe-sched: privileged cgroup-v2 validation tests (ignored) — prove ELPE_DEFAULT_CORES caps+pins an undeclared action (cpu.max=quota, cpuset pinned to N cores) and that no default leaves it uncapped (cpu.max=max); finishes task A validation
Created by pmeunier on Aug 4, 2026, 9:18 PM
State:
3FPL4SFQFVKIGELUSWQFARNHVAGES2UO4XIXT47LMBWE5TNJBEWACsbom U3b-2: emit real scanned dependency graph in build SBOM (built_edges -> cyclonedx_of_build ~edges)
Created by pmeunier on Aug 4, 2026, 9:10 PM
State:
Z72USAIXFGYI2ZXBLQ2SAXNGP327OOZMYFQXHNC7BAXA3GPIBMWACsbom U3b-1: Nix-style reference scan of derivation outputs -> real dep edges in DerivationResult.paths (non-ubuntu only)
Created by pmeunier on Aug 4, 2026, 9:04 PM
State:
XCECPZVVLVWSENXBGXDS27UJQHECGLKXG2UPRMGJU3T7QCN5W5TQCimage: Phase 2a fix — define class system before its qcow2/installer/bootstrap/install_vm users
Created by pmeunier on Aug 4, 2026, 9:05 PM
State:
3XOB633I7QD7E74KHLOTGMMYMMLISSV2VHJBIUGWORIUNAJ2X52ACimage: Phase 2a — relocate the store out of the rootfs (store_layer + combined_root_snippet), /run/current-system -> real Image.system store path stamped at assembly
Created by pmeunier on Aug 4, 2026, 9:04 PM
State:
QCRDGD7OIGK27LMXMTXDBFLA5G5X52RX2QNQUMTLUHFE763ZCCOQCsbom U6: schemas/merge.sh — derive multi-arch CycloneDX deliverable via cyclonedx-cli merge of per-target locks
Created by pmeunier on Aug 4, 2026, 9:00 PM
State:
OTFRGVZ3A3D4GLNPH66OTSNM5V6EZ7JUICDNSHEIE4SCKUO3B2AACelpe: design note — eval VM as Rust host + embedded bytecode runtime (Lwt<->tokio bridge + host-provided curated prims table); spike-validated
Created by pmeunier on Aug 4, 2026, 8:55 PM
State:
SUND4OVLJG5CZVL75P3RFZ5ELVMULFYQQLPCBNPGGMMCMR5L4IQQCrust: --extern crate name is the dep's lib target name, not its package name (md-5 lib is md5); fixes 'unresolved crate md5' building the elpe backend in the nix-free self-build
Created by pmeunier on Aug 4, 2026, 8:44 PM
State:
6IJ4X2VD3IPC7VBQGK33PC6SOBXV7EPVKIT3WUE2K3DIQEBHFUSQCsbom U4: interop harness — validate CycloneDX + syft-convert to schema-valid SPDX; drop dead elpe-sbom refs
Created by pmeunier on Aug 4, 2026, 8:42 PM
State:
FLJ7OXI5LXSULMZ3XQIIDPQL3W5RMPCZYZGGHBTSDPNPGVJPSEAQCbuild: pull libprotobuf-dev + add its /usr/include to REAPI protoc includes so google/protobuf well-known types resolve in the nix-free self-build (host build unaffected: PROTOC_INCLUDE/guarded path)
Created by pmeunier on Aug 4, 2026, 8:40 PM
State:
LUN54KJWYJYQCJAVCJKK2W37RXPCOE3ZM4JZWN2VEIJLPTQ5UE3ACsandbox: allow reading /elpe (the content-addressed store) during evaluation — Image.read_sysusers parses packages' sysusers.d from the store; it's the /nix analogue, read-only, no secrets
Created by pmeunier on Aug 4, 2026, 8:32 PM
State:
3T4FMUMTPEL4TDCLSHOIDFUVMP33MZWRLSKT362N2DS3TE3F62PQCresolve conflict: integrate anchored /pattern .ignore fix into refactored parse_ignore_line (keep default_src_ignores)
Created by pmeunier on Aug 4, 2026, 8:29 PM
State:
EQSQBGNESLWAAQ2274V2CY4OKP3K2CMC2V5D3W5LCCXEWVM3TBGAC