sbom U3b-2: emit real scanned dependency graph in build SBOM (built_edges -> cyclonedx_of_build ~edges)
Created by pmeunier on Aug 4, 2026, 9:10 PM
State:
Z72USAIXFGYI2ZXBLQ2SAXNGP327OOZMYFQXHNC7BAXA3GPIBMWACsbom U3b-1: Nix-style reference scan of derivation outputs -> real dep edges in DerivationResult.paths (non-ubuntu only)
Created by pmeunier on Aug 4, 2026, 9:04 PM
State:
XCECPZVVLVWSENXBGXDS27UJQHECGLKXG2UPRMGJU3T7QCN5W5TQCimage: Phase 2a fix — define class system before its qcow2/installer/bootstrap/install_vm users
Created by pmeunier on Aug 4, 2026, 9:05 PM
State:
3XOB633I7QD7E74KHLOTGMMYMMLISSV2VHJBIUGWORIUNAJ2X52ACimage: Phase 2a — relocate the store out of the rootfs (store_layer + combined_root_snippet), /run/current-system -> real Image.system store path stamped at assembly
Created by pmeunier on Aug 4, 2026, 9:04 PM
State:
QCRDGD7OIGK27LMXMTXDBFLA5G5X52RX2QNQUMTLUHFE763ZCCOQCsbom U6: schemas/merge.sh — derive multi-arch CycloneDX deliverable via cyclonedx-cli merge of per-target locks
Created by pmeunier on Aug 4, 2026, 9:00 PM
State:
OTFRGVZ3A3D4GLNPH66OTSNM5V6EZ7JUICDNSHEIE4SCKUO3B2AACelpe: design note — eval VM as Rust host + embedded bytecode runtime (Lwt<->tokio bridge + host-provided curated prims table); spike-validated
Created by pmeunier on Aug 4, 2026, 8:55 PM
State:
SUND4OVLJG5CZVL75P3RFZ5ELVMULFYQQLPCBNPGGMMCMR5L4IQQCrust: --extern crate name is the dep's lib target name, not its package name (md-5 lib is md5); fixes 'unresolved crate md5' building the elpe backend in the nix-free self-build
Created by pmeunier on Aug 4, 2026, 8:44 PM
State:
6IJ4X2VD3IPC7VBQGK33PC6SOBXV7EPVKIT3WUE2K3DIQEBHFUSQCsbom U4: interop harness — validate CycloneDX + syft-convert to schema-valid SPDX; drop dead elpe-sbom refs
Created by pmeunier on Aug 4, 2026, 8:42 PM
State:
FLJ7OXI5LXSULMZ3XQIIDPQL3W5RMPCZYZGGHBTSDPNPGVJPSEAQCbuild: pull libprotobuf-dev + add its /usr/include to REAPI protoc includes so google/protobuf well-known types resolve in the nix-free self-build (host build unaffected: PROTOC_INCLUDE/guarded path)
Created by pmeunier on Aug 4, 2026, 8:40 PM
State:
LUN54KJWYJYQCJAVCJKK2W37RXPCOE3ZM4JZWN2VEIJLPTQ5UE3ACsandbox: allow reading /elpe (the content-addressed store) during evaluation — Image.read_sysusers parses packages' sysusers.d from the store; it's the /nix analogue, read-only, no secrets
Created by pmeunier on Aug 4, 2026, 8:32 PM
State:
3T4FMUMTPEL4TDCLSHOIDFUVMP33MZWRLSKT362N2DS3TE3F62PQCresolve conflict: integrate anchored /pattern .ignore fix into refactored parse_ignore_line (keep default_src_ignores)
Created by pmeunier on Aug 4, 2026, 8:29 PM
State:
EQSQBGNESLWAAQ2274V2CY4OKP3K2CMC2V5D3W5LCCXEWVM3TBGACelpe local_src: honor anchored /pattern in .ignore (leading-slash gitignore anchoring); the 168MB root log leaked into every src copy despite /log in .ignore, causing hash churn + a Cargo.lock perm race
Created by pmeunier on Aug 4, 2026, 8:26 PM
State:
FMO2Y3BON4JLAJZICKXOJBGE627UIMNCRF3ADVOO4BJWKD56V7XQCsbom: U2(b) full lean — CycloneDX only; drop SPDX serialisers, elpe sbom cmd, lock -sbom
Created by pmeunier on Aug 4, 2026, 8:23 PM
State:
GGOTAICYZECNTUCPDOPTUSQWNCXOHPSZRPI4LLUB3DSFAJID5CAQCimage: retry_store — harden read_sysusers against the frontend/backend store permission race (EACCES)
Created by pmeunier on Aug 4, 2026, 8:22 PM
State:
BNB2H37SVKFBWS4ULHXXUDANU4IY4N4BRRSK4K5HG5NXSFS3SU2QCimage: generations Phase 1 — Image.system toplevel (generation identity), /run/current-system + /etc/elpe snapshot, faithful service round-trip in configuration.ml
Created by pmeunier on Aug 4, 2026, 8:15 PM
State:
DJAY3WWFXE3KX7UILXAFE53Y5WAUFOA32QYMA2CO6VXBWQKAEJSACelfedit: keep trailing DT_NEEDED on runpath-only edits (fixes libLLVM.so.21 losing libedit/libzstd/libxml2 NEEDED -> rustc 'undefined symbol: history' in nix-free backend rebuild)
Created by pmeunier on Aug 4, 2026, 5:58 PM
State:
7BFXB547JWGVXO3534IRUU7OETAGFI6QIRZULL32ZCMDLJLG66WACsbom: U2(a) emit declarative dep graph in of_lock exports (SPDX DEPENDS_ON + CycloneDX dependencies)
Created by pmeunier on Aug 4, 2026, 5:53 PM
State:
FKSMWIESRAOTUAZU4PMT6POZCJIFAXRJ6BMGOY4RH4XIOAR5PUGACsandbox_stubs.c: define _GNU_SOURCE before includes so O_PATH is declared (frontend dune build was failing to compile the landlock stub)
Created by pmeunier on Aug 4, 2026, 5:52 PM
State:
RFKISQC2DSIUVK5XVPYWQTVGU6M7ZNTUSSULLDHJFQA3LRBCJR5QCelpe: sandbox evaluation of untrusted build.ml (seccomp: no net/exec; landlock: writes confined to CWD, no $HOME reads) armed before Dynlink
Created by pmeunier on Aug 4, 2026, 5:48 PM
State:
HIOHXD46IJZXQTOT4B6LTPKNRXEZEGVLCJWUGYBQIF27XRZASJOAClocal_src: restore full default-ignore (elpe.*.lock + *.cmi/cmo/cmx/o) — e2e-verified the .cmi/.cmo exclusion is NECESSARY for update->build input-hash convergence, not just cosmetic (compiler output isn't byte-stable across the update->build boundary); the input-hash must cover real sources, not build artifacts
Created by pmeunier on Aug 4, 2026, 5:48 PM
State:
BT77SOV2D5VYBFKQWVC3NDNP2HAHBFI4OHZHZOX5ANBDXUGYAK4QClock: regenerate example locks in CycloneDX format
Created by pmeunier on Aug 4, 2026, 5:47 PM
State:
XISLX4VZOMQJUHTU6OMODQXKQW4DOJ6MZDHVHFT64UMOV2357UUAC