Dev - #593
Merged
Merged
Conversation
- Fix unsafe tarfile extraction on Python < 3.12 (path traversal / zip slip) - Validate OCI root_file against path traversal components - Replace hardcoded bearer token with cryptographically random token - Add path traversal guard for local module imports - Harden identity header authentication against spoofing - Add 30s timeout to all OCI registry HTTP requests - Fix Content-Length header parsing to handle non-integer values - Use atomic file writes (tempfile + os.replace) in LocalControlPlaneStore https://claude.ai/code/session_01PCzYCJnh1jC2cbPcvTyBAP
Introduce aces_processor.reference (ReferenceProcessor / run_reference_processor), the repository-owned reference processor that realizes the normative processing model: it carries SDL authoring input through instantiation, compilation, and planning to a portable ExecutionPlan and exposes the published processor manifest. Per ADR-008 the processor stops at the execution plan; backend realization stays in the runtime, so the module imports only the SDL/processor/ contract layers (never aces_runtime). The backend-conformance live probe now consumes the reference processor instead of inlining the compile/plan chain, and new end-to-end tests drive its plan through the reference runtime to prove every contract version the processor manifest declares is exercised. Allowlist aces_processor.reference for aces_conformance in adr_policy.yaml.
realize uses no instance state; mark it static to match manifest_payload and satisfy the SonarCloud S2325 quality gate. run_reference_processor now calls it without instantiating.
feat(runtime): add shared operational state snapshots
feat: add repository-owned reference processor (RUN-313)
Implement aces_reference_backend: a concrete, container-backed backend implementing the four backend protocol roles (Provisioner, Orchestrator, Evaluator, ParticipantRuntime) over a pluggable deployment driver. The default in-process driver is hermetic; an opt-in OCI driver (docker/podman) realizes plans against a real container runtime via fixed-argv subprocess calls, an operator image-trust policy, bounded timeouts, transactional rollback, and no secret/native-id leakage into portable artifacts. The backend publishes identity/capability through the standard BackendManifest, registers on the BackendRegistry descriptor seam as reference-emulation, and passes run_target_conformance at the FULL_REMOTE_CONTROL_PLANE profile. Provenance flows through the SEM-218 apply gate; only portable ACES facts reach snapshots, diagnostics, and conformance reports. A docker-marked, runtime-gated integration test plus a non-blocking integration_docker nox session and CI job exercise real-container realization without touching the hermetic verify graph. ADR-063 records the design.
Bundle the OCI driver image-trust knobs into an ImageTrustPolicy value (fewer __init__ params), extract diagnostic-code constants for the duplicated literals, reduce flagged functions to <=3 returns, flatten _image_ref via a _node_source helper, add missing type hints, make stateless helpers static, and move the OCI subprocess-leaf coverage exclusion to pyproject. Behavior-preserving; reference-backend suite and full verify stay green.
The reference emulation backend's orchestrator/evaluator/participant-runtime intentionally reproduce the non-normative stub's portable runtime envelopes; parity is asserted by conformance tests. Scope a documented sonar.cpd.exclusions to those three files (the driver-backed provisioner stays under the normal duplication bar).
feat: add participant concurrency runtime contracts
added: reference emulation backend (RUN-314)
…loseout docs: reconcile asset inventory methodology closeout
feat: register API-406 backend carrier contracts
…port added: expose participant feature support declarations
…ary-semantics # Conflicts: # docs/explain/reference/shared-semantic-integrity.md
…emantics feat: define SEM-216 boundary semantics for state, evidence, evaluation, analysis, and views
added: define external knowledge bindings
…ation feat: implement SEM-224 observability plane separation semantics
added: participant behavior model specification
added: add SEM-225 augmentation disclosure semantics
changed: add participant behavior binding gate
feat: add scenario-native observability coverage
docs: document ACT-603 interaction guardrails
Point readers to APTL (Advanced Purple Team Lab) as a separate project that specifies its scenarios as ACES SDL documents and realizes the selected topology on a Docker Compose backend, illustrating the language driving a concrete range.
Note APTL as a worked ACES SDL example in the README
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Related Issues
Requirement Context
aces-sdlChanges
Test Plan
uvx nox -s verifypasses, or the unchecked sessions are listed belowuvx nox -s docs)Checklist
docs/explain/reference/coding-standards.md)changelog.d/, or not neededNotes for Review