fix(scope): per-record log attribution, subject-bound OAuth callback logging, canonical container ownership (Spec 105 PR E, FR-007) - #1284

Merged

Dumbris merged 24 commits into

mainfrom

105-e-logs

Sep 18, 2026

Commits on Sep 17, 2026

test(scope): Spec 105 PR E red phase — log attribution, OAuth stop routing, container ownership (FR-007)

Dumbris
and
claude
committed
43a4d2d
feat(scope): Spec 105 PR E — per-record log attribution, subject-bound OAuth stop, canonical container ownership (FR-007)

Dumbris
and
claude
committed
d2e2c90
fix(scope): PR E critique round 1 — over-long lines skipped, container_count evidence, audit widened, OAuth stop fields

Dumbris
and
claude
committed
8c96f43
fix(scope): PR E codex round 1 — first-boundary log attribution, ownership on cidfile and exact-name container paths

Dumbris
and
claude
committed
8fc9da3
fix(scope): PR E codex round 2 — one-header console records, subject-safe deprecated OAuth start, child output as a container subject

Dumbris
and
claude
committed
1de7f53
test(upstream): rename the fake-docker shell quoter — sandbox_linux_test.go already declares shellQuote under the linux tag

Dumbris
and
claude
committed
3839237
test(upstream): keep a real docker out of PATH for the fake-docker fixture

Dumbris
and
claude
committed
dbd0a30
test(logs): skip the shared-file rotation fixture on Windows

Dumbris
and
claude
committed
4ab31a9
fix(scope): PR E review round 4 — sweep outcome records carry the read-back container owner

Dumbris
and
claude
committed
c26f017
fix(scope): PR E review round 5 — sweeps re-verify ownership at mutation time, disconnect-timeout records name the container only with evidence

Dumbris
and
claude
committed
c35c20a
fix(scope): PR E review round 6 — every Docker mutation re-verifies ownership through one helper

Dumbris
and
claude
committed
66792da
fix(scope): PR E review round 8 — cidfile refusals and container health checks name no id without ownership evidence

Dumbris
and
claude
committed
7c8d193
fix(scope): PR E review round 9 — lifecycle log lines and diagnostics name a container only with evidence

Dumbris
and
claude
committed
b13e950
test(upstream): pin the direct-exec docker path in the fake-docker fixture

Dumbris
and
claude
committed
787b4cb
fix(scope): PR E review round 11 — housekeeping counts and cidfile-recovery failure carry no unowned container evidence

Dumbris
and
claude
committed
fc0f831
fix(scope): PR E review round 13 — HasDockerContainers applies canonical ownership, sweep counts are owner-grouped

Dumbris
and
claude
committed
b8ace88
fix(upstream): drop ownerless rejected-row count from container sweep

Dumbris
and
claude
committed
26a0b42
fix(scope): PR E review round 16 — container state from the Verify read, scoped log tail bounded by budget

Dumbris
and
claude
committed
ccf9833

Commits on Sep 18, 2026

Merge remote-tracking branch 'origin/main' into pr1284-105-e-logs
Dumbris
committed
6855307
fix(scope): scope canonical container ownership to this mcpproxy instance (FR-007)

Dumbris
and
claude
committed
916372f
fix(scope): reject tab-corrupted docker-ps rows in ownership reads (FR-007)

Dumbris
and
claude
committed
216fcab
fix(scope): stop trimming docker-ps output before splitting into rows (FR-007)

Dumbris
and
claude
committed
6aaaad4
fix(scope): fail whole docker-ps read closed on any malformed row (FR-007)

Dumbris
and
claude
committed
6e460d7
Merge remote-tracking branch 'origin/main' into pr1284-105-e-logs
Dumbris
committed
f74166a

Navigation Menu

fix(scope): per-record log attribution, subject-bound OAuth callback logging, canonical container ownership (Spec 105 PR E, FR-007) - #1284

fix(scope): per-record log attribution, subject-bound OAuth callback logging, canonical container ownership (Spec 105 PR E, FR-007)#1284
Dumbris merged 24 commits into
mainfrom
105-e-logs

Commits on Sep 17, 2026

test(scope): Spec 105 PR E red phase — log attribution, OAuth stop routing, container ownership (FR-007)

feat(scope): Spec 105 PR E — per-record log attribution, subject-bound OAuth stop, canonical container ownership (FR-007)

fix(scope): PR E critique round 1 — over-long lines skipped, container_count evidence, audit widened, OAuth stop fields

fix(scope): PR E codex round 1 — first-boundary log attribution, ownership on cidfile and exact-name container paths

fix(scope): PR E codex round 2 — one-header console records, subject-safe deprecated OAuth start, child output as a container subject

test(upstream): rename the fake-docker shell quoter — sandbox_linux_test.go already declares shellQuote under the linux tag

test(upstream): keep a real docker out of PATH for the fake-docker fixture

test(logs): skip the shared-file rotation fixture on Windows

fix(scope): PR E review round 4 — sweep outcome records carry the read-back container owner

fix(scope): PR E review round 5 — sweeps re-verify ownership at mutation time, disconnect-timeout records name the container only with evidence

fix(scope): PR E review round 6 — every Docker mutation re-verifies ownership through one helper

fix(scope): PR E review round 8 — cidfile refusals and container health checks name no id without ownership evidence

fix(scope): PR E review round 9 — lifecycle log lines and diagnostics name a container only with evidence

test(upstream): pin the direct-exec docker path in the fake-docker fixture

fix(scope): PR E review round 11 — housekeeping counts and cidfile-recovery failure carry no unowned container evidence

fix(scope): PR E review round 13 — HasDockerContainers applies canonical ownership, sweep counts are owner-grouped

fix(upstream): drop ownerless rejected-row count from container sweep

fix(scope): PR E review round 16 — container state from the Verify read, scoped log tail bounded by budget

Commits on Sep 18, 2026

Merge remote-tracking branch 'origin/main' into pr1284-105-e-logs

fix(scope): scope canonical container ownership to this mcpproxy instance (FR-007)

fix(scope): reject tab-corrupted docker-ps rows in ownership reads (FR-007)

fix(scope): stop trimming docker-ps output before splitting into rows (FR-007)

fix(scope): fail whole docker-ps read closed on any malformed row (FR-007)

Merge remote-tracking branch 'origin/main' into pr1284-105-e-logs