Skip to content

Isolate micromamba runtime cache in temporary storage - #14

Merged
man4ish merged 1 commit into
mainfrom
hardening/contract-native-canary-20261004
Oct 4, 2026
Merged

man4ish merged 1 commit into
mainfrom
hardening/contract-native-canary-20261004

Conversation

@man4ish

@man4ish man4ish commented Oct 4, 2026

Copy link
Copy Markdown
Collaborator

Fix shared native validation runtime failure from run 37230822914. Explicitly place micromamba process bookkeeping under isolated /tmp via XDG_CACHE_HOME for OCI and SIF execution. Preserve read-only rootfs, network isolation, cleanenv, read-only fixtures, pinned package verification and all scientific gates. No frozen factory or Dockerfile changes. Four new argument/isolation regressions; 159 focused tests PASS, full suite 8397 PASS / 13 SKIP / 0 FAIL; Ruff/actionlint/diff checks PASS. No publication or registry writes.

@man4ish
man4ish merged commit 4fcee97 into main Oct 4, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant