
== build: start-ocx, receipts and ocx2 from /var/lib/ocx/agents/opus-ocx2/projects/ollama/b2de8b0c2c6700eb5c686b1747b5aaa1e2d2d01370ac55f2e5a151a67e03b48a/tree8

== served repository: demo.fossil, users, chat timeline
-rw-------    1 root     root        217088 Oct 28 22:45 /tmp/sA-3529352/fossil/demo.fossil

== receipt service, through the launcher's receipts policy
total 0
srw-------    1 root     root             0 Oct 28 22:45 receipts.sock

== Fossil server, its extroot's ocx2-cgi the launcher

== the daemon's node: nodes.json and credentials

== confined daemon, through the launcher's daemon policy
{"when":"2026-10-28T22:46:47Z","clone":"/tmp/sA-3529352/daemon/node/clones/demo.fossil","completion":1,"new":0,"handed":[],"settled":0}
{"when":"2026-10-28T22:46:50Z","clone":"/tmp/sA-3529352/daemon/node/clones/demo.fossil","completion":1,"new":0,"handed":[],"settled":0}
{"when":"2026-10-28T22:46:54Z","clone":"/tmp/sA-3529352/daemon/node/clones/demo.fossil","completion":1,"new":0,"handed":[],"settled":0}

== two runs, posted by boss (setup) through Fossil's form
sandboxed run e59fa5f04f
unconfined run a82ed4c69b

== what the runs posted (started, kept logs, ended)
'e59fa5f04f','boss','D 2026-10-28T22:46:56.176 H sandboxed\sprobe N text/x-markdown U boss W 1007 ```json {"ocx": 1, "kind": "run", "node": "demo-node", "objective": "Probe from an agent sandbox.", "workspace": [{"step": "directory", "at": "$$root$$/$$user$$/projects/$$project$$/$$run$$"}], "sandbox": {"uid": 1000, "gid": 1000, "capabilities": [], "network": false, "own_session": true, "ends_with_node": true, "read_only": ["/usr", "/bin", "/lib", "/lib64"], "read_write": ["$$workspace$$"], "homes": [], "files": [], "proc": "/proc", "dev": "/dev", "tmp": "/tmp"}, "limits": {"wall": "2m"}, "process": {"user": "build'
'a82ed4c69b','boss','D 2026-10-28T22:46:56.279 H unconfined\sprobe N text/x-markdown U boss W 642 ```json {"ocx": 1, "kind": "run", "node": "demo-node", "objective": "Probe from the daemon itself, unconfined by any run sandbox.", "process": {"user": "builder", "command": ["/bin/sh", "-c", "echo uid=$(id -u); for p in /tmp/sA-3529352/fossil /tmp/sA-3529352/fossil/demo.fossil; do [ -e $p ] && echo VISIBLE $p || echo absent $p; done; head -c 16 /tmp/sA-3529352/fossil/demo.fossil >/dev/null 2>&1 && echo READ-OK || echo read-refused; n=0; for x in /proc/[0-9]*/root/tmp/sA-3529352/fossil/demo.fossil; do [ -r $x ] && n=$'
'bb1d26c906','demo-node','D 2026-10-28T22:46:57.502 G a82ed4c69bdaa93de3d369409189ef889d09da9e7d7d1dfe9c0a737681eeab85 I a82ed4c69bdaa93de3d369409189ef889d09da9e7d7d1dfe9c0a737681eeab85 N text/x-markdown U demo-node W 277 ```json {  "ocx": 1,  "kind": "ended",  "node": "demo-node",  "clone": "ac9960e7456f21074b5cb82523a055bce3fdc767",  "run": "a82ed4c69bdaa93de3d369409189ef889d09da9e7d7d1dfe9c0a737681eeab85",  "outcome": "refused",  "note": "this node runs only sandboxed processes" } ``` Z 812d66e64ed47853ac9331f4ffcd4793 '
'9fff28af0d','demo-node','D 2026-10-28T22:46:58.508 G e59fa5f04f9fdbf4a6900d5a5711e8abc60ddca28b7e632fd76c620c7655605b I e59fa5f04f9fdbf4a6900d5a5711e8abc60ddca28b7e632fd76c620c7655605b N text/x-markdown U demo-node W 687 ```json {  "ocx": 1,  "kind": "started",  "node": "demo-node",  "clone": "ac9960e7456f21074b5cb82523a055bce3fdc767",  "run": "e59fa5f04f9fdbf4a6900d5a5711e8abc60ddca28b7e632fd76c620c7655605b",  "values": {   "root": "/tmp/sA-3529352/daemon/agents",   "project": "demo",   "user": "builder",   "run": "e59fa5f04f9fdbf4a6900d5a5711e8abc60ddca28b7e632fd76c620c7655605b",   "node": "demo-node",   "server": "'
'1e8711525f','demo-node','D 2026-10-28T22:46:58.590 G e59fa5f04f9fdbf4a6900d5a5711e8abc60ddca28b7e632fd76c620c7655605b I e59fa5f04f9fdbf4a6900d5a5711e8abc60ddca28b7e632fd76c620c7655605b N text/x-markdown U demo-node W 232 The process for the run e59fa5f04f9fdbf4a6900d5a5711e8abc60ddca28b7e632fd76c620c7655605b exited 0. ~~~~ stdout uid=1000 absent /tmp/sA-3529352/fossil absent /tmp/sA-3529352/fossil/demo.fossil read-refused proc-paths-readable=0 ~~~~ Z 2823146a1487605b3e5a578a883fc25a '
'725a125ee8','demo-node','D 2026-10-28T22:46:58.600 G e59fa5f04f9fdbf4a6900d5a5711e8abc60ddca28b7e632fd76c620c7655605b I e59fa5f04f9fdbf4a6900d5a5711e8abc60ddca28b7e632fd76c620c7655605b N text/x-markdown U demo-node W 236 ```json {  "ocx": 1,  "kind": "ended",  "node": "demo-node",  "clone": "ac9960e7456f21074b5cb82523a055bce3fdc767",  "run": "e59fa5f04f9fdbf4a6900d5a5711e8abc60ddca28b7e632fd76c620c7655605b",  "outcome": "exited",  "exit": 0 } ``` Z ea6ed6a9bc9101458bcf6b9fa9e9c690 '

== receipts through the launcher's CGI route, against Fossil's own record
boss {"artifacts": [{"artifact": "e59fa5f04f9fdbf4a6900d5a5711e8abc60ddca28b7e632fd76c620c7655605b", "received": true, "sender": "boss", "capabilities": "bcdefghijklmnopqrstwz234567AD", "receipt": 2, "rid": 2}], "user": {"user": "demo-node", "capabilities": "ghjorwz4C", "wiki_moderated": false, "ticket_moderated": false}}
viewer {"artifacts": [{"artifact": "e59fa5f04f9fdbf4a6900d5a5711e8abc60ddca28b7e632fd76c620c7655605b", "received": true, "sender": "boss", "capabilities": "bcdefghijklmnopqrstwz234567AD", "receipt": 2, "rid": 2}], "user": {"user": "demo-node", "capabilities": "ghjorwz4C", "wiki_moderated": false, "ticket_moderated": false}}
anon {"artifacts": [{"artifact": "e59fa5f04f9fdbf4a6900d5a5711e8abc60ddca28b7e632fd76c620c7655605b", "received": true, "sender": "boss", "capabilities": "bcdefghijklmnopqrstwz234567AD", "receipt": 2, "rid": 2}], "user": {"user": "demo-node", "capabilities": "ghjorwz4C", "wiki_moderated": false, "ticket_moderated": false}}
Fossil's own record: 'boss','bcdefghijklmnopqrstwz234567AD',2,2
Fossil's fullcap(demo-node): 'ghjorwz4C'

== the console, as boss (the page's other paths still pass through: E6)
console ok: True | runs running: 0 | ended: 2

== writes from the receipt service's policy fail (a probe in place of receipts)
Fossil's port 53001 answers on the host: 200
GC Warning: Could not open /proc/stat
open the repository for writing: refused (File::Error: Error opening file with mode 'r+': '/tmp/sA-3529352/fossil/demo.fossil': Read-only file system)
create a file beside it: refused (File::Error: Error opening file with mode 'w': '/tmp/sA-3529352/fossil/x': Read-only file system)
read the repository: read ok (allowed: read-only)
reach Fossil's port: refused (Socket::ConnectError: Error connecting to '127.0.0.1:53001': Connection refused)
write in its socket directory: written (allowed: its one writable place)

== the daemon's own view: a probe in place of its program, started through the same daemon policy
daemon probe: uid=0 caps=CapEff: 000001ffffffffff
absent /tmp/sA-3529352/fossil
absent /tmp/sA-3529352/fossil/demo.fossil
proc-paths-readable=0 (other processes of the same account; the live daemon has an account of its own)
agent sandbox inside: started

== rollback point: the launcher's CGI link is one file; the previous page is the release's own ocx2
-rwxr-xr-x    1 root     root           197 Oct 28 22:45 /tmp/sA-3529352/ext/ocx2-cgi
done
