
== build: start-ocx, receipts and ocx2 from /var/lib/ocx/agents/opus-ocx2/projects/ollama/b2de8b0c2c6700eb5c686b1747b5aaa1e2d2d01370ac55f2e5a151a67e03b48a/tree8

== served repository: demo.fossil, users, chat timeline
-rw-------    1 root     root        217088 Oct 28 23:07 /tmp/sA-3692387/fossil/demo.fossil

== receipt service, through the launcher's receipts policy
total 0
srw-------    1 root     root             0 Oct 28 23:07 receipts.sock

== Fossil server, its extroot's ocx2-cgi the launcher

== the daemon's node: nodes.json and credentials

== confined daemon, through the launcher's daemon policy
{"when":"2026-10-28T23:08:51Z","clone":"/tmp/sA-3692387/daemon/node/clones/demo.fossil","completion":1,"new":0,"handed":[],"settled":0}
{"when":"2026-10-28T23:08:54Z","clone":"/tmp/sA-3692387/daemon/node/clones/demo.fossil","completion":1,"new":0,"handed":[],"settled":0}
{"when":"2026-10-28T23:08:57Z","clone":"/tmp/sA-3692387/daemon/node/clones/demo.fossil","completion":1,"new":0,"handed":[],"settled":0}

== two runs, posted by boss (setup) through Fossil's form
sandboxed run b9191cf6bf
unconfined run 0fcffe1cfc

== what the runs posted (started, kept logs, ended)
'b9191cf6bf','boss','D 2026-10-28T23:08:59.320 H sandboxed\sprobe N text/x-markdown U boss W 1007 ```json {"ocx": 1, "kind": "run", "node": "demo-node", "objective": "Probe from an agent sandbox.", "workspace": [{"step": "directory", "at": "$$root$$/$$user$$/projects/$$project$$/$$run$$"}], "sandbox": {"uid": 1000, "gid": 1000, "capabilities": [], "network": false, "own_session": true, "ends_with_node": true, "read_only": ["/usr", "/bin", "/lib", "/lib64"], "read_write": ["$$workspace$$"], "homes": [], "files": [], "proc": "/proc", "dev": "/dev", "tmp": "/tmp"}, "limits": {"wall": "2m"}, "process": {"user": "build'
'0fcffe1cfc','boss','D 2026-10-28T23:08:59.426 H unconfined\sprobe N text/x-markdown U boss W 642 ```json {"ocx": 1, "kind": "run", "node": "demo-node", "objective": "Probe from the daemon itself, unconfined by any run sandbox.", "process": {"user": "builder", "command": ["/bin/sh", "-c", "echo uid=$(id -u); for p in /tmp/sA-3692387/fossil /tmp/sA-3692387/fossil/demo.fossil; do [ -e $p ] && echo VISIBLE $p || echo absent $p; done; head -c 16 /tmp/sA-3692387/fossil/demo.fossil >/dev/null 2>&1 && echo READ-OK || echo read-refused; n=0; for x in /proc/[0-9]*/root/tmp/sA-3692387/fossil/demo.fossil; do [ -r $x ] && n=$'
'd4ccb3584f','demo-node','D 2026-10-28T23:09:00.573 G 0fcffe1cfcf4ab7576822fcfab8eb72ab09abe0b3b08818887d3f378b9e248f4 I 0fcffe1cfcf4ab7576822fcfab8eb72ab09abe0b3b08818887d3f378b9e248f4 N text/x-markdown U demo-node W 277 ```json {  "ocx": 1,  "kind": "ended",  "node": "demo-node",  "clone": "85cedd2425926bd571d951938eb32037b80be6a3",  "run": "0fcffe1cfcf4ab7576822fcfab8eb72ab09abe0b3b08818887d3f378b9e248f4",  "outcome": "refused",  "note": "this node runs only sandboxed processes" } ``` Z 9bb15dba81fa6d33708a6b647f82f0bf '
'a9616e1e2f','demo-node','D 2026-10-28T23:09:00.952 G b9191cf6bfebd511e63800d993c3714a4470647fed655e3e4ddd2f95654c04e0 I b9191cf6bfebd511e63800d993c3714a4470647fed655e3e4ddd2f95654c04e0 N text/x-markdown U demo-node W 687 ```json {  "ocx": 1,  "kind": "started",  "node": "demo-node",  "clone": "85cedd2425926bd571d951938eb32037b80be6a3",  "run": "b9191cf6bfebd511e63800d993c3714a4470647fed655e3e4ddd2f95654c04e0",  "values": {   "root": "/tmp/sA-3692387/daemon/agents",   "project": "demo",   "user": "builder",   "run": "b9191cf6bfebd511e63800d993c3714a4470647fed655e3e4ddd2f95654c04e0",   "node": "demo-node",   "server": "'
'556667c5f5','demo-node','D 2026-10-28T23:09:01.040 G b9191cf6bfebd511e63800d993c3714a4470647fed655e3e4ddd2f95654c04e0 I b9191cf6bfebd511e63800d993c3714a4470647fed655e3e4ddd2f95654c04e0 N text/x-markdown U demo-node W 232 The process for the run b9191cf6bfebd511e63800d993c3714a4470647fed655e3e4ddd2f95654c04e0 exited 0. ~~~~ stdout uid=1000 absent /tmp/sA-3692387/fossil absent /tmp/sA-3692387/fossil/demo.fossil read-refused proc-paths-readable=0 ~~~~ Z f162cef6ae7e3c7c270a70ddbcf18e92 '
'ed7786ef51','demo-node','D 2026-10-28T23:09:01.051 G b9191cf6bfebd511e63800d993c3714a4470647fed655e3e4ddd2f95654c04e0 I b9191cf6bfebd511e63800d993c3714a4470647fed655e3e4ddd2f95654c04e0 N text/x-markdown U demo-node W 236 ```json {  "ocx": 1,  "kind": "ended",  "node": "demo-node",  "clone": "85cedd2425926bd571d951938eb32037b80be6a3",  "run": "b9191cf6bfebd511e63800d993c3714a4470647fed655e3e4ddd2f95654c04e0",  "outcome": "exited",  "exit": 0 } ``` Z 2d910acbde692057270ae97e728e7257 '

== receipts through the launcher's CGI route, against Fossil's own record
boss {"artifacts": [{"artifact": "b9191cf6bfebd511e63800d993c3714a4470647fed655e3e4ddd2f95654c04e0", "received": true, "sender": "boss", "capabilities": "bcdefghijklmnopqrstwz234567AD", "receipt": 2, "rid": 2}], "user": {"user": "demo-node", "capabilities": "ghjorwz4C", "wiki_moderated": false, "ticket_moderated": false}}
viewer {"artifacts": [{"artifact": "b9191cf6bfebd511e63800d993c3714a4470647fed655e3e4ddd2f95654c04e0", "received": true, "sender": "boss", "capabilities": "bcdefghijklmnopqrstwz234567AD", "receipt": 2, "rid": 2}], "user": {"user": "demo-node", "capabilities": "ghjorwz4C", "wiki_moderated": false, "ticket_moderated": false}}
anon {"artifacts": [{"artifact": "b9191cf6bfebd511e63800d993c3714a4470647fed655e3e4ddd2f95654c04e0", "received": true, "sender": "boss", "capabilities": "bcdefghijklmnopqrstwz234567AD", "receipt": 2, "rid": 2}], "user": {"user": "demo-node", "capabilities": "ghjorwz4C", "wiki_moderated": false, "ticket_moderated": false}}
Fossil's own record: 'boss','bcdefghijklmnopqrstwz234567AD',2,2
Fossil's fullcap(demo-node): 'ghjorwz4C'

== the console, as boss (the page's other paths still pass through: E6)
console ok: True | runs running: 0 | ended: 2

== writes from the receipt service's policy fail (a probe in place of receipts)
Fossil's port 60509 answers on the host: 200
GC Warning: Could not open /proc/stat
open the repository for writing: refused (File::Error: Error opening file with mode 'r+': '/tmp/sA-3692387/fossil/demo.fossil': Read-only file system)
create a file beside it: refused (File::Error: Error opening file with mode 'w': '/tmp/sA-3692387/fossil/x': Read-only file system)
read the repository: read ok (allowed: read-only)
reach Fossil's port: refused (Socket::ConnectError: Error connecting to '127.0.0.1:60509': Connection refused)
write in its socket directory: written (allowed: its one writable place)

== the daemon's own view: a probe in place of its program, started through the same daemon policy
daemon probe: uid=0 caps=CapEff: 000001ffffffffff
absent /tmp/sA-3692387/fossil
absent /tmp/sA-3692387/fossil/demo.fossil
proc-paths-readable=0 (other processes of the same account; the live daemon has an account of its own)
agent sandbox inside: started

== rollback point: the launcher's CGI link is one file; the previous page is the release's own ocx2
-rwxr-xr-x    1 root     root           197 Oct 28 23:07 /tmp/sA-3692387/ext/ocx2-cgi
done
