Repository navigation
Observe native task memory before its final cgroup exit - #18
Merged
erikleblansch merged 1 commit intoOct 15, 2026
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Change
Keep one fixed, bounded guest task holder alive after the real Node child has joined, until the owner reads the original task cgroup counters. Bind the ready/release exchange to the exact peer identity, nonce, original child status and receipt hash. Preserve failures and all existing cleanup gates; missing counters are never zero-filled.
Verification
Independent source reviews completed. The 29 inert holder tests and 11 CI-contract tests pass in a separate root check; the author also verified the relevant smoke, QEMU, native contracts and Node tool contracts (221 unique passes, one explicit retained-loader-source skip across those targeted suites). The historical Torch golden, model/backend selection, tool permissions and resource deadlines are unchanged. No local Rust/model/VM execution.
Scope
Original actual run 38806073909 completed its real coding task but failed in outer postflight; its generic exception does not prove which original read failed. This fixes a source-demonstrated cgroup-lifetime vulnerability, not a retroactive acceptance claim. This PR targets the existing native candidate, not application main. A new actual trial follows source CI and review.