Fix shared enclave regression configuration and retain pre-broker failure diagnostics

Chiusa
  • Qualcosa non va?
#11,149 0 commenti 1 reazione 2 assegnatari Vedi su GitHub

I maintainer di solito rispondono entro 1 giorno

@lpcox ci sta già lavorando.

Dal 5/11/2026.

  • #11155 di @copilot-swe-agent — chiusa senza merge
  • #11160 di @copilot-swe-agent — integrata

Valutazione

Questa issue non è ancora stata valutata.

Descrizione

Failure and scope

All six enclave cases fail before broker readiness in Daily Agent Runtime Regression run 41982264274, source bab29c708a316ea52a9df4c7356b5d1acf71faed:

Agent Docker job Cloud Hypervisor job
Copilot 127109770531 127109770598
Claude 127109770662 127109770664
Codex 127109770668 127109770680

Each emits phase=pre-broker, reason=exit, category=unknown, exitCode=1, with the startup record missing. The subsequent protected collector also fails: failedCheck=run-evidence category=absent-evidence. Each uploaded artifact contains only collection-status.txt; no enclave invocation or inference success is established.

Confirmed configuration defects and evidence gap

The shared configuration builder always sets container.containerRuntime: 'docker'. At this same revision the canonical schema accepts only gvisor, sbx, cloud-hypervisor, and nvx as explicit primary runtime values; ordinary Docker is selected by omission. Generating the configuration and comparing it with that enum confirms the mismatch for every case.

For Cloud Hypervisor, simply removing the invalid field is insufficient: the builder also selects a Cloud Hypervisor enclave while keeping a Docker primary, contrary to the documented matching-backend contract. The harness must use a supported, internally consistent topology.

The precise fatal stderr is unavailable in published evidence. The harness writes private AWF stdout/stderr under a temporary directory, but only emits a coarse startup classification. Its final diagnostic call also omits the startup-error-file argument. Do not equate missing invocation artifacts with a successful startup, or claim the configuration fixes exhaust all possible later failures.

Single-PR scope and acceptance criteria

  • Generate valid configurations for all six selections and validate them against the canonical schema in tests.
  • Use supported primary/enclave backend pairings; do not bypass the mixed-backend rejection or weaken isolation.
  • Preserve bounded, allowlisted pre-broker diagnostics through the protected collector, including startup failures before an invocation journal exists. Keep raw logs, credentials, capabilities, and prompts private.
  • Preserve the original startup failure separately from any secondary collection failure.
  • Exercise the generated Python probe, including its credential-placeholder predicate, in deterministic tests so latent probe errors are caught before live inference.
  • Each case reaches broker/gateway readiness and completes one approved enclave invocation with the existing isolation, result-schema, audit, and cleanup assertions intact.

These six failures share one configuration/launch/collection path and should be addressed together, not as six provider-specific bugs. Related broader work: #10335 and #10341. No source modifications or live reruns were performed during triage.

Lingua principale
TypeScript
Stelle
157
Fork
80
Merge medio
4h 47m
PR unite (30g)
414

Preparare l'ambiente

Come iniziare

  1. Leggi tutta la issue e poi la guida ai contributi del progetto.
  2. Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
  3. Fai un fork del repository e lavora su un branch.
  4. Apri una pull request che faccia riferimento al numero della issue.

Altre issue di github/gh-aw-firewall

Tutte le issue di github/gh-aw-firewall

Issue simili

Altre issue su TypeScript

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.