066-short-probe-socket
The boundary self-test's probe socket lives under a short fixed directory, so a long home path cannot refuse a launch
Lifecycle approvedImplementation completeVerification unknownQualification unknown
Amends spec 064 section 3.3. The self-test's listening Unix socket moves from a directory under the product home's boundary entry to a private directory under /tmp, so its path no longer grows with the home's path and stays within the platform's socket path limit (104 bytes on macOS, 108 on Linux). The sentinel stays in boundary/, the protected roots and the confinement record are unchanged, and rule 6 of spec 004 section 3.18 still decides whether the probe's connect is refused.
Read the full pinned specification ↗Relationships
Claimed units
- extends
{ "nature": "additive", "spec": "002-environment-lifecycle", "unit": { "kind": "directory", "path": "crates/statecraft-home/" } } - extends
{ "nature": "additive", "spec": "006-command-surface", "unit": { "kind": "directory", "path": "crates/statecraft-cli/" } }
Source headings
- 066: A short probe socket
- 1. Purpose
- 2. Territory
- 3. Behavior
- 3.1 Where the socket lives
- 3.2 What does not move
- 3.3 What a long home now does
- 4. Out of scope
- 5. Resolved decisions
- Verification
Frozen anchors
No frozen anchors declared.