066-short-probe-socket

The boundary self-test's probe socket lives under a short fixed directory, so a long home path cannot refuse a launch

Lifecycle approvedImplementation completeVerification unknownQualification unknown

Amends spec 064 section 3.3. The self-test's listening Unix socket moves from a directory under the product home's boundary entry to a private directory under /tmp, so its path no longer grows with the home's path and stays within the platform's socket path limit (104 bytes on macOS, 108 on Linux). The sentinel stays in boundary/, the protected roots and the confinement record are unchanged, and rule 6 of spec 004 section 3.18 still decides whether the probe's connect is refused.

Read the full pinned specification ↗

Relationships

Claimed units

  • extends
    {
      "nature": "additive",
      "spec": "002-environment-lifecycle",
      "unit": {
        "kind": "directory",
        "path": "crates/statecraft-home/"
      }
    }
  • extends
    {
      "nature": "additive",
      "spec": "006-command-surface",
      "unit": {
        "kind": "directory",
        "path": "crates/statecraft-cli/"
      }
    }

Source headings

  1. 066: A short probe socket
  2. 1. Purpose
  3. 2. Territory
  4. 3. Behavior
  5. 3.1 Where the socket lives
  6. 3.2 What does not move
  7. 3.3 What a long home now does
  8. 4. Out of scope
  9. 5. Resolved decisions
  10. Verification

Frozen anchors

No frozen anchors declared.