Krzysztof kuhy Rudnicki 08b58794e2 Teach both lib/tests gates to run jail-requiring suites ... ci_mirror.sh and shell-tests.yml discovered every */lib/tests/run_all.sh and invoked it bare. The features/lib suite refuses to run bare -- that guard is what stops it rewriting the real /etc -- so the pre-push gate blocked all six pending commits, and CI would have gone red on the same suite the moment they landed. A suite now DECLARES its jail requirement with a jail_args file beside its run_all.sh, holding the --bind/--seed-* flags it needs. Both consumers branch on the marker. The 105 still-allowlisted libs were scored on root ops and system writes, so most future suites will need the jail too; naming the path in two runners would drift, which is the failure ci_mirror.sh's own comments say it exists to prevent. Both branches fail closed: a marker present but empty is an error, not a skip. Verified the extracted flags reproduce the independently measured dot_resolver_install.sh 39/39 = 100.00%, and that the other five suites still pass bare. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_016sxxsDHWgdRhmdmzNMA6XM		2026-08-22 12:05:45 +02:00
..
agents	style(prettier): apply markdown/json formatting updates	2026-05-07 22:08:00 +02:00
skills	Bring every markdown file under the cap	2026-08-16 19:25:59 +02:00
workflows	Teach both lib/tests gates to run jail-requiring suites	2026-08-22 12:05:45 +02:00
copilot-instructions.md	fix: resolve all pre-commit hook failures after file splits	2026-03-18 22:20:05 +01:00