Krzysztof kuhy Rudnicki 53e80462c5 Phase 3: prove 100% shell coverage is reachable via a namespace jail ... Measurement-only. No production file changed. The gating question was whether the campaign's constraints are jointly satisfiable: 100% line coverage over ALL .sh files with no suppressions. Phase 1 measured effecting code at 0% under PATH shims, which implied either forbidden suppressions or source seams in 17+46 files. They are satisfiable. A user+mount namespace reaches 100% with zero source changes: --map-root-user makes require_root fall through, and bind-mounting each write target makes installer writes land in the jail. setup_night_lockdown.sh went 81.58% (PATH shims) -> 86.84% (userns) -> 100.00% (38/38, all mounts). Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01F3PzGc75gBcdxP3PkHXGcV		2026-08-21 17:08:05 +02:00
..
explanations	session_autopsy: badge counts only significant candidates; zero-token aliases	2026-07-25 18:05:49 +02:00
superpowers	Phase 3: prove 100% shell coverage is reachable via a namespace jail	2026-08-21 17:08:05 +02:00
agent-harness-evaluation-2026-08-18.md	docs/agent-harness-evaluation-2026-08-18.md: fix prettier formatting	2026-08-18 21:08:01 +02:00
app-split-recipes.md	Add docs/app-split-recipes.md; update the handoff to 78 left	2026-08-16 20:51:38 +02:00
device-owner-wipe-checklist.md	inFakt is SMS-only 2FA, so the wipe cannot strand the account	2026-08-10 20:04:06 +02:00
dns-filtering-parked.md	Park phone DNS filtering: Private DNS fails closed, so the PC cannot host it	2026-08-05 10:05:16 +02:00
mcp-shortlist.html	docs: add MCP server security-triage shortlist	2026-07-17 19:16:31 +02:00
python-split-recipes.md	Apply prettier to the handoff and recipe docs	2026-08-16 18:27:18 +02:00
shared-checkout-safety.md	Retarget the handoff on verifiability; split out the shared-checkout doc	2026-08-16 23:10:25 +02:00
shell-split-harness.md	docs: split shell-split-verification.md 272 -> 78 + harness	2026-08-17 10:54:52 +02:00
shell-split-recipes.md	docs: split shell-split-verification.md 272 -> 78 + harness	2026-08-17 10:54:52 +02:00
shell-split-verification.md	shell: split clean_audio, enforce_vbox_hosts and migrate_hosts_guard	2026-08-17 14:27:57 +02:00
syncyomi-restore-runbook.md	syncyomi_guard: refuse a collapsed payload as the new good copy	2026-08-10 15:33:18 +02:00