Krzysztof kuhy Rudnicki 53e80462c5 Phase 3: prove 100% shell coverage is reachable via a namespace jail ... Measurement-only. No production file changed. The gating question was whether the campaign's constraints are jointly satisfiable: 100% line coverage over ALL .sh files with no suppressions. Phase 1 measured effecting code at 0% under PATH shims, which implied either forbidden suppressions or source seams in 17+46 files. They are satisfiable. A user+mount namespace reaches 100% with zero source changes: --map-root-user makes require_root fall through, and bind-mounting each write target makes installer writes land in the jail. setup_night_lockdown.sh went 81.58% (PATH shims) -> 86.84% (userns) -> 100.00% (38/38, all mounts). Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01F3PzGc75gBcdxP3PkHXGcV		2026-08-21 17:08:05 +02:00
..
fixtures	focus_ctl: split 1091 -> 171 + 8 siblings, one per enforcer	2026-08-17 17:46:04 +02:00
lib	Close three fail-open paths in the prefix trace harness	2026-08-16 23:38:38 +02:00
run_all	refactor(linux_configuration): move remaining dirs + scripts/ to meta/	2026-05-15 00:53:01 +02:00
_schema_validation.py	feat: split oversized modules for 500-line limit, fix kasa coverage gap	2026-06-14 07:19:37 +02:00
_session_autopsy_mutations.py	Split test_security_hardening.sh; finish the mutation-driver split	2026-08-16 22:24:02 +02:00
check_agent_contract.sh	refactor: extract all inline Python from shell scripts into proper .py files	2026-06-06 10:31:48 +02:00
check_ai_evidence.sh	refactor: extract all inline Python from shell scripts into proper .py files	2026-06-06 10:31:48 +02:00
check_append_only_sessions.sh	refactor(linux_configuration): move remaining dirs + scripts/ to meta/	2026-05-15 00:53:01 +02:00
check_ci_green.sh	Phase 2: enforce the 250-line cap and stop pushing red	2026-08-21 16:41:31 +02:00
check_file_length.sh	meta: add the check_file_length.sh gate the splits assumed existed	2026-08-17 14:52:24 +02:00
check_no_binaries.sh	refactor(linux_configuration): move remaining dirs + scripts/ to meta/	2026-05-15 00:53:01 +02:00
check_no_dufs_conf.sh	linux_configuration: self-hosted dufs cloud storage + KeePass WebDAV auto-sync	2026-07-12 03:40:54 +02:00
check_no_inline_python.sh	Gate the no-inline-Python rule instead of asking people to remember it	2026-08-16 15:11:56 +02:00
check_no_secrets.sh	refactor(linux_configuration): move remaining dirs + scripts/ to meta/	2026-05-15 00:53:01 +02:00
check_polling_antipatterns.sh	Fail the build on any shellcheck finding; fix the 222 the old gate hid	2026-08-03 19:49:11 +02:00
check_python_location.sh	refactor: extract all inline Python from shell scripts into proper .py files	2026-06-06 10:31:48 +02:00
check_requirements_sync.py	requirements-sync: map bs4 and exempt foreign-runtime imports	2026-07-19 18:58:35 +02:00
check_shell_coverage.sh	Phase 3: prove 100% shell coverage is reachable via a namespace jail	2026-08-21 17:08:05 +02:00
ci_mirror.sh	Phase 2: enforce the 250-line cap and stop pushing red	2026-08-21 16:41:31 +02:00
disk_cleanup_check.sh	Split disk_cleanup_check.sh: extract the helpers and the output blocks	2026-08-16 22:57:06 +02:00
extract_shell_functions.py	extract_shell_functions: recognise the function name() spelling	2026-08-21 16:11:29 +02:00
init_agent_artifacts.sh	refactor(linux_configuration): move remaining dirs + scripts/ to meta/	2026-05-15 00:53:01 +02:00
install_hooks.sh	fix(hooks): make git hooks and their toolchain mandatory and fail-closed	2026-08-03 11:09:11 +02:00
makepkg-manual-dlagent.sh	refactor(linux_configuration): move remaining dirs + scripts/ to meta/	2026-05-15 00:53:01 +02:00
mutate_session_autopsy_hooks.py	Split test_security_hardening.sh; finish the mutation-driver split	2026-08-16 22:24:02 +02:00
mutate_shell.py	meta: make this session's 65 mutations reproducible from the repo	2026-08-17 16:38:46 +02:00
pytest_changed_packages.py	Move billsplit Flutter app into the monorepo	2026-08-03 12:22:22 +02:00
run_prettier_capped.sh	Move billsplit Flutter app into the monorepo	2026-08-03 12:22:22 +02:00
run_with_heavy_lock.sh	Diagnose the pacman first-hook stall; fix the drift that hid a stale wrapper	2026-08-03 15:15:34 +02:00
shell_coverage_report.py	meta: measurable shell coverage, and dns_iptables.sh at 100%	2026-08-17 15:29:08 +02:00
shell_coverage.sh	meta: measurable shell coverage, and dns_iptables.sh at 100%	2026-08-17 15:29:08 +02:00
trace_shell_split.sh	Close three fail-open paths in the prefix trace harness	2026-08-16 23:38:38 +02:00
validate_contract.py	feat: split oversized modules for 500-line limit, fix kasa coverage gap	2026-06-14 07:19:37 +02:00
validate_evidence.py	feat: split oversized modules for 500-line limit, fix kasa coverage gap	2026-06-14 07:19:37 +02:00
verify_shell_split.sh	shell splits: add a verbatim-move harness and triage all 29 targets	2026-08-17 14:07:20 +02:00