1.5 KiB
Prompt
After committing the reviewed bindspace-reference changes, the human asked to continue with the next Layer C increment.
Response summary
Added the private Linux network-namespace entry primitive required by future child bootstrap wiring. It verifies the inherited capability before setns(), constrains entry to network namespaces, and verifies the resulting process namespace before runtime initialization proceeds.
Files changed
tractor/spawn/_netns.py- synchronous verified netns entry.tests/test_netns_spawn.py- stale-FD, syscall and post-entry guards.ai/tpt-backends/03_wg_tunnel_bindspace.md- primitive ownership and remaining integration boundary.
Human edits
The human requested the next incremental implementation after accepting the prior split commits. Their established preference for end-to-end tests informed use of real FDs where possible; only privileged setns() and procfs observation are replaced to keep the suite unprivileged. In staged review, the human requested the full project license header, explicit comments on both intentional inode mismatches, and independent call traces proving both fake syscall and procfs hooks execute. The agent applied those human-directed revisions; no direct manual source edits were observed.