1.3 KiB
1.3 KiB
Prompt
After completing and auditing the stacked rebase, the human approved the next WireGuard Layer C slice: integrate the verified network namespace entry primitive into child spawn bootstrap.
Response summary
Wire an optional child-owned namespace FD and expected inode into both child entrypoints. Keep namespace entry and FD closure synchronous and ordered before actor runtime initialization, while deliberately deferring backend FD transport and public API plumbing.
Files changed
tractor/spawn/_entry.py- enter and release an optional inherited namespace capability before multiprocessing child runtime startup.tractor/_child.py- consume the capability at the start of the Trio child bootloader, before patching or actor construction.tests/test_netns_spawn.py- prove entry ordering, failure isolation, and exact FD ownership for both child entrypoints.
Human edits
The human selected spawn-time namespace integration as the next work slice and authorized implementation. No direct manual source edits were observed during generation.