Repository navigation
fix(a2a): preserve permission recovery and session backup ownership - #388
Merged
Merged
Conversation
- Fence permission handoff and recovery by committed execution ownership - Publish completed shared backups safely and restore through validated snapshots - Finalize late background drains so a fresh worker can recover directly - Capture Linux owner identity without reading root init namespace links - Cover multi-process recovery, publication failures, and platform ordering
ruanzhengxin-zhuxing
force-pushed
the
codex/normal-permission-cold-recovery
branch
from
October 15, 2026 07:08
1020bb0 to
0d907e3
Compare
ruanzhengxin-zhuxing
marked this pull request as ready for review
October 15, 2026 07:38
Collaborator
iac-code E2E 报告提交： 安全分析：按作者白名单免检；改动影响分析、用例选择和 E2E 验收照常执行。 链路阶段进展时间为 UTC+8；预计完成时间为估算，运行中计数尚未作为通过证据。
最近网络尝试（仅操作枚举和错误类别，不含请求地址或响应内容）：
full 逐例结果（47 条）
live 逐例结果（109 条）
失败详情：smoke-a2a-vpc失败检查：output contains VPC-related content 安全结构化证据： {
"0": {
"kind": "check",
"value": "output contains VPC-related content"
},
"1": {
"kind": "execution",
"value": {
"cleanup": "not-needed",
"attempts": [
{
"cleanup": "not-needed",
"evidence": {},
"seconds": 18.32,
"status": "failed"
},
{
"cleanup": "not-needed",
"evidence": {},
"seconds": 26.53,
"status": "failed"
}
]
}
},
"2": {
"kind": "diagnostics",
"value": {}
}
}定向复测参数（私有源码传输参数在内部运行记录中取得）： {
"source_sha": "0d907e3a35630b838942ce19320370594ca28c2d",
"suite": "live",
"case": "smoke-a2a-vpc",
"jobs": 1,
"retries": 0,
"case_models": "smoke-a2a-vpc=glm-5.2-fast-preview"
}失败复盘建议（不改变验收结论）
说明：每个失败用例最多重跑一次；任一次资源清理失败或未验证均不能判通过。 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Normal 权限挂起时，若后台 agent 或子进程晚于前台清理结束，旧 owner 原本不会补交 durable handoff，新 worker 会被
LIVE_OWNER拒绝。本变更在 runtime 和业务工作全部排空后自动提交交接，恢复 admission 同时校验 execution identity、revision、boundary generation 和精确共享备份回执。同时保证会话历史备份与冷恢复的一致性：
验证：
本轮未验证 PRE 实际 Sandbox 替换及跨 Pod 存储锁语义；旧格式会话的可信控制面接管仍属后续阶段。暂存模式先可靠捕获再异步发布，直接模式仍等待共享备份完成。全局 context/task 索引需随 A2A persistence 持久化。