Container, build, packaging and operator source crosswalk

Magnet source: 2d4ee50b0359e71900fce9289ea01f46d0f41249 (clean when inspected). NMRNet inspected baseline: ad7048cbb8f0dd1b4d273bfdf47ac58568d34f74. Dapp system-package source: 778c16f8d8b77181d2ac4cd11a62a2034ded2518. Every Magnet link below is immutable, not a moving main-branch reference.

P means the assertion is ported. A means an existing NMRNet operation receives its corresponding obligation; architecture-specific details stay source-specific. S means no current NMRNet consumer exists. An S entry is not a passing test and must be reconsidered when a consumer appears. Provider protocol/scientific checks are inventoried by the separate science/authority lens.

Implemented proof and adaptation

The fake engine is an executable checked-in read-only fixture, symlinked into private noexec scratch. It never accesses a socket. Script interpreters resolve from the current contained Python executable. Git projection is finite and does not run Git. GNU Make itself must exist in the reviewed container; absence is an explicit failed proof prerequisite, never replaced by fake Make parsing.

Proxy and worker CIDs are deliberately distinct (c and d, each 64 hex digits). The double admits start/removal only for its own recorded identities; the cleanup assertion requires worker-ID removal before proxy-ID removal.

Native deadline/retirement fixtures retain engine doubles that close output while remaining alive, leave a descendant after leader failure, or let that descendant hold the output pipe. Before dispatch, the check requires a reviewed adapter binding an explicit short budget to an actual supported target deadline control. NMRNet currently has no such control/adapter: the proof prerequisite fails and these scenarios remain unexercised. The fixture's outer timeout only cleans up its own group; it cannot certify an operator deadline or impose a 0.5-second policy on an otherwise valid longer operation. Exact zero-budget dispatch, existing private-log collision and pipe-close injection refer to Magnet's run_native owner API, which has no equivalent configurable budget/log API here; those API-specific cases remain explicitly unported, rather than invent a new host-Python operation owner. Current discovered native probes also enforce private failure output, the original 8-MiB evidence cap and combined cancellation and cleanup truth. Exact systemd/BuilderCache/D-Bus cases remain S because their authority itself has no NMRNet consumer, unlike the unmet native-command obligations above.

Exact original method inventory and dispositions

Links point to the original method. The class-specific map is expanded below. - test_container_posture.py:19 RuntimePostureTests.test_runs_as_fixed_non_root_identity: P: effective kernel/runtime assertion in test_container_port_runtime.py; current numeric authority and caller identity. - test_container_posture.py:23 RuntimePostureTests.test_root_is_read_only_and_tmp_is_writable: P: effective kernel/runtime assertion in test_container_port_runtime.py; current numeric authority and caller identity. - test_container_posture.py:32 RuntimePostureTests.test_has_no_effective_linux_capabilities: P: effective kernel/runtime assertion in test_container_port_runtime.py; current numeric authority and caller identity. - test_container_posture.py:39 RuntimePostureTests.test_kernel_enforces_no_new_privileges: P: effective kernel/runtime assertion in test_container_port_runtime.py; current numeric authority and caller identity. - test_container_posture.py:46 RuntimePostureTests.test_has_only_loopback_network_interface: P: effective kernel/runtime assertion in test_container_port_runtime.py; current numeric authority and caller identity. - test_container_posture.py:50 RuntimePostureTests.test_tmp_is_a_hardened_writable_tmpfs: P: effective kernel/runtime assertion in test_container_port_runtime.py; current numeric authority and caller identity. - test_container_posture.py:56 RuntimePostureTests.test_cgroup_v2_enforces_resource_bounds: P: effective kernel/runtime assertion in test_container_port_runtime.py; current numeric authority and caller identity. - test_container_posture.py:63 RuntimePostureTests.test_fixture_install_retains_no_build_source: P: effective kernel/runtime assertion in test_container_port_runtime.py; current numeric authority and caller identity. - test_container_posture.py:75 ReviewedSourcePostureTests.test_implementation_manifest_has_two_closed_shapes: S: no provider, deployment, journal, session or named service consumer. - test_container_posture.py:116 ReviewedSourcePostureTests.test_runner_lifecycle_uses_runner_backed_traversal: S: no provider, deployment, journal, session or named service consumer. - test_container_posture.py:142 ReviewedSourcePostureTests.test_fake_docker_rejects_unmodeled_invocations: P: same named method in test_discovery_port.py. - test_container_posture.py:162 ReviewedSourcePostureTests.test_local_image_reference_has_one_canonical_mapping_per_role: S: no provider, deployment, journal, session or named service consumer. - test_container_posture.py:211 ReviewedSourcePostureTests.test_image_identity_resolver_returns_one_exact_local_identity: A: ImmutableBuildInputTests.test_import_admits_one_observed_exact_local_image_identity plus actual baseline inspected-ID/upstream label proof. - test_container_posture.py:235 ReviewedSourcePostureTests.test_image_identity_resolver_explains_unselectable_images: A: unavailable/forged observed ID, malformed saved record, missing/malformed/multiple/wrong baseline upstream label, private inspection failures; rejected before native run or output-directory effects. - test_container_posture.py:289 ReviewedSourcePostureTests.test_image_identity_resolver_preserves_bounded_interruption: A: EngineEnvironmentTests.test_identity_inspection_preserves_bounded_interruption. - test_container_posture.py:319 ReviewedSourcePostureTests.test_runner_image_selection_requires_its_target_label: S: no provider, deployment, journal, session or named service consumer. - test_container_posture.py:365 ReviewedSourcePostureTests.test_localhost_trust_requires_the_explicit_operator_lane: S: no provider, deployment, journal, session or named service consumer. - test_container_posture.py:404 ReviewedSourcePostureTests.test_named_deployment_inventory_is_atomic_and_docker_free: S: no provider, deployment, journal, session or named service consumer. - test_container_posture.py:487 ReviewedSourcePostureTests.test_named_deployment_initialization_is_scoped_and_idempotent: S: no provider, deployment, journal, session or named service consumer. - test_container_posture.py:710 ReviewedSourcePostureTests.test_g01_initialization_retains_one_product_and_rejects_partial_mismatch: S: no provider, deployment, journal, session or named service consumer. - test_container_posture.py:810 machine-specific initialization, three lanes and operator edits: S: no corresponding provider deployment or machine initialization consumer. The source line identifies the method without repeating a private machine name. - test_container_posture.py:883 ReviewedSourcePostureTests.test_saved_product_admission_has_no_default_fallback_or_registry: S: no provider, deployment, journal, session or named service consumer. - test_container_posture.py:920 ReviewedSourcePostureTests.test_named_deployment_status_is_atomic_and_read_only: S: no provider, deployment, journal, session or named service consumer. - test_container_posture.py:1171 ReviewedSourcePostureTests.test_named_deployment_logs_follow_one_owned_container: S: no provider, deployment, journal, session or named service consumer. - test_container_posture.py:1462 ReviewedSourcePostureTests.test_named_deployment_down_preserves_owned_state_and_failure_truth: S: no provider, deployment, journal, session or named service consumer. - test_container_posture.py:1642 ReviewedSourcePostureTests.test_docker_context_is_deny_by_default: P: test_build_context_has_only_reviewed_recursive_exceptions. - test_container_posture.py:1697 ReviewedSourcePostureTests.test_test_image_has_one_pinned_networked_base: A: test_launcher_binds_every_external_base_to_a_full_digest; raw pinned test base and offline ARG-bound builds, no prepared-base consumer. - test_container_posture.py:1747 ReviewedSourcePostureTests.test_production_services_restart_unless_stopped: S: no provider, deployment, journal, session or named service consumer. - test_container_posture.py:1783 ReviewedSourcePostureTests.test_provider_container_keeps_a_narrow_security_boundary: A: runtime kernel checks and offline inference authority; dependency/quality ports own lock/install declaration checks; provider secrets and localhost overlays have no consumer. - test_container_posture.py:1893 ReviewedSourcePostureTests.test_lock_renderer_has_one_narrow_networked_boundary: A: runtime kernel checks and offline inference authority; dependency/quality ports own lock/install declaration checks; provider secrets and localhost overlays have no consumer. - test_image_build_proxy.py:27 ImageBuildProxyInputTests.test_generic_interface_admission_uses_native_lookup: P: exact same method in test_proxy_posture.py; absent owned primitive fails explicitly. - test_image_build_proxy.py:41 ImageBuildProxyInputTests.test_connect_ports_are_admitted_before_socket_use: P: exact same method in test_proxy_posture.py; absent owned primitive fails explicitly. - test_image_build_proxy.py:47 ImageBuildProxyInputTests.test_complete_headers_preserve_the_received_remainder: P: exact same method in test_proxy_posture.py; absent owned primitive fails explicitly. - test_image_build_proxy.py:54 ImageBuildProxyInputTests.test_header_drip_and_late_complete_fragment_do_not_reset_deadline: P: exact same method in test_proxy_posture.py; absent owned primitive fails explicitly. - test_image_build_proxy.py:72 ImageBuildProxyInputTests.test_header_limit_accepts_exact_boundary_and_rejects_one_byte_more: P: exact same method in test_proxy_posture.py; absent owned primitive fails explicitly. - test_image_build_proxy.py:87 ImageBuildProxyInputTests.test_header_limit_excludes_a_coalesced_body_remainder: P: exact same method in test_proxy_posture.py; absent owned primitive fails explicitly. - test_image_build_proxy.py:97 ImageBuildProxyTransportTests.test_dns_binds_device_and_shares_one_query_budget: P: exact same method in test_proxy_posture.py; absent owned primitive fails explicitly. - test_image_build_proxy.py:113 ImageBuildProxyTransportTests.test_dns_rejects_a_reply_for_another_question: P: exact same method in test_proxy_posture.py; absent owned primitive fails explicitly. - test_image_build_proxy.py:120 ImageBuildProxyTransportTests.test_dns_query_deadline_caps_wait_at_three_seconds: P: exact same method in test_proxy_posture.py; absent owned primitive fails explicitly. - test_image_build_proxy.py:133 ImageBuildProxyTransportTests.test_expired_dns_budget_does_not_start_the_next_server: P: exact same method in test_proxy_posture.py; absent owned primitive fails explicitly. - test_image_build_proxy.py:144 ImageBuildProxyTransportTests.test_tcp_binds_device_and_expiry_closes_before_the_next_address: P: exact same method in test_proxy_posture.py; absent owned primitive fails explicitly. - test_image_build_proxy.py:159 ImageBuildProxyTransportTests.test_tcp_tries_next_bound_address_after_an_ordinary_failure: P: exact same method in test_proxy_posture.py; absent owned primitive fails explicitly. - test_image_build_proxy.py:181 ImageBuildProxyTransportTests.test_relay_resets_inactivity_only_after_a_completed_bounded_write: P: exact same method in test_proxy_posture.py; absent owned primitive fails explicitly. - test_image_build_proxy.py:208 ImageBuildProxyTransportTests.test_client_half_close_preserves_the_returning_response: P: exact same method in test_proxy_posture.py; absent owned primitive fails explicitly. - test_image_build_proxy.py:250 ImageBuildProxyWorkerTests.test_overload_does_not_start_a_thread: P: exact same method in test_proxy_posture.py; absent owned primitive fails explicitly. - test_image_build_proxy.py:261 ImageBuildProxyWorkerTests.test_startup_failure_and_thread_completion_restore_capacity: P: exact same method in test_proxy_posture.py; absent owned primitive fails explicitly. - test_image_build_proxy.py:277 ImageBuildProxyWorkerTests.test_private_pre_forwarding_error_has_fixed_http_and_safe_log: P: exact same method in test_proxy_posture.py; absent owned primitive fails explicitly. - test_image_build_proxy.py:287 ImageBuildProxyWorkerTests.test_forwarding_error_does_not_append_http_failure_to_a_tunnel: P: exact same method in test_proxy_posture.py; absent owned primitive fails explicitly. - test_image_build_proxy.py:296 ImageBuildProxyWorkerTests.test_initial_forwarding_write_failure_does_not_append_http_failure: P: exact same method in test_proxy_posture.py; absent owned primitive fails explicitly. - test_image_build_proxy.py:316 ImageBuildProxyWorkerTests.test_readiness_is_private_and_cannot_overwrite_a_file_or_symlink: P: exact same method in test_proxy_posture.py; absent owned primitive fails explicitly. - test_image_build_proxy.py:332 ImageBuildProxyWorkerTests.test_readiness_publication_exposes_only_complete_bytes: P: exact same method in test_proxy_posture.py; absent owned primitive fails explicitly. - test_selected_image_build.py:28 SelectedImageBuildAdmissionTests.test_policy_admits_named_profile_not_literal_override: S/A: host-policy/cache/service authority has no consumer; ambient environment maps to EngineEnvironmentTests; CID admission maps to AcquisitionRetirementTests. - test_selected_image_build.py:38 SelectedImageBuildAdmissionTests.test_policy_rejects_schema_encoding_size_and_unknown_keys_without_disclosure: S/A: host-policy/cache/service authority has no consumer; ambient environment maps to EngineEnvironmentTests; CID admission maps to AcquisitionRetirementTests. - test_selected_image_build.py:52 SelectedImageBuildAdmissionTests.test_policy_rejects_symlink_nonregular_foreign_owner_and_writable_file: S/A: host-policy/cache/service authority has no consumer; ambient environment maps to EngineEnvironmentTests; CID admission maps to AcquisitionRetirementTests. - test_selected_image_build.py:75 SelectedImageBuildAdmissionTests.test_policy_inspection_failure_closes_descriptor_without_disclosure: S/A: host-policy/cache/service authority has no consumer; ambient environment maps to EngineEnvironmentTests; CID admission maps to AcquisitionRetirementTests. - test_selected_image_build.py:85 SelectedImageBuildAdmissionTests.test_docker_environment_excludes_ambient_proxy_context_and_credentials: S/A: host-policy/cache/service authority has no consumer; ambient environment maps to EngineEnvironmentTests; CID admission maps to AcquisitionRetirementTests. - test_selected_image_build.py:98 SelectedImageBuildAdmissionTests.test_cache_identity_uses_physical_checkout_operator_engine_and_builder: S/A: host-policy/cache/service authority has no consumer; ambient environment maps to EngineEnvironmentTests; CID admission maps to AcquisitionRetirementTests. - test_selected_image_build.py:113 SelectedImageBuildAdmissionTests.test_unit_collision_and_old_generation_cannot_authorize_stop: S/A: host-policy/cache/service authority has no consumer; ambient environment maps to EngineEnvironmentTests; CID admission maps to AcquisitionRetirementTests. - test_selected_image_build.py:126 SelectedImageBuildAdmissionTests.test_fence_persists_identity_and_blocks_next_operation_even_without_container: S/A: host-policy/cache/service authority has no consumer; ambient environment maps to EngineEnvironmentTests; CID admission maps to AcquisitionRetirementTests. - test_selected_image_build.py:137 SelectedImageBuildAdmissionTests.test_predispatch_fence_persistence_failure_rolls_back_and_permits_retry: S/A: host-policy/cache/service authority has no consumer; ambient environment maps to EngineEnvironmentTests; CID admission maps to AcquisitionRetirementTests. - test_selected_image_build.py:158 SelectedImageBuildCommandTests.test_success_drains_capped_log_and_closes_descriptors: A: owned native failure/privacy/retirement obligations in NativeCommandPostureTests; no systemd or host-Python owner is fabricated. - test_selected_image_build.py:168 SelectedImageBuildCommandTests.test_capture_returns_complete_evidence_or_rejects_truncated_prefix: A: owned native failure/privacy/retirement obligations in NativeCommandPostureTests; no systemd or host-Python owner is fabricated. - test_selected_image_build.py:178 SelectedImageBuildCommandTests.test_native_failure_keeps_private_output_out_of_diagnostic: A: owned native failure/privacy/retirement obligations in NativeCommandPostureTests; no systemd or host-Python owner is fabricated. - test_selected_image_build.py:188 SelectedImageBuildCommandTests.test_eof_before_child_exit_does_not_bypass_deadline: A: owned native failure/privacy/retirement obligations in NativeCommandPostureTests; no systemd or host-Python owner is fabricated. - test_selected_image_build.py:199 SelectedImageBuildCommandTests.test_exhausted_budget_cannot_dispatch_a_native_command: A: owned native failure/privacy/retirement obligations in NativeCommandPostureTests; no systemd or host-Python owner is fabricated. - test_selected_image_build.py:208 SelectedImageBuildCommandTests.test_failed_leader_and_held_pipe_both_retire_surviving_descendant: A: owned native failure/privacy/retirement obligations in NativeCommandPostureTests; no systemd or host-Python owner is fabricated. - test_selected_image_build.py:231 SelectedImageBuildCommandTests.test_existing_log_cannot_be_overwritten_or_start_a_child: A: owned native failure/privacy/retirement obligations in NativeCommandPostureTests; no systemd or host-Python owner is fabricated. - test_selected_image_build.py:241 SelectedImageBuildCommandTests.test_pipe_close_failure_cannot_retire_an_already_reaped_group: A: owned native failure/privacy/retirement obligations in NativeCommandPostureTests; no systemd or host-Python owner is fabricated. - test_selected_image_build.py:265 SelectedImageBuildCommandTests.test_timeout_retirement_and_pipe_failures_all_survive: A: owned native failure/privacy/retirement obligations in NativeCommandPostureTests; no systemd or host-Python owner is fabricated. - test_selected_image_build.py:307 SelectedImageBuildManagerTests.test_native_argv_is_preserved_without_shell_splitting: S: no systemd, BuilderCache, lease, fence or D-Bus transition consumer; exact container cleanup and retained evidence adapted in AcquisitionRetirementTests. - test_selected_image_build.py:311 SelectedImageBuildManagerTests.test_invalid_signature_cardinality_fields_and_duplicate_keys_cannot_authorize_stop: S: no systemd, BuilderCache, lease, fence or D-Bus transition consumer; exact container cleanup and retained evidence adapted in AcquisitionRetirementTests. - test_selected_image_build.py:334 SelectedImageBuildFenceRollbackTests.test_predispatch_rollback_failure_does_not_claim_fence_removed: S: no systemd, BuilderCache, lease, fence or D-Bus transition consumer; exact container cleanup and retained evidence adapted in AcquisitionRetirementTests. - test_selected_image_build.py:349 SelectedImageBuildFenceRollbackTests.test_predispatch_directory_cleanup_failure_reports_uncertainty_after_unlink: S: no systemd, BuilderCache, lease, fence or D-Bus transition consumer; exact container cleanup and retained evidence adapted in AcquisitionRetirementTests. - test_selected_image_build.py:361 SelectedImageBuildFenceRollbackTests.test_predispatch_rollback_never_deletes_foreign_replacement: S: no systemd, BuilderCache, lease, fence or D-Bus transition consumer; exact container cleanup and retained evidence adapted in AcquisitionRetirementTests. - test_selected_image_build.py:377 SelectedImageBuildFenceRollbackTests.test_invalid_internal_mutation_cannot_create_fence: S: no systemd, BuilderCache, lease, fence or D-Bus transition consumer; exact container cleanup and retained evidence adapted in AcquisitionRetirementTests. - test_selected_image_build.py:390 SelectedImageBuilderCacheTests.test_complete_lifecycle_keeps_one_fence_then_publishes_retirement: S: no systemd, BuilderCache, lease, fence or D-Bus transition consumer; exact container cleanup and retained evidence adapted in AcquisitionRetirementTests. - test_selected_image_build.py:412 SelectedImageBuilderCacheTests.test_separate_open_descriptors_contend_and_reuse_the_same_lease_inode: S: no systemd, BuilderCache, lease, fence or D-Bus transition consumer; exact container cleanup and retained evidence adapted in AcquisitionRetirementTests. - test_selected_image_build.py:425 SelectedImageBuilderCacheTests.test_replaced_lease_cannot_authorize_a_cache_transition: S: no systemd, BuilderCache, lease, fence or D-Bus transition consumer; exact container cleanup and retained evidence adapted in AcquisitionRetirementTests. - test_selected_image_build.py:435 SelectedImageBuilderCacheTests.test_foreign_or_malformed_journal_never_authorizes_a_transition: S: no systemd, BuilderCache, lease, fence or D-Bus transition consumer; exact container cleanup and retained evidence adapted in AcquisitionRetirementTests. - test_selected_image_build.py:452 SelectedImageBuilderCacheTests.test_create_without_admitted_cid_cannot_be_retired_from_absence: S: no systemd, BuilderCache, lease, fence or D-Bus transition consumer; exact container cleanup and retained evidence adapted in AcquisitionRetirementTests. - test_selected_image_build.py:466 SelectedImageBuilderCacheTests.test_atomic_update_failure_preserves_blocking_old_or_updated_state: S: no systemd, BuilderCache, lease, fence or D-Bus transition consumer; exact container cleanup and retained evidence adapted in AcquisitionRetirementTests. - test_selected_image_build.py:483 SelectedImageBuilderCacheTests.test_retired_transition_and_link_publication_can_be_replayed: S: no systemd, BuilderCache, lease, fence or D-Bus transition consumer; exact container cleanup and retained evidence adapted in AcquisitionRetirementTests. - test_selected_image_build.py:503 SelectedImageBuilderCacheTests.test_post_unlink_durability_failure_recovers_from_exact_receipt: S: no systemd, BuilderCache, lease, fence or D-Bus transition consumer; exact container cleanup and retained evidence adapted in AcquisitionRetirementTests. - test_selected_image_build.py:523 SelectedImageBuilderCacheTests.test_conflicting_receipt_keeps_retired_fence_and_foreign_bytes: S: no systemd, BuilderCache, lease, fence or D-Bus transition consumer; exact container cleanup and retained evidence adapted in AcquisitionRetirementTests. - test_selected_image_build.py:642 SelectedImageBuildIntegrationTests.test_complete_worker_cleanup_join_and_capture_disposal: S/A: manager/cache/reconcile records have no consumer; existing acquisition cleanup/failure/CID admission ported in AcquisitionRetirementTests; context retirement in ImmutableBuildInputTests. - test_selected_image_build.py:656 SelectedImageBuildIntegrationTests.test_real_proxy_publishes_readiness_and_is_retired_without_external_traffic: S/A: manager/cache/reconcile records have no consumer; existing acquisition cleanup/failure/CID admission ported in AcquisitionRetirementTests; context retirement in ImmutableBuildInputTests. - test_selected_image_build.py:669 SelectedImageBuildIntegrationTests.test_reservation_reconciliation_joins_frozen_unit_without_rerunning_work: S/A: manager/cache/reconcile records have no consumer; existing acquisition cleanup/failure/CID admission ported in AcquisitionRetirementTests; context retirement in ImmutableBuildInputTests. - test_selected_image_build.py:684 SelectedImageBuildIntegrationTests.test_reconciliation_refuses_unknown_foreign_or_unstoppable_units: S/A: manager/cache/reconcile records have no consumer; existing acquisition cleanup/failure/CID admission ported in AcquisitionRetirementTests; context retirement in ImmutableBuildInputTests. - test_selected_image_build.py:701 SelectedImageBuildIntegrationTests.test_reconciliation_refuses_an_unresolved_container_journal: S/A: manager/cache/reconcile records have no consumer; existing acquisition cleanup/failure/CID admission ported in AcquisitionRetirementTests; context retirement in ImmutableBuildInputTests. - test_selected_image_build.py:711 SelectedImageBuildIntegrationTests.test_early_failure_with_already_empty_cgroup_retires_reservation: S/A: manager/cache/reconcile records have no consumer; existing acquisition cleanup/failure/CID admission ported in AcquisitionRetirementTests; context retirement in ImmutableBuildInputTests. - test_selected_image_build.py:722 SelectedImageBuildIntegrationTests.test_unknown_dispatch_never_infers_join_or_deletes_capture: S/A: manager/cache/reconcile records have no consumer; existing acquisition cleanup/failure/CID admission ported in AcquisitionRetirementTests; context retirement in ImmutableBuildInputTests. - test_selected_image_build.py:734 SelectedImageBuildIntegrationTests.test_worker_failure_and_proxy_retirement_failure_both_survive: S/A: manager/cache/reconcile records have no consumer; existing acquisition cleanup/failure/CID admission ported in AcquisitionRetirementTests; context retirement in ImmutableBuildInputTests. - test_selected_image_build.py:746 SelectedImageBuildIntegrationTests.test_known_worker_failure_survives_service_retirement_failure: S/A: manager/cache/reconcile records have no consumer; existing acquisition cleanup/failure/CID admission ported in AcquisitionRetirementTests; context retirement in ImmutableBuildInputTests. - test_selected_image_build.py:757 SelectedImageBuildIntegrationTests.test_nested_failure_projection_preserves_cancellation_without_private_native_text: S/A: manager/cache/reconcile records have no consumer; existing acquisition cleanup/failure/CID admission ported in AcquisitionRetirementTests; context retirement in ImmutableBuildInputTests. - test_selected_image_build.py:767 SelectedImageBuildIntegrationTests.test_failed_create_intent_cannot_dispatch_create: S/A: manager/cache/reconcile records have no consumer; existing acquisition cleanup/failure/CID admission ported in AcquisitionRetirementTests; context retirement in ImmutableBuildInputTests. - test_selected_image_build.py:777 SelectedImageBuildIntegrationTests.test_empty_cache_needs_own_retirement_before_cleanup_completion: S/A: manager/cache/reconcile records have no consumer; existing acquisition cleanup/failure/CID admission ported in AcquisitionRetirementTests; context retirement in ImmutableBuildInputTests. - test_selected_image_build.py:787 SelectedImageBuildIntegrationTests.test_replayed_cleanup_checks_exact_builder_absence: S/A: manager/cache/reconcile records have no consumer; existing acquisition cleanup/failure/CID admission ported in AcquisitionRetirementTests; context retirement in ImmutableBuildInputTests. - test_selected_image_build.py:795 SelectedImageBuildIntegrationTests.test_finish_never_deletes_unjoined_or_replaced_capture: S/A: manager/cache/reconcile records have no consumer; existing acquisition cleanup/failure/CID admission ported in AcquisitionRetirementTests; context retirement in ImmutableBuildInputTests. - test_selected_image_build.py:808 SelectedImageBuildIntegrationTests.test_operation_disposal_failure_reports_capture_already_removed: S/A: manager/cache/reconcile records have no consumer; existing acquisition cleanup/failure/CID admission ported in AcquisitionRetirementTests; context retirement in ImmutableBuildInputTests. - test_selected_image_build.py:826 SelectedImageBuildIntegrationTests.test_prepare_failure_removes_only_partial_operation: S/A: manager/cache/reconcile records have no consumer; existing acquisition cleanup/failure/CID admission ported in AcquisitionRetirementTests; context retirement in ImmutableBuildInputTests. - test_selected_image_build.py:839 SelectedImageBuildIntegrationTests.test_manager_scalar_evidence_rejects_boolean_wrong_signature_and_duplicate: S/A: manager/cache/reconcile records have no consumer; existing acquisition cleanup/failure/CID admission ported in AcquisitionRetirementTests; context retirement in ImmutableBuildInputTests. - test_selected_image_build.py:847 SelectedImageBuildIntegrationTests.test_stop_command_escapes_specifiers_without_variable_expansion: S/A: manager/cache/reconcile records have no consumer; existing acquisition cleanup/failure/CID admission ported in AcquisitionRetirementTests; context retirement in ImmutableBuildInputTests. - test_selected_image_build.py:853 SelectedImageBuildIntegrationTests.test_export_metadata_is_bounded_and_has_one_immutable_identity: S/A: manager/cache/reconcile records have no consumer; existing acquisition cleanup/failure/CID admission ported in AcquisitionRetirementTests; context retirement in ImmutableBuildInputTests. - test_selected_image_build.py:862 SelectedImageBuildIntegrationTests.test_native_container_admission_accepts_cli_projection_not_extra_grants: S/A: manager/cache/reconcile records have no consumer; existing acquisition cleanup/failure/CID admission ported in AcquisitionRetirementTests; context retirement in ImmutableBuildInputTests. - verify_test_image_build_context.py:16 TestImageBuildContextPostureTests.test_explicit_script_copies_match_dockerignore_allowlist: P: TestImageBuildContextPostureTests.test_explicit_tool_copies_match_dockerignore_allowlist; discovered filename. - test_dependency_lock.py:17 DependencyLockTests.test_write_publishes_only_after_successful_cleanup: A: LockPublicationTests and existing unit publication proofs; no model-release wrapper exists; explicit origin/literal selector proof in OperatorInputTests. - test_runner_lock.py:32 RunnerDeclarationTests.test_runner_inventory_is_generic_deterministic_and_current: S/A: no runner inventory/target/cache/Compose project; existing dependency source/lock ports own exact pins, hashes, input drift and safe installer; LockPublicationTests owns generation transaction. - test_runner_lock.py:62 RunnerDeclarationTests.test_runner_inventory_rejects_malformed_tree_without_partial_output: S/A: no runner inventory/target/cache/Compose project; existing dependency source/lock ports own exact pins, hashes, input drift and safe installer; LockPublicationTests owns generation transaction. - test_runner_lock.py:94 RunnerDeclarationTests.test_every_declaration_and_target_is_complete_and_locked: S/A: no runner inventory/target/cache/Compose project; existing dependency source/lock ports own exact pins, hashes, input drift and safe installer; LockPublicationTests owns generation transaction. - test_runner_lock.py:132 RunnerDeclarationTests.test_shared_installer_cache_canaries_reject_isolation_and_lost_controls: S/A: no runner inventory/target/cache/Compose project; existing dependency source/lock ports own exact pins, hashes, input drift and safe installer; LockPublicationTests owns generation transaction. - test_runner_lock.py:145 RunnerDeclarationTests.test_shared_cache_allows_one_install_and_an_unrelated_cache: S/A: no runner inventory/target/cache/Compose project; existing dependency source/lock ports own exact pins, hashes, input drift and safe installer; LockPublicationTests owns generation transaction. - test_runner_lock.py:154 RunnerDeclarationTests.test_selector_script_rejects_invalid_values_before_docker: S/A: no runner inventory/target/cache/Compose project; existing dependency source/lock ports own exact pins, hashes, input drift and safe installer; LockPublicationTests owns generation transaction. - test_runner_lock.py:169 RunnerDeclarationTests.test_write_is_atomic_and_check_is_non_mutating: S/A: no runner inventory/target/cache/Compose project; existing dependency source/lock ports own exact pins, hashes, input drift and safe installer; LockPublicationTests owns generation transaction. - test_runner_lock.py:305 RunnerDeclarationTests.test_invalid_existing_lock_fails_before_docker: S/A: no runner inventory/target/cache/Compose project; existing dependency source/lock ports own exact pins, hashes, input drift and safe installer; LockPublicationTests owns generation transaction. - test_runner_lock.py:338 RunnerDeclarationTests.test_compose_drift_prevents_publication: S/A: no runner inventory/target/cache/Compose project; existing dependency source/lock ports own exact pins, hashes, input drift and safe installer; LockPublicationTests owns generation transaction. - test_runner_lock.py:358 RunnerDeclarationTests.test_symlinked_target_input_fails_before_docker: S/A: no runner inventory/target/cache/Compose project; existing dependency source/lock ports own exact pins, hashes, input drift and safe installer; LockPublicationTests owns generation transaction. - test_runner_lock.py:374 RunnerDeclarationTests.test_compose_project_identity_is_checkout_scoped: S/A: no runner inventory/target/cache/Compose project; existing dependency source/lock ports own exact pins, hashes, input drift and safe installer; LockPublicationTests owns generation transaction. - test_checkpoint_release.py:23 CheckpointReleasePublicationTests.test_model_wrappers_project_their_make_inputs: A: LockPublicationTests and existing unit publication proofs; no model-release wrapper exists; explicit origin/literal selector proof in OperatorInputTests. - test_checkpoint_release.py:78 CheckpointReleasePublicationTests.test_model_wrappers_reject_unowned_write_inputs: A: LockPublicationTests and existing unit publication proofs; no model-release wrapper exists; explicit origin/literal selector proof in OperatorInputTests. - test_checkpoint_release.py:126 CheckpointReleasePublicationTests.test_predecessor_cleanup_failure_keeps_the_verified_new_release: A: LockPublicationTests and existing unit publication proofs; no model-release wrapper exists; explicit origin/literal selector proof in OperatorInputTests. - test_checkpoint_release.py:221 CheckpointReleasePublicationTests.test_precommit_failures_restore_the_predecessor: A: LockPublicationTests and existing unit publication proofs; no model-release wrapper exists; explicit origin/literal selector proof in OperatorInputTests. - test_magnet_closure.py:18 MagnetClosurePublicationTests.test_missing_wrapper_fetch_hint_fails_before_changing_publication: S/A: no copied Magnet closure publisher or wrapper fetch hint; existing source submodule preflight is networkless, immutable inference context is checked; unit artifact/wheelhouse publication retains equivalent commit/failure boundaries. - test_magnet_closure.py:39 MagnetClosurePublicationTests.test_missing_revision_uses_owned_fetch_hint_without_changing_publication: S/A: no copied Magnet closure publisher or wrapper fetch hint; existing source submodule preflight is networkless, immutable inference context is checked; unit artifact/wheelhouse publication retains equivalent commit/failure boundaries. - test_magnet_closure.py:62 MagnetClosurePublicationTests.test_failed_first_install_leaves_no_partial_publication: S/A: no copied Magnet closure publisher or wrapper fetch hint; existing source submodule preflight is networkless, immutable inference context is checked; unit artifact/wheelhouse publication retains equivalent commit/failure boundaries. - test_magnet_closure.py:74 MagnetClosurePublicationTests.test_preinstall_failure_restores_the_predecessor: S/A: no copied Magnet closure publisher or wrapper fetch hint; existing source submodule preflight is networkless, immutable inference context is checked; unit artifact/wheelhouse publication retains equivalent commit/failure boundaries. - test_magnet_closure.py:90 MagnetClosurePublicationTests.test_predecessor_cleanup_failure_keeps_the_committed_closure: S/A: no copied Magnet closure publisher or wrapper fetch hint; existing source submodule preflight is networkless, immutable inference context is checked; unit artifact/wheelhouse publication retains equivalent commit/failure boundaries. - test_magnet_closure.py:106 MagnetClosurePublicationTests.test_manifest_publication_uncertainty_is_completed_by_a_rerun: S/A: no copied Magnet closure publisher or wrapper fetch hint; existing source submodule preflight is networkless, immutable inference context is checked; unit artifact/wheelhouse publication retains equivalent commit/failure boundaries. - test_operator_git_posture.py:17 OperatorGitPostureTests.test_shared_preflight_never_fetches: S/A: no shared sourced operator-Git library or closure wrappers; OperatorInputTests.test_source_preflight_never_fetches_or_updates_upstream preserves real consumer no-fetch assertion. - test_operator_git_posture.py:27 OperatorGitPostureTests.test_sourced_library_locals_are_namespaced: S/A: no shared sourced operator-Git library or closure wrappers; OperatorInputTests.test_source_preflight_never_fetches_or_updates_upstream preserves real consumer no-fetch assertion. - test_operator_git_posture.py:43 OperatorGitPostureTests.test_external_revision_consumers_delegate_to_shared_preflight: S/A: no shared sourced operator-Git library or closure wrappers; OperatorInputTests.test_source_preflight_never_fetches_or_updates_upstream preserves real consumer no-fetch assertion. - test_operator_git_posture.py:68 OperatorGitPostureTests.test_closure_wrappers_own_the_remediation_branch: S/A: no shared sourced operator-Git library or closure wrappers; OperatorInputTests.test_source_preflight_never_fetches_or_updates_upstream preserves real consumer no-fetch assertion. - test_unittest_runner.py:11 UnittestRunnerTests.test_empty_discovery_is_failure: P: UnittestRunnerTests.test_empty_discovery_is_failure. - test_journal_inspection.py:64 JournalReaderSelectionTests.test_saved_and_explicit_reader_choices_never_default_or_change_identity: S: no provider, deployment, journal, session or named service consumer. - test_journal_inspection.py:110 JournalReaderSelectionTests.test_reader_input_rejects_ambient_and_effectful_actions_before_dispatch: S: no provider, deployment, journal, session or named service consumer. - test_journal_inspection.py:130 JournalInspectionTests.test_owned_stopped_inventory_has_only_readonly_volume_authority: S: no provider, deployment, journal, session or named service consumer. - test_journal_inspection.py:151 JournalInspectionTests.test_foreign_running_and_malformed_inventory_reject_before_run: S: no provider, deployment, journal, session or named service consumer. - test_journal_inspection.py:169 JournalInspectionTests.test_malformed_image_output_is_not_forwarded: S: no provider, deployment, journal, session or named service consumer. - test_journal_inspection.py:178 JournalInspectionTests.test_timeout_removes_only_owned_inspection_container: S: no provider, deployment, journal, session or named service consumer. - test_journal_inspection.py:202 JournalInspectionTests.test_cleanup_uncertainty_retains_original_failure_and_operator_handoff: S: no provider, deployment, journal, session or named service consumer. - test_journal_inspection.py:238 JournalArchiveWrapperTests.test_archive_mounts_only_selected_api_authority_and_writable_journal: S: no provider, deployment, journal, session or named service consumer. - test_journal_inspection.py:268 JournalArchiveWrapperTests.test_archive_observer_failure_reports_uncertainty_after_exact_cleanup: S: no provider, deployment, journal, session or named service consumer. - test_journal_inspection.py:296 JournalArchiveWrapperTests.test_archive_failure_forwards_only_closed_owned_diagnostic: S: no provider, deployment, journal, session or named service consumer. - test_journal_inspection.py:314 JournalArchiveWrapperTests.test_archive_cause_survives_cleanup_failure_without_forwarding_raw_output: S: no provider, deployment, journal, session or named service consumer. - test_g01_runner_composition.py:39 G01RunnerCompositionTests.test_activation_failure_closes_the_constructed_owner: S: no provider, deployment, journal, session or named service consumer. - test_g01_runner_composition.py:55 G01RunnerCompositionTests.test_declared_volume_exposes_the_worker_socket_at_the_binding_path: S: no provider, deployment, journal, session or named service consumer. - test_g01_runner_composition.py:66 G01RunnerCompositionTests.test_one_session_sends_all_eighteen_inputs_and_closes: S: no provider, deployment, journal, session or named service consumer. - test_g01_runner_composition.py:92 G01RunnerCompositionTests.test_valid_correspondence_drift_fails_without_success_or_private_output: S: no provider, deployment, journal, session or named service consumer. - test_g01_runner_composition.py:108 G01RunnerCompositionTests.test_execution_failure_is_not_success_or_loaded_rejection: S: no provider, deployment, journal, session or named service consumer. - test_g01_runner_composition.py:116 G01RunnerCompositionTests.test_cleanup_omission_is_not_hidden_by_fixture_cleanup: S: no provider, deployment, journal, session or named service consumer. - test_g01_runner_composition.py:122 G01RunnerCompositionTests.test_incomplete_wrong_limit_or_private_rejection_cannot_certify_the_native_reason: S: no provider, deployment, journal, session or named service consumer. - test_g01_runner_composition.py:250 G01RunnerShellDiagnosticsTests.test_g01_failure_cleanup_never_publishes_participant_logs: S: no provider, deployment, journal, session or named service consumer. - test_g01_runner_composition.py:281 G01RunnerShellDiagnosticsTests.test_terminal_replay_render_keeps_the_opt_in_journal_reader: S: no provider, deployment, journal, session or named service consumer. - test_g01_runner_composition.py:306 G01RunnerShellDiagnosticsTests.test_terminal_replay_prediction_count_gate_does_not_publish_logs: S: no provider, deployment, journal, session or named service consumer. - test_g01_runner_composition.py:326 G01RunnerShellDiagnosticsTests.test_recovery_retirement_requires_matching_terminal_and_private_fault_evidence: S: no provider, deployment, journal, session or named service consumer. - test_g01_runner_composition.py:368 G01RunnerShellDiagnosticsTests.test_only_explicit_check_argument_selects_the_diagnostic_worker: S: no provider, deployment, journal, session or named service consumer. - test_g01_runner_composition.py:397 G01RunnerShellDiagnosticsTests.test_unknown_or_extra_launcher_arguments_stop_before_execution: S: no provider, deployment, journal, session or named service consumer. - test_g01_runner_composition.py:412 G01RunnerShellDiagnosticsTests.test_device_and_each_budget_stop_before_python_execution: S: no provider, deployment, journal, session or named service consumer. - test_g01_runner_composition.py:429 G01RunnerShellDiagnosticsTests.test_missing_component_prevents_the_supplied_command: S: no provider, deployment, journal, session or named service consumer.

Shell checks with multiple assertions rather than unittest methods

Important limits and preserved exceptions

This raw Python suite cannot inspect the built inference image; its runtime proof is about its own reviewed test lane. Source context checks do not claim that the engine actually excluded an arbitrary future canary. Immutable captured build context is required by a red behavioral launcher test. Public source files are deliberately mounted read-only by the coordinator; no private .work/.git or credential source is needed by this suite.

Magnet permits only its exact recursive contexts. NMRNet permits upstream uninmr Python files (including their directories), installed runtime source, a separately hashed Uni-Core source archive and the explicit CPU Torch wheel intent. These are not allowances for arbitrary model artifacts, secrets or source installers. Magnet UV cache policy is conditional on a real UV installer. Its rootless builder alone has reviewed seccomp/AppArmor/systempaths/executable-tmpfs/host-network exceptions; NMRNet has no such builder consumer and inherits no exception.

Expected production reds must be discussed before production repairs: unbound DNS and missing proxy protocol/resource/privacy controls; raw empty discovery; ambient engine/auth/proxy state; mutable authored build context; reclassified inspection cancellation; malformed CID used for effects; ambient ARCHIVE/STAGE and literal ARCHIVE expansion; partial lock/advisory generation replacement. GNU Make absence is a contained-tool prerequisite failure, not evidence of a production selector defect. No production behavior repair or dependency install is included. The coordinator expanded checker-runner read-only public grants, caller identity inputs and root-entry metadata cleanup plumbing.

Additional Magnet source at 81db52dd6d2edc3a7a426cf9d71b505804342ad1

test_dependency_layers.py: final-stage nonroot USER, verified wheelhouse-before-install, preserving parent packages through install rather than sync, and wheelhouse acquisition without lock generation map to DependencyLayerChecks in test_build_magnet_layers_port.py. Layer manifest ambiguity and graph/delta arithmetic have no layered dependency manifest/full/delta consumer in NMRNet; no fake layer hierarchy is created.

test_docker_build_contexts.py: complete exact rule tuples map to DockerBuildContextChecks. Both local ignore files have an independent full reviewed tuple; extra non-tool leaf admissions fail, and a synthetic private requirements leaf proves this detector.

check_rendered_compose.py: NativeRenderedAuthorityChecks inspects actual offline run/build argv for namespace, userns, pull, OOM, shm, restart, dropped capabilities, security options, resource/swap bounds, devices/ports/sysctls/ulimits, network, bind propagation, relabel/recursive write/socket grants, tmpfs flags, build authority/context. Known-bad added grants prove each corresponding detector group. Source-specific Compose service/project inventories, named network/volume identities, hook declarations, proxy-gate depends_on topology, dataset init CHOWN exception and service-image additional contexts have no local Compose consumer. NMRNet's verified local wheelhouse additional context is checked as its exact exception. Layer-specific 65532 final-stage identity remains literal and can be red for the existing root-default lock image even though its runtime overrides caller UID.

The native grant probe executes seven current offline consumers: unit and repository lanes, inference import, package apply, wheelhouse check, baseline prepare and baseline run. Each asserts exactly one /tmp grant with its current lane size ceiling (64 MiB, 256 MiB or 1 GiB); missing size, oversize and extra tmpfs mutation cases fail. Resource bounds are adapted to explicit reviewed target profiles: checks use 512 MiB, import/apply/prepare use 2 GiB, and baseline run uses 4 GiB; memory swap may not exceed each target's memory limit. This preserves the original finite-bound assertion without assigning the scientific run another lane's budget. Networked acquisition/proxy live routing and actual inference image contents remain outside this offline fake-engine probe.

Current local port count: 86 test methods in seven discovered root test modules, including three selector regressions and the two CID regressions added below. Methods contain distinct adversarial subcases and are not counted per subcase.

Two additional local regression methods follow defects found during the CID adaptation audit, under the user's instruction to add repository checks when new issues appear. AcquisitionRetirementTests rejects a full valid stdout ID whose private receipt adds NUL, for both proxy and worker; no unadmitted ID may start or authorize removal, and malformed bytes remain as evidence. A second method corrupts the typed receipt only after the worker attach client is running, then sends SIGTERM: status143 and uncertain container evidence must survive, without removal through a corrupted ID, while the exact owned client is retired and joined. The harness deadline performs failed-probe cleanup only. Its fake engine never reaches an engine socket or network; NUL is written by a controlled byte flag, not placed in an environment string. The pinned exact-identity and compound-retirement source references are beside both new regression methods.