mara/hyperhive
mara/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

swarm-builder: an agent option whose eval failed is left out of the reply, not read as its default

Browse source
This commit is contained in:
atlas 2026-11-06 10:03:18 +01:00 • committed by mara
commit 5d2b0c9a54
1 changed files with 340 additions and 158 deletions
Download patch file Download diff file Expand all files Collapse all files

9
docs/trust-boundary/security.md
View file

@ -211,12 +211,15 @@ the option from the evaluated config into the agent's closure record
flags and sends the mode to hive-priv, and the flags apply at the container's
next start.
- A record or builder from before the field reads `host`.
- An agent whose module doesn't declare the option reads `host`. When the builder
can't read the option (its eval fails or times out), the record carries no
mode, and so does a record or builder from before the field. hive-c0re then
sends no mode, and hive-priv keeps what the container's last write chose.
- A mode this build doesn't know (a record written by a newer swarm) reads as
`none`, never `host`: an agent that asked for a mode its hive can't give gets
no builds, not builds outside its limits.
- A record hive-c0re can't read, or none, sends no mode, and hive-priv keeps
what the container's last write chose.
- A record hive-c0re can't read, or none, sends no mode either, and hive-priv
keeps what the container's last write chose.
- A hive-c0re or hive-priv from before the option ignores it, so the agent keeps
host builds until you upgrade both.