Lane D: agent isolation delivery and handoff

[mchwang]

Owner: Codex Lane D implementation task. Baseline: 5eec4b5 (remote main). Build step 5 foundation; T1, T2, isolation portion of T9. Ordered PRs: D1 invocation contract and isolated clone; D2 restricted pinned container and startup probes; D3 vendor egress and phase enforcement; D4 adapters and bounded settlement; D5 combined real-Docker gate. No runner/store/UI rewiring.

D1 branch: codex/agent-isolation-d1. Exact files: agents/contract.ts, git/clone.ts, test/agent-contract.test.ts, test/agent-clone.test.ts. No overlap with PR #23. Done when: npx vitest run test/agent-contract.test.ts test/agent-clone.test.ts and npm run typecheck pass, then full unit validation on the pushed head.

Interface: immutable clone identity and trusted committed head; invocation includes phase, exact approved argv, finite deadline, attempt ID and captured context/version. Planning/questions cannot grant commands. Cancellation requests and process termination are distinct; terminal results preserve original reason and exit status. F owns current-context admission/publication and persisted compare-and-swap. D1 creates a staging clone only; D2 must relocate metadata onto a separate runner-owned filesystem and allocate bounded work storage before invocation. D1 never launches agents.

D1 dependencies: none. D2-D5 follow validated predecessor tasks on documented prerequisite branches if not yet merged. F and G production invocation remain blocked until D5 merges. Detailed evidence and review rounds will be recorded in each PR.

[mchwang]

D1 implemented in PR #31 at validated head 489066e. Targeted tests: 24 passed; full unit suite: 214 passed; typecheck passed. Both push and PR CI are green, including browser tests. Copilot review is pending; no merge authorization has been given.

Next-step preflight: Docker Desktop server 27.4.0 is running (overlay2/extfs). Local CLIs report codex-cli 0.153.4 and Claude Code 2.1.281; these are observations, not selected image pins. Codex auth file is present. CLAUDE_CODE_OAUTH_TOKEN and ANTHROPIC_API_KEY are absent; no credential contents were read or published. The planned authenticated Claude container startup probe requires a locally configured setup-token. User input requested for that credential dependency. D2-D5 are not marked complete; no mock probe or skipped authentication check will count as acceptance.

[mchwang]

D1 review round 1 complete: fixed both inline findings and reproduced/fixed summary validation and deadline concerns. All four have failing-before/passing-after regressions. Current validated head: d110d81. Current results: 28 targeted tests, 218 unit tests, typecheck, and both CI runs pass; review round 2 is pending. Both inline threads are resolved. PR #31 records the review-lesson audit. No merge performed. Authenticated Claude container-probe credential remains unavailable, so D2-D5 remain pending rather than being represented as validated.

[mchwang]

D1 review loop converged in two Copilot rounds. Round 1 fixes have failing-before/passing-after regressions; round 2 returned Findings: None and confirmed resolved inline findings. Its unsupported-Windows overview concern was reproduced with win32.relative and deferred to #36, consistent with the plan scope. Current head d110d81: 28 targeted / 218 unit / 39 browser tests pass, typecheck passes, both CI runs green, mergeable, zero unresolved threads. Review-lesson audit is in PR #31. No merge performed.

Stopped at the authenticated container-probe credential dependency: no Claude setup-token is available to this task. D2-D5 remain unimplemented and no claims of container/network/adapter isolation are made. Configure CLAUDE_CODE_OAUTH_TOKEN locally (do not paste a credential into an issue/chat), then resume D2 on a documented prerequisite branch from #31 or merged main. Original checkout is untouched; D1 worktree is /Users/maxhwang/github/codeboost-lane-d1 on codex/agent-isolation-d1.