Gladex Agent Logs

   ctl_copy() { # <name> — a fresh copy of the two directories the census reads
     local d="$CTL/$1"
+    # (bd) — REFUSE a symlinked source. `cp -a` implies `-d` (`--no-dereference`),
+    # so `cp -a <symlink> "$d/tools"` copies the LINK, not the bytes: `$d/tools`
+    # then resolves straight back to the live tools/ and every K-plant below
+    # (`printf '…setsid sleep 1' >> "$d/tools/budget-show"`, `ctl_replace` on
+    # `$d/tests/…`) writes through into the real tree. Run 793 lost four live
+    # tools to exactly this (`git status` caught `M tools/…`; restored
+    # byte-identically, never committed) — this is the guard that incident asked
+    # for. Measured 2026-10-08 on coreutils 9.4: `cp -a <symlink> dst` leaves
+    # `test -L dst` true and the append lands in the symlink's target, while
+    # `cp -a <symlink>/. dst` copies bytes — which is why the two `cp -a
+    # "$REPO/tools/."` sites elsewhere in tests/ are safe by construction and
+    # these two (bare, no trailing `/.`) are not.
+    # A bare `return 1` would NOT be a guard: all eighteen callers ignore our
+    # status, so the section would go on planting into a tree that was never
+    # created and print dozens of reds whose single cause is this refusal.
+    # Hence the suite's own refusal idiom (see `registry not found`, above):
+    # name the cause, exit 1 — tools/REGISTRY.md documents rc 1 as "a refusal
+    # is never a green run".
+    if [ -L "$TOOLS_DIR" ] || [ -L "$TESTS_DIR" ]; then
+      fail "ctl_copy refused: $TOOLS_DIR or $TESTS_DIR is a SYMLINK — cp -a would copy the link, not the bytes, and the K-plants would write through to the live tree"
+      exit 1
+    fi
     rm -rf "$d"; mkdir -p "$d" || return 1
     cp -a "$TESTS_DIR" "$d/tests" || return 1
     cp -a "$TOOLS_DIR" "$d/tools" || return 1
   }

← Edit repo/tools/REGISTRY.md
Index: repo/tools/REGISTRY.md
===================================================================
--- repo/tools/REGISTRY.md
+++ repo/tools/REGISTRY.md
@@ -5893,9 +5893,9 @@
 ```
 
 **Exit codes**:
 - `0` - all 155 assertions pass
-- `1` - one or more assertions failed, the registry is absent, or the sandbox could not be created (a refusal is never a green run)
+- `1` - one or more assertions failed, the registry is absent, the sandbox could not be created, or `ctl_copy` refused a symlinked `tests/` / `tools/` source (a refusal is never a green run)
 
 **Hermeticity**: no network, no live service, no runtime state — only the
 committed text of `tools/` (what a census is of) and the fixtures under a
 `mktemp -d` sandbox (`detchild.*`) that a `trap` removes. Every fixture child

> build · mimo-v2.6-flash-free
$ set -e
H=/tmp/opencode/probe797bd
bash -n /data/repo/tests/test_detached_children.sh && echo "bash -n OK (edited)"
echo "=== guard present? ==="; grep -n 'ctl_copy refused' /data/repo/tests/test_detached_children.sh
echo "=== pure insertion? diffstat vs pristine ==="
diff /data/repo/tests/test_detached_children.sh "$H/pristine/tests/test_detached_children.sh" | grep -c '^<' || true
echo "(lines removed from pristine = should be 0)"
echo "=== git status ==="; git -C /data/repo status --porcelain

# rebuild mirrors pristine + layouts with the EDITED suite bytes
rm -rf "$H/mirror_tools" "$H/mirror_tests"
cp -a "$H/pristine/tools" "$H/mirror_tools"
cp -a "$H/pristine/tests"  "$H/mirror_tests"
md5sum "$H/mirror_tools/budget-show" "$H/mirror_tools/version-check" "$H/mirror_tools/regression-run" "$H/mirror_tools/go-compile-drift-verify" > "$H/mirror_tools.before.md5"
md5sum "$H/mirror_tests/test_detached_children.sh" > "$H/mirror_tests.before.md5"

mklayout() {
  L="$H/layout_$1"; rm -rf "$L"; mkdir -p "$L"
  if [ "$3" = link ]; then ln -s "$H/mirror_tests"  "$L/tests"
  else cp -a /data/repo/tests "$L/tests"; fi
  if [ "$2" = link ]; then ln -s "$H/mirror_tools"  "$L/tools"
  else cp -a "$H/pristine/tools" "$L/tools"; fi
}
mklayout ctrl  real real
mklayout toolsplant link real
mklayout testsplant real link
for L in ctrl toolsplant testsplant; do
  echo "layout_$L suite md5 : $(md5sum <"$H/layout_$L/tests/test_detached_children.sh")  (repo: $(md5sum </data/repo/tests/test_detached_children.sh))"
done
ls -la "$H/layout_toolsplant" "$H/layout_testsplant" | grep -E "tests|tools"
bash -n OK (edited)
=== guard present? ===
1028:      fail "ctl_copy refused: $TOOLS_DIR or $TESTS_DIR is a SYMLINK — cp -a would copy the link, not the bytes, and the K-plants would write through to the live tree"
=== pure insertion? diffstat vs pristine ===
22
(lines removed from pristine = should be 0)
=== git status ===
 M tests/test_detached_children.sh
 M tools/REGISTRY.md
layout_ctrl suite md5 : fe717cd43c068b019c106dd2cd57e532  -  (repo: fe717cd43c068b019c106dd2cd57e532  -)
layout_toolsplant suite md5 : fe717cd43c068b019c106dd2cd57e532  -  (repo: fe717cd43c068b019c106dd2cd57e532  -)
layout_testsplant suite md5 : ee6601adc5c674cf50c606aa7a7fcad3  -  (repo: fe717cd43c068b019c106dd2cd57e532  -)
/tmp/opencode/probe797bd/layout_testsplant:
lrwxrwxrwx  1 root root   37 Oct  8 15:15 tests -> /tmp/opencode/probe797bd/mirror_tests
drwxr-xr-x  3 root root 4096 Oct  8 11:14 tools
/tmp/opencode/probe797bd/layout_toolsplant:
drwxr-xr-x  2 root root 4096 Oct  8 05:41 tests
lrwxrwxrwx  1 root root   37 Oct  8 15:15 tools -> /tmp/opencode/probe797bd/mirror_tools
> build · mimo-v2.6-flash-free
Caught a harness error of mine: `mirror_tests` still holds the **pre-fix** suite, and that is the file the `testsplant` layout executes. Rebuilding it from the edited bytes:
$ set -e
H=/tmp/opencode/probe797bd
echo "=== pure insertion? ( '>' = lines removed from the pre-fix file, must be 0 ) ==="
echo "added: $(diff "$H/pristine/tests/test_detached_children.sh" /data/repo/tests/test_detached_children.sh | grep -c '^<' || true)"
echo "removed: $(diff "$H/pristine/tests/test_detached_children.sh" /data/repo/tests/test_detached_children.sh | grep -c '^>' || true)"

# mirror_tests must carry the EDITED suite: in the testsplant layout it IS the file that runs
rm -rf "$H/mirror_tests"
cp -a /data/repo/tests "$H/mirror_tests"
md5sum "$H/mirror_tests/test_detached_children.sh" > "$H/mirror_tests.before.md5"
for L in ctrl toolsplant testsplant; do
  echo "layout_$L suite md5 : $(md5sum <"$H/layout_$L/tests/test_detached_children.sh")"
done
echo "repo                 : $(md5sum </data/repo/tests/test_detached_children.sh)"
=== pure insertion? ( '>' = lines removed from the pre-fix file, must be 0 ) ===
added: 0
removed: 22
layout_ctrl suite md5 : fe717cd43c068b019c106dd2cd57e532  -
layout_toolsplant suite md5 : fe717cd43c068b019c106dd2cd57e532  -
layout_testsplant suite md5 : fe717cd43c068b019c106dd2cd57e532  -
repo                 : fe717cd43c068b019c106dd2cd57e532  -
> build · mimo-v2.6-flash-free
Pure insertion confirmed (**0 lines removed, 22 added**), all three layouts carry the edited bytes. Launching the **post-fix** runs:
$ H=/tmp/opencode/probe797bd
OUT=/tmp/opencode/probe797bd/driver_post.log
{
  set -u
  echo "repo suite md5 : $(md5sum </data/repo/tests/test_detached_children.sh)"
  for R in ctrl toolsplant testsplant; do
    echo "########## POST-FIX RUN $R start $(date -u +%H:%M:%S)"
    start=$(date +%s)
    bash "$H/layout_$R/tests/test_detached_children.sh" > "$H/runs/${R}_post.out" 2>&1
    rc=$?
    echo "POST-FIX RUN $R rc=$rc wall=$(( $(date +%s) - start ))s"
    tail -4 "$H/runs/${R}_post.out"
    echo "-- reds --"
    grep '^FAIL:' "$H/runs/${R}_post.out" || echo "(none)"
    echo "-- mirror integrity (must ALL be OK) --"
    md5sum -c "$H/mirror_tools.before.md5" 2>&1 | sed 's/^/  tools /'
    md5sum -c "$H/mirror_tests.before.md5" 2>&1 | sed 's/^/  tests /'
    echo "-- repo git status --"
    git -C /data/repo status --porcelain | sed 's/^/  /' || true
  done
  echo "ALL POST DONE $(date -u +%H:%M:%S)"
} > "$OUT" 2>&1
echo launched
Command moved to the background (shell ID: sh_11ba821ee0016mh60TIyxQPz0V).
Output is streaming to: /root/.local/share/opencode/shell/fa3e85b2145a60c127b5c9261e76a7ba6d520299/sh_11ba821ee0016mh60TIyxQPz0V.out
> build · mimo-v2.6-flash-free
$ mv /driver.log /tmp/opencode/probe797bd/driver_pre.log 2>&1 && echo "moved stray /driver.log into the probe dir"; ls -la /driver.log 2>&1 | head -2
moved stray /driver.log into the probe dir
ls: cannot access '/driver.log': No such file or directory
$ cd /data/repo && echo "=== bare cp -a of a possibly-symlinked dir, across tools/ + app/ + tests/ ==="; grep -rn 'cp -a ' tools/ app/ tests/ --include='*.sh' --include='*.php' --include='*.go' 2>/dev/null | grep -v '"/\."' | head -25; echo "=== count with trailing /. (safe shape) ==="; grep -rn 'cp -a .*"/\."' tools/ app/ tests/ 2>/dev/null | wc -l
=== bare cp -a of a possibly-symlinked dir, across tools/ + app/ + tests/ ===
tests/test_detached_children.sh:1010:    # so `cp -a <symlink> "$d/tools"` copies the LINK, not the bytes: `$d/tools`
tests/test_detached_children.sh:1016:    # for. Measured 2026-10-08 on coreutils 9.4: `cp -a <symlink> dst` leaves
tests/test_detached_children.sh:1018:    # `cp -a <symlink>/. dst` copies bytes — which is why the two `cp -a
tests/test_detached_children.sh:1028:      fail "ctl_copy refused: $TOOLS_DIR or $TESTS_DIR is a SYMLINK — cp -a would copy the link, not the bytes, and the K-plants would write through to the live tree"
tests/test_detached_children.sh:1032:    cp -a "$TESTS_DIR" "$d/tests" || return 1
tests/test_detached_children.sh:1033:    cp -a "$TOOLS_DIR" "$d/tools" || return 1
tests/test_regression_run.sh:525:# path — a control's `cp -a tests tools` copy, deliberately without .git —
tests/test_regression_run.sh:601:cp -a "$TESTS_DIR" "$ISO/tests"
tests/test_regression_run.sh:602:cp -a "$REPO/tools" "$ISO/tools"
tests/test_system_status_staged.sh:345:cp -a "$REPO/tools/." "$SANDBOX/tools/"
tests/test_system_status_investor_duty.sh:391:cp -a "$REPO/tools/." "$SANDBOX/tools/"
=== count with trailing /. (safe shape) ===
0
> build · mimo-v2.6-flash-free
Post-fix runs are executing. Let me verify the guard's safety properties while waiting:
$ cd /data/repo && echo "=== set mode (set -e would make fail() abort) ==="; grep -n "^set " tests/test_detached_children.sh; echo "=== fail() defined at top level, before ctl_copy runs ==="; grep -n "^fail()\|^ok()\|ctl_copy()" tests/test_detached_children.sh; echo "=== healthy path: is the guard reachable in a normal repo run? ==="; for p in /data/repo/tests /data/repo/tools; do printf "  %s symlink? %s\n" "$p" "$([ -L "$p" ] && echo YES || echo no)"; done
=== set mode (set -e would make fail() abort) ===
106:set -u
=== fail() defined at top level, before ctl_copy runs ===
117:ok()   { PASS=$((PASS + 1)); echo "PASS: $1"; }
118:fail() { FAIL=$((FAIL + 1)); echo "FAIL: $1"; }
1007:  ctl_copy() { # <name> — a fresh copy of the two directories the census reads
=== healthy path: is the guard reachable in a normal repo run? ===
  /data/repo/tests symlink? no
  /data/repo/tools symlink? no
> build · mimo-v2.6-flash-free
$ cd /data/repo && time bash tests/test_queue_source.sh > /tmp/opencode/probe797bd/runs/qsrc_pre.out 2>&1; echo "rc=$?"; tail -3 /tmp/opencode/probe797bd/runs/qsrc_pre.out
real	0m10.998s
user	0m8.085s
sys	0m3.105s
rc=0
===============================
queue-source-check suite: 278 passed, 0 failed
===============================
> build · mimo-v2.6-flash-free
Baseline gates captured (`test_queue_source` 278/0, `test_registry_coverage` 464/0, in-tree suite 155/0). Waiting for the post-fix runs to complete.
$ sleep 1; echo "waiting for post-fix driver (sh_11ba821ee0016mh60TIyxQPz0V)"
waiting for post-fix driver (sh_11ba821ee0016mh60TIyxQPz0V)
> build · mimo-v2.6-flash-free
**Status so far (queue item (bd)):**

- **STEP 0 paid first, owed nothing** — `inbox-status` rc 0, **0/0 unread, 80/80/0 open**, all `INBOX.md` entries `HANDLED`. No row written; **production 0.4.28** (never 0.4.29).
- **Mechanism measured** (coreutils 9.4): `cp -a <symlink> dst` → `test -L dst` true, append writes through to the target; `cp -a <symlink>/. dst` → real dir, target untouched.
- **Pre-fix, out of tree:** control **155/0 rc 0** (layout faithful) → `tools/` symlink **133/22 rc 1 with 4 live tools written through** (exactly run 793's four) → `tests/` symlink **121/34 rc 1 with the live suite file itself rewritten, 1404 → 501 lines, `DETCHILD_CONTROLS` guard gone, `bash -n` failing**.
- **Guard written** (pure insertion, 22 lines, 0 removed) into `ctl_copy`, plus the `tools/REGISTRY.md` exit-code line.

Post-fix control + both refusal runs are in flight.
exit=0

Select another run log from the list above. Only files matching run-YYYYMMDD-HHMMSS-N.log are readable.

[Thu Oct  8 15:16:03 2026] 127.0.0.1:59960 Accepted
[Thu Oct  8 15:16:04 2026] 127.0.0.1:59960 Closing
[Thu Oct  8 15:16:04 2026] 127.0.0.1:59968 Accepted
[Thu Oct  8 15:16:04 2026] 127.0.0.1:59968 Closing
[Thu Oct  8 15:30:11 2026] 127.0.0.1:56078 Accepted
[Thu Oct  8 15:30:11 2026] 127.0.0.1:56078 Closing
[Thu Oct  8 15:30:11 2026] 127.0.0.1:56080 Accepted
[Thu Oct  8 15:30:11 2026] 127.0.0.1:56080 Closing
[Thu Oct  8 15:30:11 2026] 127.0.0.1:56088 Accepted
[Thu Oct  8 15:30:11 2026] 127.0.0.1:56088 Closing
[Thu Oct  8 15:30:11 2026] 127.0.0.1:56102 Accepted
[Thu Oct  8 15:30:11 2026] 127.0.0.1:56102 Closing
[Thu Oct  8 15:30:11 2026] 127.0.0.1:56112 Accepted
[Thu Oct  8 15:30:11 2026] 127.0.0.1:56112 Closing
[Thu Oct  8 15:30:11 2026] 127.0.0.1:56124 Accepted
[Thu Oct  8 15:30:11 2026] 127.0.0.1:56124 Closing
[Thu Oct  8 15:30:11 2026] 127.0.0.1:56134 Accepted
[Thu Oct  8 15:30:12 2026] 127.0.0.1:56134 Closing
[Thu Oct  8 15:30:12 2026] 127.0.0.1:56136 Accepted
[Thu Oct  8 15:30:12 2026] 127.0.0.1:56136 Closing
[Thu Oct  8 15:30:12 2026] 127.0.0.1:56144 Accepted
[Thu Oct  8 15:30:12 2026] 127.0.0.1:56144 Closing
[Thu Oct  8 15:30:12 2026] 127.0.0.1:56154 Accepted
[Thu Oct  8 15:30:12 2026] 127.0.0.1:56154 Closing
[Thu Oct  8 15:30:41 2026] 127.0.0.1:43680 Accepted
[Thu Oct  8 15:30:41 2026] 127.0.0.1:43680 Closed without sending a request; it was probably just an unused speculative preconnection
[Thu Oct  8 15:30:41 2026] 127.0.0.1:43680 Closing
[Thu Oct  8 15:30:43 2026] 127.0.0.1:43694 Accepted
[Thu Oct  8 15:30:43 2026] 127.0.0.1:43694 Closed without sending a request; it was probably just an unused speculative preconnection
[Thu Oct  8 15:30:43 2026] 127.0.0.1:43694 Closing
[Thu Oct  8 15:31:03 2026] 127.0.0.1:58850 Accepted
[Thu Oct  8 15:31:03 2026] 127.0.0.1:58850 Closing
[Thu Oct  8 15:31:03 2026] 127.0.0.1:58860 Accepted
[Thu Oct  8 15:31:03 2026] 127.0.0.1:58860 Closing
[Thu Oct  8 15:31:03 2026] 127.0.0.1:58874 Accepted
[Thu Oct  8 15:31:03 2026] 127.0.0.1:58874 Closing
[Thu Oct  8 15:31:03 2026] 127.0.0.1:58880 Accepted
[Thu Oct  8 15:31:03 2026] 127.0.0.1:58880 Closing
[Thu Oct  8 15:31:03 2026] 127.0.0.1:58884 Accepted
[Thu Oct  8 15:31:03 2026] 127.0.0.1:58884 Closing
[Thu Oct  8 15:31:03 2026] 127.0.0.1:58896 Accepted
[Thu Oct  8 15:31:03 2026] 127.0.0.1:58896 Closing
[Thu Oct  8 15:31:03 2026] 127.0.0.1:58902 Accepted
[Thu Oct  8 15:31:04 2026] 127.0.0.1:58902 Closing
[Thu Oct  8 15:31:04 2026] 127.0.0.1:58906 Accepted
[Thu Oct  8 15:31:04 2026] 127.0.0.1:58906 Closing
[Thu Oct  8 15:31:04 2026] 127.0.0.1:58920 Accepted
[Thu Oct  8 15:31:04 2026] 127.0.0.1:58920 Closing
[Thu Oct  8 15:31:04 2026] 127.0.0.1:58928 Accepted
[Thu Oct  8 15:31:04 2026] 127.0.0.1:58928 Closing
[Thu Oct  8 15:31:23 2026] 127.0.0.1:44984 Accepted
[Thu Oct  8 15:31:23 2026] 127.0.0.1:44984 Closed without sending a request; it was probably just an unused speculative preconnection
[Thu Oct  8 15:31:23 2026] 127.0.0.1:44984 Closing
[Thu Oct  8 15:31:25 2026] 127.0.0.1:55124 Accepted
[Thu Oct  8 15:31:25 2026] 127.0.0.1:55124 Closed without sending a request; it was probably just an unused speculative preconnection
[Thu Oct  8 15:31:25 2026] 127.0.0.1:55124 Closing
[Thu Oct  8 15:31:38 2026] 127.0.0.1:46970 Accepted
[Thu Oct  8 15:31:38 2026] 127.0.0.1:46970 Closing
[Thu Oct  8 15:31:39 2026] 127.0.0.1:46974 Accepted