tractor/ai/prompt-io
Gud Boi 4e1c1f7a27 Verify inherited network namespace entry
Add private `enter_netns()` bootstrap validation before actor runtime
integration.

Deats,
- verify the inherited FD against its expected namespace inode
- constrain `setns()` to Linux network namespaces
- verify `/proc/self/ns/net` after the entry syscall
- leave inherited FD ownership to the future spawn caller
- exercise guards with real FDs and unprivileged syscall fakes

Prompt-IO: ai/prompt-io/opencode/20260827T232500Z_d067505a_prompt_io.md

(this patch was generated in some part by `opencode` using `gpt-5.6-sol` (`openai`))
2026-09-01 18:03:35 -04:00
..
claude Pin tpt prompt provenance to immutable refs 2026-08-31 12:27:23 -04:00
opencode Verify inherited network namespace entry 2026-09-01 18:03:35 -04:00
prompts Add `tractor.to_actor` one-shot task API subpkg 2026-08-21 15:03:34 -04:00