Capture: supervise operation-scoped mitmdump lifecycle #69

Closed

nsaspy wants to merge 8 commits from hackmode-rage-hackpert/135-capture-supervisor into master

nsaspy commented

2026-09-04 20:36:57 +00:00

Owner

Implements the first bounded provider/runtime slice of #135.

RED: test-only head 5844cf44eb844bf553d33e5bb37b54218c14954c failed common-lisp-core in the ASDF test step while monorepo and the repository boundary passed.

GREEN before the follow-up design correction: head 7f8ed32706db25081a700085a05c1756298d99ae passed core, monorepo, and repository-boundary workflows.

The implementation provides typed operation/capture/spool/process lifecycle state, injected process execution for deterministic tests, bounded restart exhaustion, explicit stop, stable capture-session identity, and inspectable spawn failures. It does not write Tek9, KB state, or StarIntel and does not introduce active target probing.

Follow-up correction on current head 82cd179b2cb33f7e6b83880b076e0932b174de47:

removes the IPX design requirement for HTTP secret/header redaction and replaces it with a lossless, operation-scoped evidence invariant;
requires exact captured HTTP values/body bytes to remain retrievable, while bounded projections may use stable references;
separates promotion/export authority from capture fidelity rather than mutating source evidence;
adds an AGENTS.md regression ledger and explicit bans on agent-invented lossy capture, silent capability narrowing, lossy canonical-data substitution, hidden filters, and false completion;
records this IPX redaction regression and requires future operator-identified agent regressions to be fixed and recorded in the same change.

No workflow runs are reported yet for the new head, so the earlier GREEN claim applies only to 7f8ed32706db25081a700085a05c1756298d99ae until CI evaluates the current head.

Replaces draft #146 because GitHub's ready-for-review mutation failed in the connector.

Implements the first bounded provider/runtime slice of #135. RED: test-only head `5844cf44eb844bf553d33e5bb37b54218c14954c` failed `common-lisp-core` in the ASDF test step while monorepo and the repository boundary passed. GREEN before the follow-up design correction: head `7f8ed32706db25081a700085a05c1756298d99ae` passed core, monorepo, and repository-boundary workflows. The implementation provides typed operation/capture/spool/process lifecycle state, injected process execution for deterministic tests, bounded restart exhaustion, explicit stop, stable capture-session identity, and inspectable spawn failures. It does not write Tek9, KB state, or StarIntel and does not introduce active target probing. Follow-up correction on current head `82cd179b2cb33f7e6b83880b076e0932b174de47`: - removes the IPX design requirement for HTTP secret/header redaction and replaces it with a lossless, operation-scoped evidence invariant; - requires exact captured HTTP values/body bytes to remain retrievable, while bounded projections may use stable references; - separates promotion/export authority from capture fidelity rather than mutating source evidence; - adds an `AGENTS.md` regression ledger and explicit bans on agent-invented lossy capture, silent capability narrowing, lossy canonical-data substitution, hidden filters, and false completion; - records this IPX redaction regression and requires future operator-identified agent regressions to be fixed and recorded in the same change. No workflow runs are reported yet for the new head, so the earlier GREEN claim applies only to `7f8ed32706db25081a700085a05c1756298d99ae` until CI evaluates the current head. Replaces draft #146 because GitHub's ready-for-review mutation failed in the connector.

nsaspy added 8 commits

2026-09-04 20:36:57 +00:00