zara-shell: reject non-finite runtime bounds #151

New issue

Closed

opened 2026-09-08 02:03:05 +00:00 by nsaspy · 0 comments

nsaspy commented

2026-09-08 02:03:05 +00:00

Owner

Problem

CommandPolicy.max_runtime_seconds currently checks only <= 0. IEEE NaN and positive infinity bypass that check. They can therefore turn the shell deadline into invalid/unbounded timing behavior, violating #5's hard runtime bound.

Required behavior

deterministic RED for NaN and positive infinity;
require max_runtime_seconds to be a finite positive number;
preserve existing timeout/process-group teardown behavior;
focused shell tests, registry compatibility and generated Nix/package gates green.

This is local to zara-shell; explicit cancellation remains separately blocked on Zara Core #388.

## Problem `CommandPolicy.max_runtime_seconds` currently checks only `<= 0`. IEEE `NaN` and positive infinity bypass that check. They can therefore turn the shell deadline into invalid/unbounded timing behavior, violating #5's hard runtime bound. ## Required behavior - deterministic RED for `NaN` and positive infinity; - require `max_runtime_seconds` to be a finite positive number; - preserve existing timeout/process-group teardown behavior; - focused shell tests, registry compatibility and generated Nix/package gates green. This is local to `zara-shell`; explicit cancellation remains separately blocked on Zara Core #388.

nsaspy closed this issue

2026-09-08 02:03:05 +00:00