zara-coding: fence symbolic task-state process after protocol integrity failure #163

New issue

Closed

opened 2026-09-08 02:03:06 +00:00 by nsaspy · 0 comments

nsaspy commented

2026-09-08 02:03:06 +00:00

Owner

Problem

TaskStateSession rejects oversized, malformed JSON, malformed-shape and unknown-status responses, but those failures can leave the same owned SWI-Prolog process alive. In particular, readline(MAX_RESPONSE_CHARS + 1) on an oversized line can leave unread tail bytes in stdout; a later request can then consume stale protocol bytes and mis-associate responses with commands.

Required slice

deterministic RED proving a protocol-integrity failure terminates/fences the owned process and no later operation reuses or silently replaces it;
fence on oversized response, malformed JSON/shape and unknown response status;
preserve ordinary canonical ok / rejected responses;
explicit stop() remains the deliberate reset boundary;
full compatibility, registry/plugin Nix and package gates.

Advances #1 locally without Core #400 composition.

## Problem `TaskStateSession` rejects oversized, malformed JSON, malformed-shape and unknown-status responses, but those failures can leave the same owned SWI-Prolog process alive. In particular, `readline(MAX_RESPONSE_CHARS + 1)` on an oversized line can leave unread tail bytes in stdout; a later request can then consume stale protocol bytes and mis-associate responses with commands. ## Required slice - deterministic RED proving a protocol-integrity failure terminates/fences the owned process and no later operation reuses or silently replaces it; - fence on oversized response, malformed JSON/shape and unknown response status; - preserve ordinary canonical `ok` / `rejected` responses; - explicit `stop()` remains the deliberate reset boundary; - full compatibility, registry/plugin Nix and package gates. Advances #1 locally without Core #400 composition.

nsaspy closed this issue

2026-09-08 02:03:06 +00:00

nsaspy referenced this issue

2026-09-08 02:19:43 +00:00

registry: bind catalog URLs to canonical source #400