kevinveenbirkenbachandClaude Opus 5 b182c032ac fix(web-app-docs): assert the seal's mode bits instead of the kernel's refusal ...

The prepared tree is reused through hardlinks, so its files share inodes and a build writing a source file in place would rewrite the cache for every later reuse. _seal drops their write bits to make that a loud failure, and the test proved it by expecting a PermissionError on a write.

pytest runs as root in the test container, and root writes through missing write bits, so the test failed there while passing on a host. It now asserts st_mode & 0o222 == 0, which is what _seal actually does and holds for any user, and keeps the write attempt as an enforcement probe that is skipped under root rather than reported as a defect.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-10-06 00:21:53 +02:00

..

cli

fix(merge): repair what the main merge left broken

2026-10-04 03:21:09 +02:00

group_vars

…

library

…

plugins

fix(gpu): decide GPU acceleration in one lookup instead of at every call site

2026-10-05 17:45:00 +02:00

roles

fix(web-app-docs): assert the seal's mode bits instead of the kernel's refusal

2026-10-06 00:21:53 +02:00

scripts

fix(ci): limit the fingerprint shortcut to branches of this repository

2026-10-05 03:06:57 +02:00

utils

Merge branch 'main' into feature/store-i18n

2026-10-05 22:25:40 +02:00

__init__.py

…