This commit is contained in:
@@ -0,0 +1,21 @@
|
||||
# Phase 1.0AS: offline channel primitive and FD ownership audit
|
||||
|
||||
Status: `PIPE_POLL_CANDIDATES_PRESENT_FD_INHERITANCE_AND_HARD_DEADLINE_BLOCKED`
|
||||
|
||||
Date: 2026-07-29
|
||||
|
||||
Current official SDK declarations and shsrv call sites make `pipe` and `poll`
|
||||
public-source candidates. The shsrv telnet loop uses a short relative poll, but
|
||||
does not compose it with an absolute monotonic deadline, EINTR budget
|
||||
recalculation or bounded worker reap.
|
||||
|
||||
The decisive ownership mismatch is in worker creation. The official header
|
||||
defines `RFFDG` as copying the descriptor table and `RFCFDG` as closing every
|
||||
descriptor. Current shsrv workers use `RFCFDG`; a pre-created result pipe would
|
||||
therefore not be inherited. No reviewed worker path uses `RFFDG` with exclusive
|
||||
parent/child pipe-end closure or close-on-exec handling.
|
||||
|
||||
Headers alone do not prove that a new composition is safe on firmware 9.60.
|
||||
The next phase may model FD acquisition, inheritance, close ordering, EINTR and
|
||||
an absolute deadline using fake operations only. No live channel, target source,
|
||||
build or device action is authorized.
|
||||
Reference in New Issue
Block a user