22 lines
1.1 KiB
Markdown
22 lines
1.1 KiB
Markdown
# Phase 1.0AS: offline channel primitive and FD ownership audit
|
|
|
|
Status: `PIPE_POLL_CANDIDATES_PRESENT_FD_INHERITANCE_AND_HARD_DEADLINE_BLOCKED`
|
|
|
|
Date: 2026-07-29
|
|
|
|
Current official SDK declarations and shsrv call sites make `pipe` and `poll`
|
|
public-source candidates. The shsrv telnet loop uses a short relative poll, but
|
|
does not compose it with an absolute monotonic deadline, EINTR budget
|
|
recalculation or bounded worker reap.
|
|
|
|
The decisive ownership mismatch is in worker creation. The official header
|
|
defines `RFFDG` as copying the descriptor table and `RFCFDG` as closing every
|
|
descriptor. Current shsrv workers use `RFCFDG`; a pre-created result pipe would
|
|
therefore not be inherited. No reviewed worker path uses `RFFDG` with exclusive
|
|
parent/child pipe-end closure or close-on-exec handling.
|
|
|
|
Headers alone do not prove that a new composition is safe on firmware 9.60.
|
|
The next phase may model FD acquisition, inheritance, close ordering, EINTR and
|
|
an absolute deadline using fake operations only. No live channel, target source,
|
|
build or device action is authorized.
|