feat: release Dever 0.1.5 with direct workers and long transactions

test/ci/ignored.json

@@ -1,24 +1,8 @@
 [
-  {
-    "source": "test/dever-sandbox-tests/isolation.rs",
-    "name": "unprivileged_launcher_probe",
-    "reason": "internal non-root launcher probe, invoked by enforces_unprivileged_namespace",
-    "stage": "probe",
-    "package": "dever-sandbox",
-    "target": "isolation"
-  },
-  {
-    "source": "test/dever-sandbox-tests/trusted_helper.rs",
-    "name": "rejects_untrusted_helper_paths_bytes_modes_owners_and_capabilities",
-    "reason": "requires root and the prepared static author bwrap; touches only owned target files",
-    "stage": "sandbox",
-    "package": "dever-sandbox",
-    "target": "dever_sandbox"
-  },
   {
     "source": "test/native_runtime_link.rs",
     "name": "canonical_c_header_links_and_executes_the_real_runtime_archive",
-    "reason": "build runtime-abi-only staticlib in target/native-runtime-abi before running",
+    "reason": "requires an explicit runtime-only DEVER_RUNTIME_ABI_ARCHIVE",
     "stage": "native",
     "package": "dever-backend-bridge",
     "target": "native_runtime_link"
@@ -26,7 +10,7 @@
   {
     "source": "test/native_runtime_link.rs",
     "name": "llvm_object_calls_the_versioned_runtime_abi_without_rust_layouts",
-    "reason": "build runtime-abi-only staticlib in target/native-runtime-abi before running",
+    "reason": "requires an explicit runtime-only DEVER_RUNTIME_ABI_ARCHIVE",
     "stage": "native",
     "package": "dever-backend-bridge",
     "target": "native_runtime_link"
@@ -34,7 +18,7 @@
   {
     "source": "test/native_runtime_link.rs",
     "name": "protocol_poll_rejects_invalid_output_before_advancing_the_operation",
-    "reason": "build runtime-abi-only staticlib in target/native-runtime-abi before running",
+    "reason": "requires an explicit runtime-only DEVER_RUNTIME_ABI_ARCHIVE",
     "stage": "native",
     "package": "dever-backend-bridge",
     "target": "native_runtime_link"
@@ -42,7 +26,7 @@
   {
     "source": "test/native_runtime_link.rs",
     "name": "logger_flush_is_a_stable_native_allocation_barrier",
-    "reason": "build runtime-abi-only staticlib in target/native-runtime-abi before running",
+    "reason": "requires an explicit runtime-only DEVER_RUNTIME_ABI_ARCHIVE",
     "stage": "native",
     "package": "dever-backend-bridge",
     "target": "native_runtime_link"
@@ -50,7 +34,7 @@
   {
     "source": "test/native_runtime_link.rs",
     "name": "wire_codecs_validate_slots_before_callback_and_release_partial_values",
-    "reason": "build runtime-abi-only staticlib in target/native-runtime-abi before running",
+    "reason": "requires an explicit runtime-only DEVER_RUNTIME_ABI_ARCHIVE",
     "stage": "native",
     "package": "dever-backend-bridge",
     "target": "native_runtime_link"
@@ -58,7 +42,7 @@
   {
     "source": "test/native_runtime_link.rs",
     "name": "database_abi_preserves_typed_owners_and_rejects_invalid_slots_without_io",
-    "reason": "build a runtime-sqlite or runtime-postgres staticlib in target/native-runtime-abi before running",
+    "reason": "requires a runtime-sqlite or runtime-postgres DEVER_RUNTIME_ABI_ARCHIVE",
     "stage": "native",
     "package": "dever-backend-bridge",
     "target": "native_runtime_link"
@@ -641,8 +625,8 @@
   },
   {
     "source": "test/llvm_job_test_source.rs",
-    "name": "timed_out_job_drains_children_and_rolls_back_before_retry",
-    "reason": "requires explicit runtime archive; bounded task cancellation inside owned SQLite transactions",
+    "name": "timed_out_job_drains_children_and_preserves_committed_stages",
+    "reason": "requires explicit runtime archive; bounded cancellation between committed SQLite stages",
     "stage": "native",
     "package": "dever-backend-bridge",
     "target": "llvm_job_test_source"
@@ -1287,110 +1271,6 @@
     "package": "dever-backend-bridge",
     "target": "llvm_application_source"
   },
-  {
-    "source": "test/dever-sandbox-tests/isolation.rs",
-    "name": "enforces_files_network_process_and_threads",
-    "reason": "requires explicitly prepared target/sandbox-inputs assets; owns only test processes",
-    "stage": "sandbox",
-    "package": "dever-sandbox",
-    "target": "isolation"
-  },
-  {
-    "source": "test/dever-sandbox-tests/isolation.rs",
-    "name": "pins_grants_against_directory_replacement",
-    "reason": "requires explicitly prepared sandbox assets; mutates only owned fixture paths",
-    "stage": "sandbox",
-    "package": "dever-sandbox",
-    "target": "isolation"
-  },
-  {
-    "source": "test/dever-sandbox-tests/isolation.rs",
-    "name": "pinned_grant_probe",
-    "reason": "internal sandbox descriptor-pinning probe",
-    "stage": "probe",
-    "package": "dever-sandbox",
-    "target": "isolation"
-  },
-  {
-    "source": "test/dever-sandbox-tests/isolation.rs",
-    "name": "rejects_writable_aliases_of_executable_inputs",
-    "reason": "requires explicitly prepared sandbox assets",
-    "stage": "sandbox",
-    "package": "dever-sandbox",
-    "target": "isolation"
-  },
-  {
-    "source": "test/dever-sandbox-tests/isolation.rs",
-    "name": "prepared_python_and_node_run_without_host_files_or_process_creation",
-    "reason": "requires explicitly prepared signed-release Python/Node inputs and sandbox assets",
-    "stage": "sandbox",
-    "package": "dever-sandbox",
-    "target": "isolation"
-  },
-  {
-    "source": "test/dever-sandbox-tests/isolation.rs",
-    "name": "enforces_unprivileged_namespace",
-    "reason": "requires explicitly prepared assets and host permission for unprivileged user namespaces",
-    "stage": "sandbox",
-    "package": "dever-sandbox",
-    "target": "isolation"
-  },
-  {
-    "source": "test/dever-sandbox-tests/isolation.rs",
-    "name": "restricted_probe",
-    "reason": "internal sandbox probe, invoked only inside an owned namespace",
-    "stage": "probe",
-    "package": "dever-sandbox",
-    "target": "isolation"
-  },
-  {
-    "source": "test/dever-sandbox-tests/isolation.rs",
-    "name": "terminates_detached_descendants_on_kill",
-    "reason": "requires explicitly prepared assets; kills only this test's namespace",
-    "stage": "sandbox",
-    "package": "dever-sandbox",
-    "target": "isolation"
-  },
-  {
-    "source": "test/dever-sandbox-tests/isolation.rs",
-    "name": "tree_probe",
-    "reason": "internal sandbox process-tree probe",
-    "stage": "probe",
-    "package": "dever-sandbox",
-    "target": "isolation"
-  },
-  {
-    "source": "test/dever-sandbox-tests/isolation.rs",
-    "name": "descendant_probe",
-    "reason": "internal sandbox descendant probe",
-    "stage": "probe",
-    "package": "dever-sandbox",
-    "target": "isolation"
-  },
-  {
-    "source": "test/dever-sandbox-tests/isolation.rs",
-    "name": "granted_probe",
-    "reason": "internal sandbox probe, invoked only inside an owned namespace",
-    "stage": "probe",
-    "package": "dever-sandbox",
-    "target": "isolation"
-  },
-  {
-    "source": "test/dever-sandbox-tests/isolation.rs",
-    "name": "rejects_missing_dependency_before_host_loader_can_supply_it",
-    "reason": "requires explicitly prepared target/sandbox-inputs assets",
-    "stage": "sandbox",
-    "package": "dever-sandbox",
-    "target": "isolation"
-  },
-  {
-    "source": "test/dever-sandbox-tests/isolation.rs",
-    "name": "kernel_rejects_namespace_ptrace_and_truncated_ioctl_requests",
-    "reason": "requires explicit assets and the prepared C syscall probe",
-    "stage": "sandbox",
-    "package": "dever-sandbox",
-    "target": "isolation"
-  },
   {
     "source": "test/dever-cli-tests/llvm_cli.rs",
     "name": "default_llvm_runs_builds_moves_and_reuses_cache_without_host_toolchain",
@@ -1442,14 +1322,14 @@
   {
     "source": "test/dever-cli-tests/external_workers.rs",
     "name": "compiles_go_worker_with_locked_tools_and_runs_without_source_or_go",
-    "reason": "requires explicit Go runtime pack, official UUID proof/archive and sandbox assets",
+    "reason": "requires explicit Go runtime pack, official UUID proof/archive and process_runtime assets",
     "stage": "native",
     "package": "dever-cli",
     "target": "external_workers"
   },
   {
     "source": "test/dever-cli-tests/external_workers.rs",
-    "name": "runs_official_native_python_wheel_in_sandbox",
+    "name": "runs_official_native_python_wheel_as_managed_worker",
     "reason": "requires the explicit official native-wheel and complete Python runtime fixture at target/python-managed",
     "stage": "native",
     "package": "dever-cli",
@@ -1457,7 +1337,7 @@
   },
   {
     "source": "test/dever-cli-tests/external_workers.rs",
-    "name": "runs_official_python_source_build_in_sandbox",
+    "name": "runs_official_python_source_build_as_managed_worker",
     "reason": "requires explicitly prepared official PEP517 source build at target/source-build",
     "stage": "native",
     "package": "dever-cli",
@@ -1538,7 +1418,7 @@
   {
     "source": "test/dever-tests/tests/external_resources.rs",
     "name": "packaged_exec_runs_without_source_worker_or_inherited_environment",
-    "reason": "requires explicitly prepared sandbox assets and the private Rust bootstrap compiler",
+    "reason": "requires explicitly prepared process_runtime assets and the private Rust bootstrap compiler",
     "stage": "native",
     "package": "dever-tests",
     "target": "external_resources"
@@ -1623,6 +1503,14 @@
     "package": "dever-cli",
     "target": "native_release"
   },
+  {
+    "source": "test/dever-cli-tests/native_release/ecosystem_acceptance.rs",
+    "name": "signed_zero_lib_ecosystems_run_and_build_in_the_current_container",
+    "reason": "requires explicit native and zero-Lib ecosystem packs; uses an owned root installation and daemon",
+    "stage": "native",
+    "package": "dever-cli",
+    "target": "native_release"
+  },
   {
     "source": "test/dever-cli-tests/native_release/ecosystem_acceptance.rs",
     "name": "signed_ecosystems_build_and_run_without_system_language_installations",
@@ -1698,7 +1586,7 @@
   {
     "source": "test/dever-cli-tests/external_libs/npm_build.rs",
     "name": "builds_official_npm_addon_with_locked_lifecycle",
-    "reason": "explicit official npm native source build; network only in registry resolver, never in lifecycle sandbox",
+    "reason": "explicit official npm native source build; network only in registry resolver, never in lifecycle process_runtime",
     "stage": "author",
     "package": "dever-cli",
     "target": "external_libs"
@@ -1734,5 +1622,93 @@
     "stage": "author",
     "package": "dever-cli",
     "target": "external_libs"
+  },
+  {
+    "source": "test/dever-process-tests/execution.rs",
+    "name": "direct_child_probe",
+    "reason": "internal direct-process probe",
+    "stage": "probe",
+    "package": "dever-process",
+    "target": "execution"
+  },
+  {
+    "source": "test/dever-cli-tests/external_workers/ffi.rs",
+    "name": "real_c_abi_packages_compiles_and_checks_the_generated_protocol",
+    "reason": "requires explicit DEVER_FFI_CC, DEVER_PROCESS_RUNTIME inputs",
+    "stage": "native",
+    "package": "dever-cli",
+    "target": "external_workers"
+  },
+  {
+    "source": "test/dever-cli-tests/external_workers/ffi.rs",
+    "name": "real_c_abi_direct_worker_errors_deadlines_and_cancellation",
+    "reason": "requires explicit DEVER_FFI_CC and DEVER_PROCESS_RUNTIME inputs",
+    "stage": "native",
+    "package": "dever-cli",
+    "target": "external_workers"
+  },
+  {
+    "source": "test/dever-cli-tests/llvm_cli.rs",
+    "name": "llvm_test_controls_preserve_indices_prefix_boundaries_and_timeout_continuation",
+    "reason": "requires an explicitly prepared runtime pack adjacent to CARGO_BIN_EXE_dever; owned short-lived cases only",
+    "stage": "native",
+    "package": "dever-cli",
+    "target": "llvm_cli"
+  },
+  {
+    "source": "test/dever-cli-tests/native_release/command_acceptance.rs",
+    "name": "signed_cli_runs_and_packages_ordinary_command_with_private_library",
+    "reason": "requires explicit current runtime archive, author C/LLVM inputs and owned daemon/process_runtime",
+    "stage": "native",
+    "package": "dever-cli",
+    "target": "native_release"
+  },
+  {
+    "source": "test/dever-cli-tests/native_release/cross_acceptance.rs",
+    "name": "signed_host_compiler_builds_arm_profiles_and_runs_standalone_under_qemu",
+    "reason": "requires prepared x86/ARM four-profile runtime archives and private QEMU; starts only an owned daemon",
+    "stage": "native",
+    "package": "dever-cli",
+    "target": "native_release"
+  },
+  {
+    "source": "test/dever-cli-tests/native_release/cross_ecosystems.rs",
+    "name": "signed_arm_ecosystems_build_offline_standalone_apps_for_system_guest",
+    "reason": "requires explicit ARM runtimes/dependencies/process_runtime and native archives; builds with an owned host daemon and exports apps for ARM system QEMU",
+    "stage": "native",
+    "package": "dever-cli",
+    "target": "native_release"
+  },
+  {
+    "source": "test/dever-cli-tests/native_release/cross_ecosystems.rs",
+    "name": "signed_arm_python_worker_rebuilds_with_current_sdk",
+    "reason": "requires explicit ARM inputs; rebuilds only Python for SDK shutdown regression under the ARM guest",
+    "stage": "native",
+    "package": "dever-cli",
+    "target": "native_release"
+  },
+  {
+    "source": "test/dever-cli-tests/shared_toolchain.rs",
+    "name": "active_skill_is_readable_by_other_machine_users_without_install_lock_access",
+    "reason": "requires root; drops only an owned skill client to an unprivileged uid",
+    "stage": "native",
+    "package": "dever-cli",
+    "target": "shared_toolchain"
+  },
+  {
+    "source": "test/llvm_database_source.rs",
+    "name": "sqlite_long_command_preserves_commit_on_encoding_failure",
+    "reason": "requires explicit runtime archive; committed long-entry SQLite stages",
+    "stage": "native",
+    "package": "dever-backend-bridge",
+    "target": "llvm_database_source"
+  },
+  {
+    "source": "test/llvm_external_source.rs",
+    "name": "command_binary_io_and_exit_status_use_real_typed_llvm_calls",
+    "reason": "requires fresh runtime-external archive, command-fixture and process_runtime assets",
+    "stage": "native",
+    "package": "dever-backend-bridge",
+    "target": "llvm_external_source"
   }
 ]