Teknium 141cc0dbc8 eval(core-tool-deferral): keep agents' crontab and HOME writes inside the run sandbox (#132314) ...

The worker isolated HERMES_HOME only. The longrange_backup_pipeline task
("schedule it nightly at 2am") let agents run the operator's real crontab
and write into the real ~/.hermes: a past battery left three nightly cron
jobs and two scripts behind on the host, pointing into deleted run dirs.

sandbox.isolate_host turns on the product's own TERMINAL_HOME_MODE=profile
contract, points the worker's HOME at the same profile home (in-process
~ expansion for write_file), puts a file-backed crontab shim first on PATH
and unsets the systemd user bus. README quickstart drops its /tmp paths.

2026-10-03 09:57:41 -07:00

..

__init__.py

…

test_codebase_navigability.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

test_compaction_jev_arm.py

…

test_core_tool_deferral_sandbox.py

eval(core-tool-deferral): keep agents' crontab and HOME writes inside the run sandbox (#132314)

2026-10-03 09:57:41 -07:00