redhat-et / redhat-et/ProtoBot
Define and test the Job Site sandbox contract
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 5
- Forks
- 6
- Avg merge
- 23h 24m
- Merged PRs (30d)
- 66
Description
Scope
Turn the backend-neutral execution and sandbox requirements into an acceptance contract that a local adapter, Fullsend/OpenShell adapter, or future backend must pass.
Cover filesystem and Git-object isolation, per-executable and per-destination network policy, credential non-exposure, cleanup, cancellation, resource limits, and audit evidence. A failed backend must disable autonomous execution rather than weaken policy.
Dependencies
- Projection isolation fixtures.
- Current Job Site and sandbox design in
docs/architecture/components.mdanddocs/architecture/related-work.md.
Acceptance criteria
- The contract has executable positive and negative tests.
- The local test adapter passes without requiring a cluster.
- Fullsend/OpenShell integration points are mapped without making them ProtoBot control-plane dependencies.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Read docs/architecture/components.md and docs/architecture/related-work.md first, then review the projection isolation fixtures and the current Job Site and sandbox design. Define executable positive and negative tests for isolation, network policy, credentials, cleanup, cancellation, limits, and audit evidence using a local adapter without a cluster. Confirm Fullsend/OpenShell integration points and that backend failure disables autonomous execution rather than weakening policy.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- backend, security, testing
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100