Programs gate: credential-safe live-grid smoke harness and completeness audit #97

New Issue

hugo · 2026-08-08T08:24:36Z

hugo commented

2026-08-08 08:24:36 +00:00

Objective

Create the final opt-in live-grid validation workflow and prove every sample/tool target is implemented.

Deliverables

Add one shared smoke configuration for grid URI and secret-sourced credentials.
Record sanitized login/caps/simulator, IM/chat, movement/teleport, inventory reversible folder operation, object properties, asset/texture download, and clean logout evidence.
Audit all nine original programs plus every TestClient command against the source manifest.
Keep spending, uploads, deletion, estate/parcel changes, and effects on other users behind separate explicit flags.

Validation

All program offline/fake tests pass.
Opt-in dedicated-account smoke succeeds on a configured compatible grid.
Program/source completeness is 100%, logs contain no secrets, and workspace release-feature gates pass.

Prerequisite

The library behavior required by the program is implemented and its translated parity tests pass.

Project constraints

Programs must use the native Rust public API; no CLR, C# process, bridge, RPC, or fallback.
Provide deterministic offline/fake validation before opt-in live or device tests.
Never log/store credentials or capability tokens, and keep destructive/spending actions separately opt-in.
Update program/source completeness, docs, and workspace validation evidence.

## Objective Create the final opt-in live-grid validation workflow and prove every sample/tool target is implemented. ## Deliverables - Add one shared smoke configuration for grid URI and secret-sourced credentials. - Record sanitized login/caps/simulator, IM/chat, movement/teleport, inventory reversible folder operation, object properties, asset/texture download, and clean logout evidence. - Audit all nine original programs plus every TestClient command against the source manifest. - Keep spending, uploads, deletion, estate/parcel changes, and effects on other users behind separate explicit flags. ## Validation - All program offline/fake tests pass. - Opt-in dedicated-account smoke succeeds on a configured compatible grid. - Program/source completeness is 100%, logs contain no secrets, and workspace release-feature gates pass. ## Prerequisite The library behavior required by the program is implemented and its translated parity tests pass. ## Project constraints - Programs must use the native Rust public API; no CLR, C# process, bridge, RPC, or fallback. - Provide deterministic offline/fake validation before opt-in live or device tests. - Never log/store credentials or capability tokens, and keep destructive/spending actions separately opt-in. - Update program/source completeness, docs, and workspace validation evidence.

hugo added this to the 11 - Programs and live-grid validation milestone 2026-08-08 08:24:36 +00:00

hugo added the enhancement label 2026-08-08 08:24:36 +00:00

hugo referenced this issue from a commit

2026-08-11 18:25:32 +00:00

Implement credential-safe programs smoke gate (#97)

hugo commented

2026-08-11 18:25:58 +00:00

Implemented and verified in commit a9e2711447.

Implementation:

Added a native Rust live-grid-smoke binary with shared GRID_USER / GRID_PASSWORD / GRID_LOGIN_URL configuration, exact OpenSim login URI use, OpenSim login options and capability checks, and four separate literal side-effect confirmations.
Added sanitized, create-new JSONL evidence for completeness, login, capabilities/simulator, IM/chat, movement/return teleport, reversible folder-to-Trash, object properties, bounded texture download, and clean logout.
Installed packet consumers before OpenSim login, made CompleteAgentMovement reliable, decoded zero-coded object updates correctly, and validated OpenSim simulator identity from the transport handshake.
Disabled the on-disk asset cache before AssetManager creation; live texture bytes are validated in memory and not retained.
Completed the remaining voice commands and added a manifest-backed audit of all nine programs and every TestClient command.
Added deterministic fake/offline coverage, documentation, and the ubuntu-latest Gitea workflow gate. No spend, upload, permanent-delete, estate/parcel, or other-user action exists in the harness.

Verification:

Final live OpenSim run: 9/9 stages ok, exact commit recorded on every line; 141 cached primitives, 7 core capabilities, real IM transmission and local-chat echo, movement plus return teleport, folder create/move-to-Trash, object properties, 325607 texture bytes, and clean logout with zero active tasks.
Completeness: 9 programs, 138 source files, 121 TestClient commands, 0 pending programs, 0 pending commands.
Credential and secret-marker scans clean; no linden asset cache artifact created.
Program offline/fake suite: 83 passed, 0 ignored after rerunning loopback-bound cases with socket permission.
Related native wire tests: reliable movement and zero-coded object update both pass; related pre-created voice compatibility cases: 3 passed, 0 ignored.
Strict programs clippy, workspace check/all-target compilation, test compilation, docs, generator/mapping/API coverage, and diff hygiene gates passed.

This is a real dedicated-account OpenSim validation; no stage is silently skipped.

Implemented and verified in commit a9e2711447cf07b967b5630dc2a88af7d47a3ca6. Implementation: - Added a native Rust live-grid-smoke binary with shared GRID_USER / GRID_PASSWORD / GRID_LOGIN_URL configuration, exact OpenSim login URI use, OpenSim login options and capability checks, and four separate literal side-effect confirmations. - Added sanitized, create-new JSONL evidence for completeness, login, capabilities/simulator, IM/chat, movement/return teleport, reversible folder-to-Trash, object properties, bounded texture download, and clean logout. - Installed packet consumers before OpenSim login, made CompleteAgentMovement reliable, decoded zero-coded object updates correctly, and validated OpenSim simulator identity from the transport handshake. - Disabled the on-disk asset cache before AssetManager creation; live texture bytes are validated in memory and not retained. - Completed the remaining voice commands and added a manifest-backed audit of all nine programs and every TestClient command. - Added deterministic fake/offline coverage, documentation, and the ubuntu-latest Gitea workflow gate. No spend, upload, permanent-delete, estate/parcel, or other-user action exists in the harness. Verification: - Final live OpenSim run: 9/9 stages ok, exact commit recorded on every line; 141 cached primitives, 7 core capabilities, real IM transmission and local-chat echo, movement plus return teleport, folder create/move-to-Trash, object properties, 325607 texture bytes, and clean logout with zero active tasks. - Completeness: 9 programs, 138 source files, 121 TestClient commands, 0 pending programs, 0 pending commands. - Credential and secret-marker scans clean; no linden asset cache artifact created. - Program offline/fake suite: 83 passed, 0 ignored after rerunning loopback-bound cases with socket permission. - Related native wire tests: reliable movement and zero-coded object update both pass; related pre-created voice compatibility cases: 3 passed, 0 ignored. - Strict programs clippy, workspace check/all-target compilation, test compilation, docs, generator/mapping/API coverage, and diff hygiene gates passed. This is a real dedicated-account OpenSim validation; no stage is silently skipped.

hugo closed this issue

2026-08-11 18:26:08 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: hugo/MetaCrate#97