[Sanne-ai-bot]

Closes #2201

What

Surefire now sets ISX_GROUP_CONTINUED=1 in every test JVM (root pom.xml), so an in-process IncusSpawn.run in a unit test never re-runs the surefire fork under sg incus-admin.
mvn test passes whatever the session's groups are.

Design

Chosen: set the existing marker env in surefire's config; no production code changes (so no conflict with #2205 in IncusSpawn.java).
Alternatives: detect "not isx" in GroupContinuation, or add a seam in IncusSpawn.run.
Why: the marker already means "never continue", and GroupContinuationTest stubs continued(), so its coverage is unchanged.

Regression test

none: a build-config change whose failure needs a session that predates incus-admin membership; ExitCodeTest and IncusSpawnHelpQuestionTest are the check, not reproducible on this box's session.

CHARACTER

nothing

Docs

.claude/rules/commands.md (one line).

Verified on

Linux box, JVM: mvn test all green (968 tests); targeted tests pass. Native: not applicable (test config only).

Handoff

none

Self-review

Self-review: review medium: 2 findings, applied 0, reverted 0, not applied 2

• pom.xml:117: failsafe ITs get no marker - ITs need a real Incus and run in a proper group session; not part of Tests re-run the surefire JVM under sg when the session predates incus-admin #2201's failing tests.
• pom.xml:113: child processes inherit the marker - harmless, GroupContinuationTest stubs continued() regardless.

Follow-ups

none

Risk

low: test-only environment variable.

Timing

unit tests 9m (full mvn test)

🤖 Generated with Claude Code