[heybeaux]

New exp66 / RT56 — loader regex-probe preemption

Pre-registered SwarmLab spec632df6b before implementation/output. Real origin/main Aegis f73ce63: five regex hazards watchdog at1500ms twice instead of returning its advertised25ms rejection. No fake policy integration: public built loadPack. Baseline12/19,5/5substring controls. Two extra baseline failures: invalid env0/-1 reject safe patterns.

Runtime528438c: fixed script + primitive inputs constructs native regex inside V8 context with interrupting timeout; preserves synchronous API/RulePackError context, whole pack refusal, JS features, safe recovery. Normalize invalid budget settings; no new public API. Same frozen design candidate19/19+5/5, focused8red10pass ->18green. Evidence manifests/trace/linked SwarmLab PR forthcoming. Historical bench scores are not live runtime evidence.

Checks / honest merge hold

• Build + typecheck + full release check green at current head,1185 tests, stored52/52.
• One earlier run failed explicit evidence count after adding RT56 (corrected51->52).
• One full run rejected safe builtin secrets.openai-key.bash at25ms in hook rulepack-resolve under parallel load. Focused hook rerun and next full release pass unchanged. This wall-clock false-positive risk is unresolved; do NOT auto-merge just because CI passes. Nightly will preserve red log and hold for review.
• No .acr change; Territory refresh skipped. Existing dirty primary checkouts untouched; isolated current-main worktrees.

Limits

Finite load-time probes only; runtime evaluate still unbounded native regex. Not regex safety proof, host-JS security sandbox, arbitrary pack resource bound or production certification. No threshold changes or holdout tuning. Five actual native regex probes interrupted, not Promise.race.

Paired evidence PR: heybeaux/swarmlab#56. Aegis release CI observed SUCCESS https://github.com/heybeaux/aegis/actions/runs/39212271270 (head db89917); merge hold remains for wall-clock false positive.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 2ddc8fad-13a4-45f2-af45-80211af64527

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[heybeaux]

Nightly final status: CI green; NOT merged — compatibility review hold.

• Aegis72 db899177: release-check SUCCESS https://github.com/heybeaux/aegis/actions/runs/39212271270
• SwarmLab56 327ad3d: exp66 fresh real-package CI SUCCESS https://github.com/heybeaux/swarmlab/actions/runs/39212446565; runtime run lpp-mvewdhwk-2665,19/19+5/5, zero watchdog, actual source/dist manifest verification and15 tamper rejections. Exp64/65 CI green as regressions only.
• Full final local release1185tests52/52stored evidence; SwarmLab51claims111traces1022assertions.
• Preserve unresolved red: one earlier full parallel release falsely rejected safe secrets.openai-key.bash on25ms wall-clock timeout. Later local/CI success does not establish absence of that compatibility regression. No automatic merge; profile and resolve before landing.
• Pre-registration deviation explicitly retained: baseline invalid-budget0/-1 safe controls failed12/14, not claimed14/14; five independent primary hangs and5/5literal controls repeated. No thresholds/scenarios moved.

[heybeaux]

Same-exp66 evidence-interface audit landed on SwarmLab56 head b1bbd747 (no new nightly experiment or Aegis runtime change).

Before: live verifier accepted late1501ms library return, missing/stale/future timestamps, non-score event and contradictory result metadata. Added deadline/timestamp/envelope/log binding checks; original frozen prereg/harness/oracle/scenarios/thresholds/receipts/traces remain byte-identical. 33 tamper rejections + positive accepted (8 reproduced gaps now rejected).

Exact-head exp66 CI39213546459 SUCCESS: fresh frozen design runs real pinned Aegis db89917, actual source/dist+row checks,33 negatives; exp64/65 regression CI success. Full local Aegis release1185tests52/52; SwarmLab51claims111traces1022assertions; build/static checks green.

Neither PR merged. Safe-builtin25ms false positive under parallel load remains an unresolved runtime compatibility blocker; this verifier fix does not resolve it. Baseline-control admission deviation also remains recorded. No threshold changes or second novelty claim.