3 Commits

Author SHA1 Message Date
claude-noether 0d04ae4aad iter5 amendment verified: Track F GREEN, new iter6 candidate I
Patched libmozsandbox.so (sha 4e6c7d58…, +1824 bytes vs iter5-G)
deployed to ohm via temporary HTTP server on boltzmann:18080
(vpn route was closed; ohm has lan route to boltzmann.fritz.box).

Sandbox gate is fully open. With LIBVA_DRIVER_NAME=v4l2_request +
sandbox enabled + bbb_1080p30_h264.mp4, Firefox 150 emits:
  v4l2-request: cap_pool_init: 24 slots ready
  v4l2-request: Unable to queue buffer: Invalid argument
vs pre-amendment which had the seccomp violation +
"Unable to allocate media request: Function not implemented"
between those two lines. Track F closes GREEN.

YouTube test (watch?v=7DAPd5MGodY) didn't engage v4l2_request
because YT negotiated VP9/AV1 with FF150 (no h264ify); v4l2_request
only handles H.264. Codec-negotiation issue, not sandbox issue.

New iter6 candidate I documented: Firefox VIDIOC_QBUF EINVAL on
first frame is consumer-specific (mpv-vaapi-copy clean at 2000
frames on same driver). Diagnostic plan and repro included.

phase8_iteration5_close.md: appended Track F GREEN evidence +
post-amendment status table + iter6 candidate referral.

phase0_findings_iter6.md: added candidate I (Firefox QBUF EINVAL),
listed under recommended pairings as strong iter6-lock candidate.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-05 19:35:11 +00:00
claude-noether d2d9107e62 iter5 amendment: extend Firefox sandbox patch to UtilitySandboxPolicy
Real-world YouTube avc1 playback on the iter5-G binary surfaced a
seccomp violation (`syscall 29`, `0x80047C05` = `MEDIA_IOC_REQUEST_ALLOC`)
that the autonomous Phase 7G test missed because seccomp returns
ENOSYS silently and Firefox falls back to SW decode.

Two distinct gaps:
- patch-sync drift: campaign 113-line patch (broker+RDD-seccomp) had
  drifted from container 84-line patch (broker only); iter5-G shipped
  with the broker fix but no RDD seccomp fix.
- coverage gap: FF150 routes VAAPI to the Utility process; iter3's
  RDD-only seccomp allowlist never covered Utility.

Combined patch now hits three gates across two files (six hunks):
- broker: cap-filter widen + AddV4l2RequestApiDependencies + RDD wire-in
- RDD seccomp: kMediaType allow alongside existing kVideoType
- Utility seccomp: new __NR_ioctl override mirroring RDD's allowlist

Build: incremental `makepkg -e` on existing iter5-G object tree took
2:22 wall vs the 2h27m from-scratch alternative.

phase8_iteration5_close.md: appended amendment section with verdict-
gap analysis, patch breakdown, deploy-pending status.

firefox-fourier/README.md: rewrote "The problem" from 2 gates to 3
(broker + RDD seccomp + Utility seccomp); patch summary now explains
the six hunks.

Pending: pkg deploy to ohm + lsof /dev/video1 verification once
network route to ohm is restored.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-05 19:20:30 +00:00
marfrit 8e6d9e6966 Iteration 5 close — A+G+B+E all GREEN
Heavyweight four-track iteration. All Phase 1 success criteria met:

- Track A (DEBUG sweep): ~339 lines of iter1/iter3/iter4 instrumentation
  removed across 7 fork commits. Driver builds clean; per-frame log
  noise zero (1 v4l2-request line per 2000-frame stress).

- Track G (PGO-disabled Firefox rebuild): firefox 150.0.1-1.1 built
  on boltzmann (single-pass non-PGO, ~2h27m). 68.7 MB pkg, 169 MB
  libxul (21× smaller than iter3 PGO-instrumented). 2.7× faster
  decode through firefox-fourier sandbox.

- Track E (multi-context): LAST_OUTPUT_* moved from process-global
  static to per-driver_data. Two concurrent mpv with 2s stagger
  both decode clean.

- Track B (libplacebo segfault): 35s mpv --vo=gpu, 0 segfaults
  (mpv falls through to GLES via Panfrost gracefully).

Phase 5 sonnet review came back YELLOW with 4 caveats; 3 resolved
in code (additional 107-line sweep, readback_warned removed),
1 documented as iter6+ candidate (cap_pool resolution-change race
latent under untested consumer probe patterns).

iter5-end driver sha256: 4bed52ec5d44b389. firefox-fourier 1.1
sha256: aa94c7290ee7be76. README iteration table updated.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-05 17:39:35 +00:00