SHarness · the run pipeline · v1, driven
SH8
A new process gets nothing it does not need.
WITHOUT: observed
The probe, hello storyboard panel 3, 24 Oct 2026:
uid 0, all capabilities, no seccomp.
The grant is everything.
What did not run
seccomp, uids, cgroups, mTLS, the launcher: not covered.
Landlock does not see UDP.
PARENT checks first, as described
CHILD walls close, then execve, as described
mismatch: exit 125, nothing runs