feat: give the host→container boundary a contract and fold aggregate into report --rebuild - #178

Merged

uipreliga merged 9 commits into

mainfrom

feat/container-contract-and-command-surface

Sep 16, 2026

Commits on Sep 16, 2026

feat(isolation): 1/6 — parse context.json as a ContainerContext contract

uipreliga
and
claude
committed
fc9f56a
feat(isolation): 2/6 — refuse image skew and assert the container echoed its contract

uipreliga
and
claude
committed
4c80f41
refactor(isolation): 3/6 — move the docker→tempdir driver rewrite host-side

uipreliga
and
claude
committed
ca2a75a
feat(cli): 4/6 — replace `aggregate` with `report --rebuild`

uipreliga
and
claude
committed
dd104b1
feat(evaluate): 5/6 — refresh the run-level run.json after a detached grade

uipreliga
and
claude
committed
f097cf2
test: guard the contract echo over a maximal sandbox and the Typer-command exemption list

uipreliga
and
claude
committed
8c96972
test(cli): 6/6 — pin every shared run/execute flag as declared identically

uipreliga
and
claude
committed
fe99090
fix: code review fixes for container-contract-and-command-surface

uipreliga
and
claude
committed
dcaf46f
docs: apply main's prose rules to the container-contract branch

uipreliga
and
claude
committed
ce5d761