search-with-proof group 4 + image: board, spend reservation, coordinator, search-task image

Board as immutable versioned blobs (coordinator sole writer); budget reserve/settle
before model calls; per-task and run caps; coordinator loop over an injected
executor; batch.py accepts a fixed allow-list of search variables; XSS browser
oracle; ousast-search-task image (Python, Node/TypeScript, PHP, Java 17, sqlite,
bwrap, chromium) built by CI. 103 tests on the host.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

benchmarks/ax/batch.py

@@ -280,11 +280,18 @@ def manifest(name, workload, item, urls, atespace="default", *, validate_name=Tr
         raise ValueError("invalid AX task name")
     if set(urls) != workload.url_env:
         raise ValueError("unexpected URL environment names")
-    # Extra env is deliberately a small numeric execution contract, never inherited credentials.
-    if set(item.extra_env) - {"DEADLINE", "QUESTION_DEADLINE"} or any(
-        not re.fullmatch(r"[0-9]+(?:\.[0-9]+)?", str(v)) for v in item.extra_env.values()
-    ):
+    # Fixed names and semantic values, never inherited environment or credentials.
+    patterns = {
+        "DEADLINE": r"[0-9]+(?:\.[0-9]+)?",
+        "QUESTION_DEADLINE": r"[0-9]+(?:\.[0-9]+)?",
+        "SEARCH_STEP": r"reason|explore|verify",
+        "SEARCH_ID": r"[a-z0-9][a-z0-9-]{0,63}",
+        "SEARCH_TASK_ID": r"[a-z0-9][a-z0-9-]{0,63}",
+    }
+    if any(key not in patterns or not re.fullmatch(patterns[key], str(value)) for key, value in item.extra_env.items()):
         raise ValueError("unexpected task environment")
+    if set(item.extra_env) & set(urls):
+        raise ValueError("overlapping task environment")
     for url in urls.values():
         public_endpoint(url)
     env = [{"name": key, "value": str(value)} for key, value in {**urls, **item.extra_env}.items()]
@@ -358,8 +365,10 @@ def schedule(pending, lanes, out, execute, complete, *, fallbacks=(), overflow=T
     return failures
 
 
-def dispatch(items, workload, out, executors, *, lanes=("ax", "ax", "docker"), overflow=True):
+def dispatch(items, workload, out, executors, *, lanes=("ax", "ax", "docker"), overflow=True, max_attempts=2):
     """Digest checkpoints, one instrument rerun, sandbox retry, priority VM fallback."""
+    if not isinstance(max_attempts, int) or not 1 <= max_attempts <= 2:
+        raise ValueError("batch attempts must be one or two")
     out.mkdir(parents=True, exist_ok=True)
     pending, fallbacks = [], []
 
@@ -380,7 +389,7 @@ def dispatch(items, workload, out, executors, *, lanes=("ax", "ax", "docker"), o
         output = out / hashlib.sha256(item.id.encode()).hexdigest()
         output.mkdir(exist_ok=True)
         attempts = []
-        for attempt in range(2):
+        for attempt in range(max_attempts):
             attempt_output = output / ("attempt-" + uuid.uuid4().hex)
             attempt_output.mkdir()
             record = executors[lane](item, attempt_output, attempt)

benchmarks/measurements/2026-09-08-module-audit.json

@@ -1,8 +1,8 @@
 {
-  "modules": 163,
+  "modules": 166,
   "counts": {
-    "load_bearing": 158,
-    "standalone_capability": 5
+    "load_bearing": 160,
+    "standalone_capability": 6
   },
   "orphaned": [],
   "standalone": {
@@ -10,6 +10,7 @@
     "mcp": "narrow MCP server over stdio; its own `ousast mcp` entry point and OpenCode integration",
     "push_inputs": "pre-push-safety-net task 1.2: offline input provenance validator; python -m openultrasast.push_inputs",
     "push_scoring": "pre-push-safety-net task 1.3: frozen-profile diagnostic outcome scorer; python -m openultrasast.push_scoring",
+    "search.coordinator": "search-with-proof Req 1/2/4: injected search executor and offline board checkpoint inspector; agent worker pending",
     "skills": "skill router; consumed by mcp and by the OpenCode integration, not by the scan path"
   },
   "rows": [
@@ -897,7 +898,9 @@
         "plane.tasks.remember",
         "plane.tasks.roles",
         "plane.tasks.verify",
-        "plane.workspaces"
+        "plane.workspaces",
+        "search.board",
+        "search.coordinator"
       ]
     },
     {
@@ -913,7 +916,8 @@
         "learn.program",
         "plane.generate",
         "plane.tasks.roles",
-        "plane.tasks.verify"
+        "plane.tasks.verify",
+        "search.coordinator"
       ]
     },
     {
@@ -1000,7 +1004,9 @@
         "plane.generate",
         "plane.reconciler",
         "plane.tasks.loop",
-        "plane.tasks.remember"
+        "plane.tasks.remember",
+        "search.board",
+        "search.coordinator"
       ]
     },
     {
@@ -1599,6 +1605,7 @@
       "classification": "load_bearing",
       "reason": "reachable from gate, map_gate, pair_gate, cli",
       "importers": [
+        "search.coordinator",
         "search.verify"
       ]
     },
@@ -1610,6 +1617,28 @@
         "search.verify"
       ]
     },
+    {
+      "module": "search.board",
+      "classification": "load_bearing",
+      "reason": "reachable from gate, map_gate, pair_gate, cli",
+      "importers": [
+        "search.coordinator"
+      ]
+    },
+    {
+      "module": "search.budget",
+      "classification": "load_bearing",
+      "reason": "reachable from gate, map_gate, pair_gate, cli",
+      "importers": [
+        "search.coordinator"
+      ]
+    },
+    {
+      "module": "search.coordinator",
+      "classification": "standalone_capability",
+      "reason": "search-with-proof Req 1/2/4: injected search executor and offline board checkpoint inspector; agent worker pending",
+      "importers": []
+    },
     {
       "module": "search.oracles",
       "classification": "load_bearing",