search-with-proof group 4 + image: board, spend reservation, coordinator, search-task image

Board as immutable versioned blobs (coordinator sole writer); budget reserve/settle
before model calls; per-task and run caps; coordinator loop over an injected
executor; batch.py accepts a fixed allow-list of search variables; XSS browser
oracle; ousast-search-task image (Python, Node/TypeScript, PHP, Java 17, sqlite,
bwrap, chromium) built by CI. 103 tests on the host.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/openultrasast/search/budget.py

@@ -0,0 +1,37 @@
+"""Search ceilings carried to every executor; no model or transport dependencies."""
+
+import math
+from dataclasses import dataclass
+
+
+@dataclass(frozen=True)
+class SearchBudget:
+    spend_usd: float = 0.50
+    max_call_usd: float = 0.05
+    reason_rounds: int = 4
+    intents_per_round: int = 3
+    demonstrations: int = 3
+    tasks: int = 32
+    retries: int = 1
+    memory_bytes: int = 5 * 1024**3
+    disk_bytes: int = 2 * 1024**3
+    task_wall_seconds: float = 900
+    wall_seconds: float = 4 * 3600
+    cleanup_seconds: float = 30
+
+    def __post_init__(self) -> None:
+        for name, value in vars(self).items():
+            if isinstance(value, bool) or not isinstance(value, (int, float)) or not math.isfinite(value):
+                raise ValueError(f"invalid {name}")
+            if value < 0 or (value == 0 and name not in ("retries", "spend_usd")):
+                raise ValueError(f"invalid {name}")
+            if name in (
+                "reason_rounds",
+                "intents_per_round",
+                "demonstrations",
+                "tasks",
+                "retries",
+                "memory_bytes",
+                "disk_bytes",
+            ) and not isinstance(value, int):
+                raise ValueError(f"{name} must be an integer")