search-with-proof: declarative demos, brain/executor split, kube-ax constraints

Demos are data the verifier executes (fixed build recipes, runtime+path start,
HTTP/CLI steps with captures; the canary is never referable). The agent loop with
the key never runs repository code: executor tasks without a key exchange commands
and results through presigned objects. AX capacity errors are back-pressure with at
most 2 tasks in flight; caches and builds under /workspace with a 2 GiB guard;
verifiers take one presigned archive per side. Launcher fix: private /dev in bwrap.
190 tests on the host; probe 5/5 demonstrated.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
This commit is contained in:
Marius Ciepluch
2026-10-05 17:12:46 +02:00
co-authored by Claude Opus 5.5
parent 721c4b0997
commit 85f4f0b3d4
25 changed files with 3409 additions and 531 deletions
@@ -1,7 +1,7 @@
{
"modules": 168,
"modules": 172,
"counts": {
"load_bearing": 162,
"load_bearing": 166,
"standalone_capability": 6
},
"orphaned": [],
@@ -1567,8 +1567,8 @@
"regress.safety",
"regress.verdict",
"search._sandbox",
"search.verify",
"search.worker"
"search.executor",
"search.verify"
]
},
{
@@ -1613,8 +1613,11 @@
"reason": "reachable from gate, map_gate, pair_gate, cli",
"importers": [
"search.coordinator",
"search.executor",
"search.oracles",
"search.probe",
"search.verify",
"search.verify_task",
"search.worker"
]
},
@@ -1623,6 +1626,8 @@
"classification": "load_bearing",
"reason": "reachable from gate, map_gate, pair_gate, cli",
"importers": [
"search.executor",
"search.oracles",
"search.probe",
"search.verify",
"search.worker"
@@ -1652,6 +1657,26 @@
"search.worker"
]
},
{
"module": "search.demo",
"classification": "load_bearing",
"reason": "reachable from gate, map_gate, pair_gate, cli",
"importers": [
"search.executor",
"search.verify",
"search.verify_task",
"search.worker"
]
},
{
"module": "search.executor",
"classification": "load_bearing",
"reason": "python -m openultrasast.search.executor",
"importers": [
"search.verify_task",
"search.worker"
]
},
{
"module": "search.oracles",
"classification": "load_bearing",
@@ -1667,12 +1692,32 @@
"reason": "python -m openultrasast.search.probe",
"importers": []
},
{
"module": "search.task_storage",
"classification": "load_bearing",
"reason": "reachable from gate, map_gate, pair_gate, cli",
"importers": [
"search.executor",
"search.verify",
"search.verify_task"
]
},
{
"module": "search.verify",
"classification": "load_bearing",
"reason": "python -m openultrasast.search.verify",
"importers": [
"search.probe"
"search.executor",
"search.probe",
"search.verify_task"
]
},
{
"module": "search.verify_task",
"classification": "load_bearing",
"reason": "python -m openultrasast.search.verify_task",
"importers": [
"search.executor"
]
},
{