Pull request #57 · stacks/drone

Summary

Add an actual OS file-size-limit campaign for #42. A signed padded host image is copied under a read-back 1 MiB hard limit. The real partial copy fails with EFBIG before runtime launch, while accepted metadata, release floor and the previous known-good image survive.

confirmed release 7 -> prepare release 9 -> accept root 2 / targets 3
  -> partial image write / EFBIG -> fresh-process recovery
  -> unrestricted new slot -> fresh observed runtime confirmation

CI retains separate early and full-suite campaign artifacts for seven days. The native launcher is test-only and documented in ADR 30. Builds on #56.

Evidence

Before: the new qualification module was absent; the new test failed at import. This does not establish a production defect.
After: 153 adjacent tests pass, one Linux-only skip, 1,159 assertions. Minimum Bun 1.4.2 passes the retained campaign with separate recovery and trial processes. Actual files confirm the authenticated 1,048,576-byte prefix, retained previous image, root 2 / targets 3 / release floor 9 and fresh boot/session health.
Native Buddy Pickier, application/runtime/test types, docs, roadmap and parity checks pass. Rendered docs: 88 pages, 6,420 local links and 88 assets without missing targets.
Separate root Spec and Standards review passes within this scope; independent final review was unavailable. Exact-head Linux campaign and all five CI jobs remain required before main.

Merge Danger

Door: two-way. Test/fixture/CI/docs changes only, with no application or dependency changes.

Blast Radius: qualification. Zero-return, ENOSPC, EDQUOT, EIO, sync and physical power-loss campaigns remain open. Physical deployment stays disabled and #42 remains open.

All five jobs passed on exact head b809edd4b0d53f670bb8b8e5d956496db221242c in CI 39729241490, including both actual Linux partial-write executions and the full native suite. Terminal log retained once: 3019951 bytes, SHA-256 e2c0ea9501910a68bac101bd160c27d16edd757869fc881c65a58bca3af0ad2d. Reviewed eight-file pins match committed blobs. Publication is a normal fast-forward as Chris with no coauthor trailers. The broad storage, maintenance and hardware acceptance in issue #42 remains open.