packages/forkhorse-runner/OFFLINE-EVIDENCE.md

1# FH-007 offline evidence
2
3Status: offline acceptance passed. **Every container-port result is mocked.**
4No container runs, deployment, live Cloudflare APIs, credentials, or spending
5were used. Live acceptance and FH-005 integration remain pending.
6
7Base: freshly fetched `main` at
8`6544d967456b1966f7276df7d1a06b06672bc50a`.
9Development branch: `fh/FH-007-runner`.
10Upstream gitlink: `8cbfb2b67e3da6222e4d7faeade0ff88eb4253bf`, unchanged.
11Toolchain: Node `v24.21.0`, pnpm `11.17.0`.
12
13Validation completed on 2026-10-12:
14
15| Command | Exit | Output excerpt |
16| --- | --- | --- |
17| `pnpm install --frozen-lockfile` | 0 | `Scope: all 8 workspace projects`; `Already up to date` |
18| `pnpm -C cloudflare-os install --frozen-lockfile` | 0 | `Scope: all 34 workspace projects`; `Already up to date` |
19| `pnpm --filter forkhorse-runner test` | 0 | `Test Files 1 passed (1)`; `Tests 26 passed (26)` |
20| `pnpm --filter forkhorse-runner types:check` | 0 | `tsc --noEmit` |
21| `pnpm test` | 0 | root scripts 26; upstream scripts 374; runner 26; core 13; custom gatekeeper 2; upstream error reporting 23; error reporter 2, all passed |
22| `pnpm lint` | 0 | `vp lint`; `tsc -p scripts/tsconfig.json`; six package builds completed |
23| `git -c core.fsmonitor=false diff --check` | 0 | no output |
24| `git -c core.fsmonitor=false -C cloudflare-os status --short` | 0 | no output |
25
26The first root test attempt failed because the filesystem/network sandbox denied
27localhost listeners (`listen EPERM: operation not permitted 127.0.0.1`). The
28successful rerun enabled the existing local workerd test pools; those tests did
29not run containers. The initial install for the added workspace package required
30registry access and a noninteractive modules refresh; the frozen install passed
31without dependency version changes. Two initial lint findings were corrected
32before the final successful lint run.
33
34D2 audit: only the new `packages/forkhorse-runner` importer was added to
35`pnpm-lock.yaml` (15 lines); it reuses existing resolutions. No existing importer,
36catalog, override, workspace configuration, core source, board, deployment file,
37or upstream tracked file/gitlink changed.
38
39Open dependencies and live checks are enumerated in the package README. In
40particular, the authority must provide caller/fork authorization, execution
41reservations, chunk-safe Supervisor storage, atomic digest attachment, default
42approval enforcement, and the mandatory fresh pre-promote execution. No core
43integration is claimed by these offline tests.
44