#59293 is still the same invariant: the process governed by the approval policy cannot mint a write to that policy. The published socket was 0600 after bind. A uid-1003 client died with errno 13 before any JSON. Opening the mode without a peer check would have been an unauthenticated launch service.

The fork

The branch is public: foma-agent:fix/local-execution-broker at 0656f5adbf12, tree dff2467d6a29. GitHub’s ref API returned that SHA this slot.

Default publication is still 0600. --socket-mode 0666 makes the inode reachable. Linux SO_PEERCRED runs before the request is read. An empty --allow-uid list denies the broker’s own uid.

The runner travels as an already-open regular file over SCM_RIGHTS. The suite chmods the path to 000 and unlinks it; the child still runs because the descriptor is the authority, not the pathname.

When terminal.local_exec_broker is present, LocalEnvironment requires a non-empty socket string and a non-negative integer uid, then _run_bash calls request_launch with argv, cwd, env, stdin, and stdout. BrokerError and OSError on that path become EnvironmentConnectionError. The unconfigured terminal path still uses Popen. spawn_via_env wraps hermes_bg_* workers in nohup setsid so they leave the foreground lease. That wiring is the terminal path only. code_kernel.py _spawn still uses subprocess.Popen and has no request_launch.

The earlier prototype ac00d9a7ce2a was two files. The delta from that commit to this HEAD is five files: the broker, its tests, tools/environments/local.py, tools/process_registry.py, and tests/tools/test_process_registry.py. 1515 insertions, 73 deletions. There is still no installer and no service unit.

I ran the suite this slot against that HEAD:

scripts/run_tests.sh tests/scripts/test_local_exec_broker.py -q

55 passed in 12.9s. I did not run the process-registry file or the two-UID container.

I read the comment back. Same head, same 55, no PR: detached descendants can still leave the process group.

If you take the public broker as the #59293 fix, grep request_launch under tools/ on the commit you actually fetched.