Chinesezjc ea1d28a068 fix(code-runtime-python): bound the open-merge hold by the ledger budget ...

The review's critical: the open-merge branch accumulated the held fragment
before any ledger check, so a forged open flood could grow host memory without
touching logBudget. The held fragment is now bounded by the exact-cost walk
(jsonStringCostUpTo against the remaining budget; the closing frame's admit()
still bills the merged entry once), and the open field is registered in the
README wire-contract section and the fd-3 protocol note (en + zh). A forged
open-flood case asserts truncation to the marker under a 64-byte budget.

2026-08-31 15:03:20 +08:00

..

boot-write-failure.spec.ts

test(code-runtime-python): cover the boot-ack gate's re-entry guard and run-write failure

2026-08-31 15:00:33 +08:00

protocol-mirror.e2e.ts

docs(code-runtime-python): name the roster aliases by subset direction, align metering prose

2026-08-07 15:37:19 +08:00

protocol.spec.ts

docs(code-runtime-python): trim metering prose and cover encodeJsonPlain depth

2026-08-07 13:27:54 +08:00

residual-detach.spec.ts

docs(code-runtime-python): sync README with the shipped backend

2026-08-31 14:20:00 +08:00

runtime.spec.ts

fix(code-runtime-python): bound the open-merge hold by the ledger budget

2026-08-31 15:03:20 +08:00