mirror of
https://github.com/garrytan/gstack.git
synced 2026-09-17 18:32:19 +02:00
docs(memorable): the process-group guarantee and its setsid boundary
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
This commit is contained in:
co-authored by
Claude Fable 5.1
parent
b936b6b167
commit
3afb3af58f
@@ -26,8 +26,11 @@ with, and it is not available on Windows yet.
|
|||||||
- A trust envelope and an 8 KiB cap on whatever comes back, and the vendor can
|
- A trust envelope and an 8 KiB cap on whatever comes back, and the vendor can
|
||||||
never block a prompt or speak as gstack.
|
never block a prompt or speak as gstack.
|
||||||
- The vendor runs in an allowlisted environment (no API keys from your
|
- The vendor runs in an allowlisted environment (no API keys from your
|
||||||
session) inside its own process group, and is killed with that group if it
|
session) inside its own process group, and that whole group is killed when
|
||||||
overruns the budget or if Claude Code terminates the hook mid-flight.
|
the hook finishes, times out, or is terminated by Claude Code mid-flight.
|
||||||
|
A process the vendor deliberately detaches into its own session (`setsid`)
|
||||||
|
is outside that group and outside this guarantee; that is a choice visible
|
||||||
|
in the vendor's own behaviour, not something gstack can prevent.
|
||||||
- Registration at the stable install, healing on every `./setup`, survival of
|
- Registration at the stable install, healing on every `./setup`, survival of
|
||||||
`./setup --no-team`, removal by `gstack-uninstall`, and an off switch that
|
`./setup --no-team`, removal by `gstack-uninstall`, and an off switch that
|
||||||
works even after Claude Code has rewritten `settings.json`.
|
works even after Claude Code has rewritten `settings.json`.
|
||||||
|
|||||||
Reference in New Issue
Block a user