mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-10-26 02:00:52 +01:00
Priya RamanandPaperclip
4e20fb8ac1
A later admission stage (credential, command, or runtime) that failed after sandbox acquisition never released the sandbox's durable lease, permanently pinning the marker and blocking a later admission from reusing or removing the root. Release the lease through the same path a live host's own close uses, once every other resource has closed. Stale-gate recovery captured the shared gate path with a rename before it could tell whether the gate was truly dead. If a live holder replaced the gate before the rename, and a third admission claimed the path before recovery's restore, two admissions could enter the same-root critical section at once. Pin the gate with an extra link instead, so the shared path is never vacated during inspection, and remove it only when the shared path still names the exact pinned, proven-dead gate. Co-authored-by: Paperclip <noreply@paperclip.ing>