mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-10-25 17:45:53 +01:00
The wrapper deleted only two of its four own session variables from the spawned child's environment, so the child still inherited the lease refresh and TTL overrides. T10 asserted an empty leaked-key list but never set those two variables, so it passed without proving the scrub. Delete all four variables in both wrapper variants and extend T10 to set all four through the harness on both variants. The lease refresh script ran `mv` even when the exclusive create failed, because the two commands were separate statements with no `&&`. Join them so the rename runs only after the create succeeds, and extend T29 to assert that chained shape. Co-authored-by: Paperclip <noreply@paperclip.ing>