129 lines
4.3 KiB
Markdown
129 lines
4.3 KiB
Markdown
# Send Sandbox Gate
|
|
|
|
Date: 2026-07-10
|
|
Node: R6c online sandbox-send evidence gate
|
|
|
|
## Local constraint
|
|
|
|
The local development environment cannot log in to iSphere / IMPlatformClient because it has no reachable service endpoint. Therefore R6c cannot be completed by a local live send.
|
|
|
|
Decision for this loop: prepare a returnable online sandbox evidence package instead of attempting any local send.
|
|
|
|
## Package produced
|
|
|
|
Script:
|
|
|
|
```powershell
|
|
powershell -NoProfile -ExecutionPolicy Bypass -File scripts\package-send-sandbox-gate.ps1
|
|
```
|
|
|
|
Verification:
|
|
|
|
```powershell
|
|
powershell -NoProfile -ExecutionPolicy Bypass -File scripts\verify-send-sandbox-gate-package.ps1
|
|
```
|
|
|
|
Generated package:
|
|
|
|
```text
|
|
runs/send-sandbox-gate-package/
|
|
runs/send-sandbox-gate-package.zip
|
|
```
|
|
|
|
Companion capability-test package:
|
|
|
|
```powershell
|
|
powershell -NoProfile -ExecutionPolicy Bypass -File scripts\package-send-capability-test.ps1
|
|
powershell -NoProfile -ExecutionPolicy Bypass -File scripts\verify-send-capability-test-package.ps1
|
|
```
|
|
|
|
```text
|
|
runs/send-capability-test-package/
|
|
runs/send-capability-test-package.zip
|
|
```
|
|
|
|
The capability-test package is local/offline safe. It runs `isphere-capability-smoke.exe`, confirms the nine-tool MCP surface, exercises receive/search/file-list against synthetic fixtures, verifies send preview, and confirms `production_send_enabled=false`.
|
|
|
|
The package embeds the existing read-only live probe recorder under:
|
|
|
|
```text
|
|
recorder/ISphereLiveProbeRecorder.exe
|
|
recorder/variants/ISphereLiveProbeRecorder-x86.exe
|
|
```
|
|
|
|
## Package files
|
|
|
|
| File | Purpose |
|
|
| --- | --- |
|
|
| `README.txt` | Explains local login limitation, online sandbox requirement, and one-send rule. |
|
|
| `OPERATOR-STEPS.md` | Step-by-step operator procedure. |
|
|
| `SANDBOX-SEND-INPUTS.template.json` | Template for sandbox target, content hash, idempotency key, and observed result. |
|
|
| `EXPECTED-RETURN-FILES.txt` | Return package acceptance checklist. |
|
|
| `RUN-RECORDING-SUITE.bat` | Top-level guided before/manual-send/after/return-zip flow. |
|
|
| `01-run-before-recorder.bat` | Numbered wrapper for before recording. |
|
|
| `02-run-after-recorder.bat` | Numbered wrapper for after recording. |
|
|
| `03-make-return-zip.bat` | Numbered wrapper for return zip creation. |
|
|
| `RECORDING-PACKAGE-MANIFEST.json` | Machine-readable package manifest and one-send markers. |
|
|
| `run-before-recorder.bat` | Runs read-only recorder before the manual sandbox send. |
|
|
| `run-after-recorder.bat` | Runs read-only recorder after the manual sandbox send. |
|
|
| `compute-content-hash.ps1` | Computes SHA256 for the exact test message body. |
|
|
| `make-return-zip.ps1` | Creates the return zip after before/after recordings and input JSON are present. |
|
|
|
|
## Operator rules
|
|
|
|
The package encodes these explicit markers:
|
|
|
|
```text
|
|
LOCAL_LOGIN_UNAVAILABLE
|
|
ONLINE_SANDBOX_REQUIRED
|
|
MANUAL_ONE_SEND_ONLY
|
|
DO_NOT_SEND_SECOND_TIME
|
|
content_sha256
|
|
idempotency_key
|
|
success_ack_or_sent_record
|
|
```
|
|
|
|
Required online procedure:
|
|
|
|
1. Log in normally on an online/internal sandbox machine.
|
|
2. Fill `SANDBOX-SEND-INPUTS.json` from the template.
|
|
3. Run `RUN-RECORDING-SUITE.bat` for the guided all-in-one flow, or run `01-run-before-recorder.bat`.
|
|
4. Manually send exactly one message to the declared sandbox target.
|
|
5. Record `success_ack_or_sent_record`.
|
|
6. Do not send a second copy.
|
|
7. Continue the guided flow, or run `02-run-after-recorder.bat`.
|
|
8. Continue the guided flow, or run `03-make-return-zip.bat`.
|
|
9. Return the generated zip.
|
|
|
|
## Safety boundary
|
|
|
|
The package does not:
|
|
|
|
- send messages automatically;
|
|
- upload files;
|
|
- click or type;
|
|
- inject or hook;
|
|
- capture network traffic;
|
|
- enable production send.
|
|
|
|
The only send action is the operator's one manual sandbox send inside the official client.
|
|
|
|
## Acceptance gate
|
|
|
|
R6c can pass only after a returned package proves all of the following:
|
|
|
|
- explicit sandbox target;
|
|
- exactly one content hash;
|
|
- exactly one idempotency key;
|
|
- observed success/ack or local sent-record evidence;
|
|
- confirmation that no second send was made;
|
|
- before/after read-only recorder outputs are present.
|
|
|
|
## Current decision
|
|
|
|
R6c local-preparation slice is complete, including the consolidated recording suite and the separate offline capability-test package. The full online evidence gate is not passed yet.
|
|
|
|
Production `isphere_send_message` remains blocked.
|
|
|
|
Next node: **R6d returned sandbox evidence intake** after the user returns the generated package.
|