Official evaluator + OCI supervisor
Trust-boundary thesis: untrusted solvers meet a signed organizer path and a chemistry-aware container supervisor—tested, not multi-tenant hosted.
Artifact 17.07.26 · trust · not hosted multi-tenant
Expanded bullets
- Organizer prototype: transactional intake, atomic queue workers, expiring claims, Ed25519 attestations, signed hash-chain checkpoints.
- Rootless Podman supervisor keeps evaluator, oracle broker, and hidden bundle outside fresh hostile-solver containers.
- Signed nonce-hiding rotation precommits; owner-only immutable bundle snapshots; pinned runtime/image verification.
- Retained worker-to-OCI run + hostile isolation probe on public non-secret fixtures—exact host proof, not general containment claim.
- Local process limits are not a security sandbox; TLS, secret families, key lifecycle, and external witnesses remain deployment gates.