[INFO] cloning repository https://github.com/lprior-repo/docker-claude
[INFO] running `Command { std: "git" "-c" "credential.helper=" "-c" "credential.helper=/workspace/cargo-home/bin/git-credential-null" "clone" "--bare" "https://github.com/lprior-repo/docker-claude" "/workspace/cache/git-repos/https%3A%2F%2Fgithub.com%2Flprior-repo%2Fdocker-claude", kill_on_drop: false }`
[INFO] [stderr] Cloning into bare repository '/workspace/cache/git-repos/https%3A%2F%2Fgithub.com%2Flprior-repo%2Fdocker-claude'...
[INFO] running `Command { std: "git" "rev-parse" "HEAD", kill_on_drop: false }`
[INFO] [stdout] 18d45318858e2d25962eefe0574508cfb14b6b62
[INFO] testing lprior-repo/docker-claude against try#dec9417b8611e34e787a3e4c37686b5131f9e5c5 for pr-154210-1
[INFO] running `Command { std: "git" "clone" "/workspace/cache/git-repos/https%3A%2F%2Fgithub.com%2Flprior-repo%2Fdocker-claude" "/workspace/builds/worker-4-tc2/source", kill_on_drop: false }`
[INFO] [stderr] Cloning into '/workspace/builds/worker-4-tc2/source'...
[INFO] [stderr] done.
[INFO] started tweaking git repo https://github.com/lprior-repo/docker-claude
[INFO] finished tweaking git repo https://github.com/lprior-repo/docker-claude
[INFO] tweaked toml for git repo https://github.com/lprior-repo/docker-claude written to /workspace/builds/worker-4-tc2/source/Cargo.toml
[INFO] validating manifest of git repo https://github.com/lprior-repo/docker-claude on toolchain dec9417b8611e34e787a3e4c37686b5131f9e5c5
[INFO] running `Command { std: CARGO_HOME="/workspace/cargo-home" RUSTUP_HOME="/workspace/rustup-home" "/workspace/cargo-home/bin/cargo" "+dec9417b8611e34e787a3e4c37686b5131f9e5c5" "metadata" "--manifest-path" "Cargo.toml" "--no-deps", kill_on_drop: false }`
[INFO] crate git repo https://github.com/lprior-repo/docker-claude already has a lockfile, it will not be regenerated
[INFO] running `Command { std: CARGO_HOME="/workspace/cargo-home" RUSTUP_HOME="/workspace/rustup-home" "/workspace/cargo-home/bin/cargo" "+dec9417b8611e34e787a3e4c37686b5131f9e5c5" "fetch" "--manifest-path" "Cargo.toml", kill_on_drop: false }`
[INFO] [stderr]     Blocking waiting for file lock on package cache
[ERROR] error running command: no output for 300 seconds
[INFO] testing lprior-repo/docker-claude against try#dec9417b8611e34e787a3e4c37686b5131f9e5c5 for pr-154210-1
[INFO] running `Command { std: "git" "clone" "/workspace/cache/git-repos/https%3A%2F%2Fgithub.com%2Flprior-repo%2Fdocker-claude" "/workspace/builds/worker-4-tc2/source", kill_on_drop: false }`
[INFO] [stderr] Cloning into '/workspace/builds/worker-4-tc2/source'...
[INFO] [stderr] done.
[INFO] started tweaking git repo https://github.com/lprior-repo/docker-claude
[INFO] finished tweaking git repo https://github.com/lprior-repo/docker-claude
[INFO] tweaked toml for git repo https://github.com/lprior-repo/docker-claude written to /workspace/builds/worker-4-tc2/source/Cargo.toml
[INFO] validating manifest of git repo https://github.com/lprior-repo/docker-claude on toolchain dec9417b8611e34e787a3e4c37686b5131f9e5c5
[INFO] running `Command { std: CARGO_HOME="/workspace/cargo-home" RUSTUP_HOME="/workspace/rustup-home" "/workspace/cargo-home/bin/cargo" "+dec9417b8611e34e787a3e4c37686b5131f9e5c5" "metadata" "--manifest-path" "Cargo.toml" "--no-deps", kill_on_drop: false }`
[INFO] crate git repo https://github.com/lprior-repo/docker-claude already has a lockfile, it will not be regenerated
[INFO] running `Command { std: CARGO_HOME="/workspace/cargo-home" RUSTUP_HOME="/workspace/rustup-home" "/workspace/cargo-home/bin/cargo" "+dec9417b8611e34e787a3e4c37686b5131f9e5c5" "fetch" "--manifest-path" "Cargo.toml", kill_on_drop: false }`
[INFO] [stderr]     Blocking waiting for file lock on package cache
[INFO] [stderr]     Updating crates.io index
[INFO] [stderr]     Blocking waiting for file lock on package cache
[ERROR] error running command: no output for 300 seconds
[INFO] testing lprior-repo/docker-claude against try#dec9417b8611e34e787a3e4c37686b5131f9e5c5 for pr-154210-1
[INFO] running `Command { std: "git" "clone" "/workspace/cache/git-repos/https%3A%2F%2Fgithub.com%2Flprior-repo%2Fdocker-claude" "/workspace/builds/worker-4-tc2/source", kill_on_drop: false }`
[INFO] [stderr] Cloning into '/workspace/builds/worker-4-tc2/source'...
[INFO] [stderr] done.
[INFO] started tweaking git repo https://github.com/lprior-repo/docker-claude
[INFO] finished tweaking git repo https://github.com/lprior-repo/docker-claude
[INFO] tweaked toml for git repo https://github.com/lprior-repo/docker-claude written to /workspace/builds/worker-4-tc2/source/Cargo.toml
[INFO] validating manifest of git repo https://github.com/lprior-repo/docker-claude on toolchain dec9417b8611e34e787a3e4c37686b5131f9e5c5
[INFO] running `Command { std: CARGO_HOME="/workspace/cargo-home" RUSTUP_HOME="/workspace/rustup-home" "/workspace/cargo-home/bin/cargo" "+dec9417b8611e34e787a3e4c37686b5131f9e5c5" "metadata" "--manifest-path" "Cargo.toml" "--no-deps", kill_on_drop: false }`
[INFO] crate git repo https://github.com/lprior-repo/docker-claude already has a lockfile, it will not be regenerated
[INFO] running `Command { std: CARGO_HOME="/workspace/cargo-home" RUSTUP_HOME="/workspace/rustup-home" "/workspace/cargo-home/bin/cargo" "+dec9417b8611e34e787a3e4c37686b5131f9e5c5" "fetch" "--manifest-path" "Cargo.toml", kill_on_drop: false }`
[INFO] [stderr]     Blocking waiting for file lock on package cache
[ERROR] error running command: no output for 300 seconds
[INFO] testing lprior-repo/docker-claude against try#dec9417b8611e34e787a3e4c37686b5131f9e5c5 for pr-154210-1
[INFO] running `Command { std: "git" "clone" "/workspace/cache/git-repos/https%3A%2F%2Fgithub.com%2Flprior-repo%2Fdocker-claude" "/workspace/builds/worker-4-tc2/source", kill_on_drop: false }`
[INFO] [stderr] Cloning into '/workspace/builds/worker-4-tc2/source'...
[INFO] [stderr] done.
[INFO] started tweaking git repo https://github.com/lprior-repo/docker-claude
[INFO] finished tweaking git repo https://github.com/lprior-repo/docker-claude
[INFO] tweaked toml for git repo https://github.com/lprior-repo/docker-claude written to /workspace/builds/worker-4-tc2/source/Cargo.toml
[INFO] validating manifest of git repo https://github.com/lprior-repo/docker-claude on toolchain dec9417b8611e34e787a3e4c37686b5131f9e5c5
[INFO] running `Command { std: CARGO_HOME="/workspace/cargo-home" RUSTUP_HOME="/workspace/rustup-home" "/workspace/cargo-home/bin/cargo" "+dec9417b8611e34e787a3e4c37686b5131f9e5c5" "metadata" "--manifest-path" "Cargo.toml" "--no-deps", kill_on_drop: false }`
[INFO] crate git repo https://github.com/lprior-repo/docker-claude already has a lockfile, it will not be regenerated
[INFO] running `Command { std: CARGO_HOME="/workspace/cargo-home" RUSTUP_HOME="/workspace/rustup-home" "/workspace/cargo-home/bin/cargo" "+dec9417b8611e34e787a3e4c37686b5131f9e5c5" "fetch" "--manifest-path" "Cargo.toml", kill_on_drop: false }`
[INFO] [stderr]     Blocking waiting for file lock on package cache
[INFO] [stderr]     Blocking waiting for file lock on package cache
[INFO] [stderr]  Downloading crates ...
[INFO] [stderr]   Downloaded which v7.0.3
[INFO] [stderr]   Downloaded linux-keyutils v0.2.4
[INFO] [stderr]   Downloaded keyring v3.6.3
[INFO] running `Command { std: "docker" "create" "-v" "/var/lib/crater-agent-workspace/builds/worker-4-tc2/target:/opt/rustwide/target:rw,Z" "-v" "/var/lib/crater-agent-workspace/builds/worker-4-tc2/source:/opt/rustwide/workdir:ro,Z" "-v" "/var/lib/crater-agent-workspace/cargo-home:/opt/rustwide/cargo-home:ro,Z" "-v" "/var/lib/crater-agent-workspace/rustup-home:/opt/rustwide/rustup-home:ro,Z" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-w" "/opt/rustwide/workdir" "-m" "1610612736" "--user" "0:0" "--network" "none" "ghcr.io/rust-lang/crates-build-env/linux@sha256:d429b63d4308055ea97f60fb1d3dfca48854a00942f1bd2ad806beaf015945ec" "/opt/rustwide/cargo-home/bin/cargo" "+dec9417b8611e34e787a3e4c37686b5131f9e5c5" "metadata" "--no-deps" "--format-version=1", kill_on_drop: false }`
[INFO] [stdout] 3b9139920f21112fe232d074b7173d520fb00cdda7d5df4e8c1daf900b790407
[INFO] running `Command { std: "docker" "start" "-a" "3b9139920f21112fe232d074b7173d520fb00cdda7d5df4e8c1daf900b790407", kill_on_drop: false }`
[INFO] running `Command { std: "docker" "inspect" "3b9139920f21112fe232d074b7173d520fb00cdda7d5df4e8c1daf900b790407", kill_on_drop: false }`
[INFO] running `Command { std: "docker" "rm" "-f" "3b9139920f21112fe232d074b7173d520fb00cdda7d5df4e8c1daf900b790407", kill_on_drop: false }`
[INFO] [stdout] 3b9139920f21112fe232d074b7173d520fb00cdda7d5df4e8c1daf900b790407
[INFO] running `Command { std: "docker" "create" "-v" "/var/lib/crater-agent-workspace/builds/worker-4-tc2/target:/opt/rustwide/target:rw,Z" "-v" "/var/lib/crater-agent-workspace/builds/worker-4-tc2/source:/opt/rustwide/workdir:ro,Z" "-v" "/var/lib/crater-agent-workspace/cargo-home:/opt/rustwide/cargo-home:ro,Z" "-v" "/var/lib/crater-agent-workspace/rustup-home:/opt/rustwide/rustup-home:ro,Z" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_INCREMENTAL=0" "-e" "RUST_BACKTRACE=full" "-e" "RUSTFLAGS=--cap-lints=forbid" "-e" "RUSTDOCFLAGS=--cap-lints=forbid" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-w" "/opt/rustwide/workdir" "-m" "1610612736" "--user" "0:0" "--network" "none" "ghcr.io/rust-lang/crates-build-env/linux@sha256:d429b63d4308055ea97f60fb1d3dfca48854a00942f1bd2ad806beaf015945ec" "/opt/rustwide/cargo-home/bin/cargo" "+dec9417b8611e34e787a3e4c37686b5131f9e5c5" "build" "--frozen" "--message-format=json", kill_on_drop: false }`
[INFO] [stdout] 92603d775565b07459e7b5ff9c6c3f3a8008eef1cc337d17dd790f98ff438b01
[INFO] running `Command { std: "docker" "start" "-a" "92603d775565b07459e7b5ff9c6c3f3a8008eef1cc337d17dd790f98ff438b01", kill_on_drop: false }`
[INFO] [stderr]    Compiling rustix v1.1.4
[INFO] [stderr]    Compiling anstream v0.6.21
[INFO] [stderr]    Compiling syn v2.0.117
[INFO] [stderr]    Compiling linux-keyutils v0.2.4
[INFO] [stderr]    Compiling log v0.4.29
[INFO] [stderr]    Compiling env_home v0.1.0
[INFO] [stderr]    Compiling serde_json v1.0.149
[INFO] [stderr]    Compiling colored v3.1.1
[INFO] [stderr]    Compiling clap_builder v4.5.60
[INFO] [stderr]    Compiling keyring v3.6.3
[INFO] [stderr]    Compiling which v7.0.3
[INFO] [stderr]    Compiling serde_derive v1.0.228
[INFO] [stderr]    Compiling clap_derive v4.5.55
[INFO] [stderr]    Compiling clap v4.5.60
[INFO] [stderr]    Compiling serde v1.0.228
[INFO] [stderr]    Compiling claude-dock v0.1.0 (/opt/rustwide/workdir)
[INFO] [stderr]     Finished `dev` profile [unoptimized + debuginfo] target(s) in 9.33s
[INFO] running `Command { std: "docker" "inspect" "92603d775565b07459e7b5ff9c6c3f3a8008eef1cc337d17dd790f98ff438b01", kill_on_drop: false }`
[INFO] running `Command { std: "docker" "rm" "-f" "92603d775565b07459e7b5ff9c6c3f3a8008eef1cc337d17dd790f98ff438b01", kill_on_drop: false }`
[INFO] [stdout] 92603d775565b07459e7b5ff9c6c3f3a8008eef1cc337d17dd790f98ff438b01
[INFO] running `Command { std: "docker" "create" "-v" "/var/lib/crater-agent-workspace/builds/worker-4-tc2/target:/opt/rustwide/target:rw,Z" "-v" "/var/lib/crater-agent-workspace/builds/worker-4-tc2/source:/opt/rustwide/workdir:ro,Z" "-v" "/var/lib/crater-agent-workspace/cargo-home:/opt/rustwide/cargo-home:ro,Z" "-v" "/var/lib/crater-agent-workspace/rustup-home:/opt/rustwide/rustup-home:ro,Z" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_INCREMENTAL=0" "-e" "RUST_BACKTRACE=full" "-e" "RUSTFLAGS=--cap-lints=forbid" "-e" "RUSTDOCFLAGS=--cap-lints=forbid" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-w" "/opt/rustwide/workdir" "-m" "1610612736" "--user" "0:0" "--network" "none" "ghcr.io/rust-lang/crates-build-env/linux@sha256:d429b63d4308055ea97f60fb1d3dfca48854a00942f1bd2ad806beaf015945ec" "/opt/rustwide/cargo-home/bin/cargo" "+dec9417b8611e34e787a3e4c37686b5131f9e5c5" "test" "--frozen" "--no-run" "--message-format=json", kill_on_drop: false }`
[INFO] [stdout] 1c99a62b47aaca22310c1e15eda57dfaa1e90346039d0ac71b7a74e7e89db288
[INFO] running `Command { std: "docker" "start" "-a" "1c99a62b47aaca22310c1e15eda57dfaa1e90346039d0ac71b7a74e7e89db288", kill_on_drop: false }`
[INFO] [stderr]    Compiling claude-dock v0.1.0 (/opt/rustwide/workdir)
[INFO] [stdout] warning: function `zai_config` is never used
[INFO] [stdout]   --> src/security_tests.rs:46:4
[INFO] [stdout]    |
[INFO] [stdout] 46 | fn zai_config() -> ProfileConfig {
[INFO] [stdout]    |    ^^^^^^^^^^
[INFO] [stdout]    |
[INFO] [stdout]    = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default
[INFO] [stdout] 
[INFO] [stdout] 
[INFO] [stdout] warning: function `vol_values` is never used
[INFO] [stdout]   --> src/validation_tests.rs:54:4
[INFO] [stdout]    |
[INFO] [stdout] 54 | fn vol_values(args: &[String]) -> Vec<&str> {
[INFO] [stdout]    |    ^^^^^^^^^^
[INFO] [stdout] 
[INFO] [stdout] 
[INFO] [stderr]     Finished `test` profile [unoptimized + debuginfo] target(s) in 1.24s
[INFO] running `Command { std: "docker" "inspect" "1c99a62b47aaca22310c1e15eda57dfaa1e90346039d0ac71b7a74e7e89db288", kill_on_drop: false }`
[INFO] running `Command { std: "docker" "rm" "-f" "1c99a62b47aaca22310c1e15eda57dfaa1e90346039d0ac71b7a74e7e89db288", kill_on_drop: false }`
[INFO] [stdout] 1c99a62b47aaca22310c1e15eda57dfaa1e90346039d0ac71b7a74e7e89db288
[INFO] running `Command { std: "docker" "create" "-v" "/var/lib/crater-agent-workspace/builds/worker-4-tc2/target:/opt/rustwide/target:rw,Z" "-v" "/var/lib/crater-agent-workspace/builds/worker-4-tc2/source:/opt/rustwide/workdir:ro,Z" "-v" "/var/lib/crater-agent-workspace/cargo-home:/opt/rustwide/cargo-home:ro,Z" "-v" "/var/lib/crater-agent-workspace/rustup-home:/opt/rustwide/rustup-home:ro,Z" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_INCREMENTAL=0" "-e" "RUST_BACKTRACE=full" "-e" "RUSTFLAGS=--cap-lints=forbid" "-e" "RUSTDOCFLAGS=--cap-lints=forbid" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-w" "/opt/rustwide/workdir" "-m" "1610612736" "--user" "0:0" "--network" "none" "ghcr.io/rust-lang/crates-build-env/linux@sha256:d429b63d4308055ea97f60fb1d3dfca48854a00942f1bd2ad806beaf015945ec" "/opt/rustwide/cargo-home/bin/cargo" "+dec9417b8611e34e787a3e4c37686b5131f9e5c5" "test" "--frozen", kill_on_drop: false }`
[INFO] [stdout] 1506510e99d0cf79771119849d0e6cbff9d4017a547dcbcb8fffe2314b312c2e
[INFO] running `Command { std: "docker" "start" "-a" "1506510e99d0cf79771119849d0e6cbff9d4017a547dcbcb8fffe2314b312c2e", kill_on_drop: false }`
[INFO] [stderr] warning: function `zai_config` is never used
[INFO] [stderr]   --> src/security_tests.rs:46:4
[INFO] [stderr]    |
[INFO] [stderr] 46 | fn zai_config() -> ProfileConfig {
[INFO] [stderr]    |    ^^^^^^^^^^
[INFO] [stderr]    |
[INFO] [stderr]    = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default
[INFO] [stderr] 
[INFO] [stderr] warning: function `vol_values` is never used
[INFO] [stderr]   --> src/validation_tests.rs:54:4
[INFO] [stderr]    |
[INFO] [stderr] 54 | fn vol_values(args: &[String]) -> Vec<&str> {
[INFO] [stderr]    |    ^^^^^^^^^^
[INFO] [stderr] 
[INFO] [stderr] warning: `claude-dock` (bin "claude-dock" test) generated 2 warnings
[INFO] [stderr]     Finished `test` profile [unoptimized + debuginfo] target(s) in 0.05s
[INFO] [stderr]      Running unittests src/main.rs (/opt/rustwide/target/debug/deps/claude_dock-bbf6a48fa782804d)
[INFO] [stdout] 
[INFO] [stdout] running 108 tests
[INFO] [stdout] test contract_tests::entrypoint_forwards_all_args ... ok
[INFO] [stdout] test contract_tests::cache_volume_name_format ... ok
[INFO] [stdout] test contract_tests::entrypoint_shell_uses_zsh ... ok
[INFO] [stdout] test contract_tests::entrypoint_runs_claude_directly ... ok
[INFO] [stdout] test contract_tests::anthropic_injects_no_secrets ... ok
[INFO] [stdout] test contract_tests::custom_memory_override ... ok
[INFO] [stdout] test contract_tests::home_env_set ... ok
[INFO] [stdout] test contract_tests::extra_mounts_allowed ... ok
[INFO] [stdout] test contract_tests::forwards_git_identity ... ok
[INFO] [stdout] test contract_tests::jj_mounted_readonly ... ok
[INFO] [stdout] test contract_tests::claude_config_mounted_writable ... ok
[INFO] [stdout] test contract_tests::launch_with_forwarded_args ... ok
[INFO] [stdout] test contract_tests::minimax_provider_injects_env_vars ... ok
[INFO] [stdout] test contract_tests::new_container_for_missing ... ok
[INFO] [stdout] test contract_tests::no_cache_uses_tmpfs ... ok
[INFO] [stdout] test contract_tests::provider_needs_auth_token ... ok
[INFO] [stdout] test contract_tests::print_mode_uses_non_tty ... ok
[INFO] [stdout] test contract_tests::port_forwarding ... ok
[INFO] [stdout] test contract_tests::reattach_attaches_to_existing_container ... ok
[INFO] [stdout] test contract_tests::resume_stopped_container ... ok
[INFO] [stdout] test contract_tests::sanitise_name ... ok
[INFO] [stdout] test contract_tests::suffixed_name_for_running_container ... ok
[INFO] [stdout] test contract_tests::validate_mount_allows_safe ... ok
[INFO] [stdout] test contract_tests::uid_gid_via_env_not_flag ... ok
[INFO] [stdout] test contract_tests::validate_mount_rejects_deep_path_traversal ... ok
[INFO] [stdout] test contract_tests::validate_mount_rejects_empty_host_path ... ok
[INFO] [stdout] test contract_tests::named_cache_volumes_by_default ... ok
[INFO] [stdout] test contract_tests::provider_rejects_unknown ... ok
[INFO] [stdout] test contract_tests::validate_mount_rejects_etc ... ok
[INFO] [stdout] test contract_tests::validate_mount_rejects_home ... ok
[INFO] [stdout] test contract_tests::validate_mount_rejects_opt ... ok
[INFO] [stdout] test contract_tests::validate_mount_rejects_path_traversal_to_etc ... ok
[INFO] [stdout] test contract_tests::validate_mount_rejects_proc ... ok
[INFO] [stdout] test contract_tests::validate_mount_rejects_root ... ok
[INFO] [stdout] test contract_tests::validate_mount_rejects_root_subdir ... ok
[INFO] [stdout] test contract_tests::validate_mount_rejects_tmp ... ok
[INFO] [stdout] test contract_tests::validate_mount_rejects_traversal_to_home ... ok
[INFO] [stdout] test contract_tests::validate_mount_rejects_var ... ok
[INFO] [stdout] test contract_tests::validate_port_normal ... ok
[INFO] [stdout] test contract_tests::validate_port_rejects_port_zero ... ok
[INFO] [stdout] test contract_tests::validate_port_rejects_privileged ... ok
[INFO] [stdout] test contract_tests::validate_port_rejects_privileged_host_port ... ok
[INFO] [stdout] test contract_tests::zai_provider_injects_env_vars ... ok
[INFO] [stdout] test keyring::tests::validate_profile_name_accepts_regular_names ... ok
[INFO] [stdout] test keyring::tests::validate_profile_name_rejects_empty_and_comma ... ok
[INFO] [stdout] test keyring::tests::validate_profile_name_rejects_reserved_names ... ok
[INFO] [stdout] test security_tests::security_anthropic_provider_never_exposes_keys ... ok
[INFO] [stdout] test security_tests::security_cap_drop_all_always_present ... ok
[INFO] [stdout] test security_tests::security_claude_dir_never_readonly ... ok
[INFO] [stdout] test security_tests::security_container_always_runs_as_nonroot ... ok
[INFO] [stdout] test security_tests::security_entrypoint_is_always_our_wrapper ... ok
[INFO] [stdout] test security_tests::security_entrypoint_never_calls_raw_claude ... ok
[INFO] [stdout] test security_tests::security_entrypoint_never_passes_shell_escape ... ok
[INFO] [stdout] test security_tests::security_dangerous_docker_flags_never_appear_in_args ... ok
[INFO] [stdout] test security_tests::security_gitconfig_always_readonly ... ok
[INFO] [stdout] test security_tests::security_memory_swap_equals_memory_prevents_host_swap ... ok
[INFO] [stdout] test security_tests::security_never_adds_dangerously_skip_permissions ... ok
[INFO] [stdout] test security_tests::security_never_mounts_git_credentials ... ok
[INFO] [stdout] test security_tests::security_never_mounts_private_keys ... ok
[INFO] [stdout] test security_tests::security_no_host_access_by_default ... ok
[INFO] [stdout] test security_tests::security_jj_always_readonly ... ok
[INFO] [stdout] test security_tests::security_never_mounts_ssh_private_dir ... ok
[INFO] [stdout] test security_tests::security_no_new_privileges_always_present ... ok
[INFO] [stdout] test security_tests::security_no_env_prevents_env_file_leak ... ok
[INFO] [stdout] test security_tests::security_no_root_dotfiles_mounted ... ok
[INFO] [stdout] test security_tests::security_no_tmpfs_overlay_for_claude_dir ... ok
[INFO] [stdout] test security_tests::security_no_uid_flag_on_command_line ... ok
[INFO] [stdout] test security_tests::security_nofile_limit_always_set ... ok
[INFO] [stdout] test security_tests::security_pids_limit_always_set ... ok
[INFO] [stdout] test security_tests::security_provider_keys_never_in_container_args_vector ... ok
[INFO] [stdout] test security_tests::security_host_home_never_root ... ok
[INFO] [stdout] test security_tests::security_read_only_always_present ... ok
[INFO] [stdout] test security_tests::security_resume_does_not_bypass_security ... ok
[INFO] [stdout] test security_tests::security_ssh_config_never_raw_mount ... ok
[INFO] [stdout] test validation_tests::adversarial_bind_mounts_never_include_host_dangerous_paths ... ok
[INFO] [stdout] test validation_tests::adversarial_agent_forwarding_args_correct_format ... ok
[INFO] [stdout] test validation_tests::adversarial_cache_uses_named_volumes_not_bind_mounts ... ok
[INFO] [stdout] test validation_tests::adversarial_container_env_never_exposes_provider_key ... ok
[INFO] [stdout] test validation_tests::adversarial_disable_nonessential_traffic_for_third_party ... ok
[INFO] [stdout] test validation_tests::adversarial_empty_memory_falls_back_to_safe_default ... ok
[INFO] [stdout] test validation_tests::adversarial_all_providers_set_base_url_before_auth_token ... ok
[INFO] [stdout] test validation_tests::adversarial_extra_mount_rejects_etc_shadow ... ok
[INFO] [stdout] test validation_tests::adversarial_double_dash_separator_isolates_claude_args ... ok
[INFO] [stdout] test validation_tests::adversarial_extra_mount_rejects_all_system_dirs ... ok
[INFO] [stdout] test validation_tests::adversarial_extra_mount_rejects_proc_self_environ ... ok
[INFO] [stdout] test validation_tests::adversarial_claude_args_cannot_inject_docker_flags ... ok
[INFO] [stdout] test validation_tests::adversarial_extra_mount_rejects_path_traversal ... ok
[INFO] [stdout] test validation_tests::adversarial_extra_mount_rejects_root_with_various_formats ... ok
[INFO] [stdout] test validation_tests::adversarial_host_access_adds_exact_string ... ok
[INFO] [stdout] test validation_tests::adversarial_extra_mount_rejects_subdirs_of_system_dirs ... ok
[INFO] [stdout] test validation_tests::adversarial_host_access_is_truly_off_by_default ... ok
[INFO] [stdout] test validation_tests::adversarial_image_appears_before_double_dash ... ok
[INFO] [stdout] test validation_tests::adversarial_launch_plan_missing_creates_new_container ... ok
[INFO] [stdout] test validation_tests::adversarial_launch_plan_running_creates_suffixed_container ... ok
[INFO] [stdout] test validation_tests::adversarial_no_cache_produces_no_volume_refs ... ok
[INFO] [stdout] test validation_tests::adversarial_memory_limit_clamps_zero_to_minimum ... ok
[INFO] [stdout] test validation_tests::adversarial_no_gpu_by_default ... ok
[INFO] [stdout] test validation_tests::adversarial_port_handles_malformed_gracefully ... ok
[INFO] [stdout] test validation_tests::adversarial_port_accepts_nonprivileged ... ok
[INFO] [stdout] test validation_tests::adversarial_project_dir_always_mounted_at_app ... ok
[INFO] [stdout] test validation_tests::adversarial_port_rejects_ssh_http_https ... ok
[INFO] [stdout] test validation_tests::adversarial_provider_env_never_overwrites_security ... ok
[INFO] [stdout] test validation_tests::adversarial_port_rejects_all_privileged ... ok
[INFO] [stdout] test validation_tests::adversarial_ssh_config_strips_new_dangerous_directives ... ok
[INFO] [stdout] test validation_tests::adversarial_ssh_config_sanitization_strips_proxycommand ... ok
[INFO] [stdout] test validation_tests::adversarial_ssh_config_empty_after_sanitization_returns_none ... ok
[INFO] [stdout] test validation_tests::adversarial_ssh_config_sanitized_path_no_slashes ... ok
[INFO] [stdout] test contract_tests::probe_missing_container ... ok
[INFO] [stdout] 
[INFO] [stdout] test result: ok. 108 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.26s
[INFO] [stdout] 
[INFO] running `Command { std: "docker" "inspect" "1506510e99d0cf79771119849d0e6cbff9d4017a547dcbcb8fffe2314b312c2e", kill_on_drop: false }`
[INFO] running `Command { std: "docker" "rm" "-f" "1506510e99d0cf79771119849d0e6cbff9d4017a547dcbcb8fffe2314b312c2e", kill_on_drop: false }`
[INFO] [stdout] 1506510e99d0cf79771119849d0e6cbff9d4017a547dcbcb8fffe2314b312c2e