fix: validate Wafter formatters on current Jerboa #7

Merged

ober merged 7 commits from ai/repair-pr-3-20260919T200849Z into master

2026-09-19 18:21:40 -04:00

ober commented

2026-09-19 17:19:57 -04:00

Owner

Replaces #3 after porting its formatter validation onto current master and the published Jerboa v0.12.10 runtime.

The repair:

keeps the formatter edge-case coverage from the original change;
locks current per-platform Jerboa release artifacts and verifies the selected runtime bundle;
uses the explicit unsafe-prelude compatibility boundary for Wafter's legacy scripts instead of rewriting generated dissectors;
updates dynamic-load regression assertions to call only specifically named reviewed bindings through top-level-value, without general eval;
keeps golden child invocations on the same explicit compatibility boundary;
updates security checks for the current locked-runtime and native pcap layout.

Verification:

./.forgejo/ci-required.sh

This passed locally, including security scanning, all regressions and fuzz smoke tests, Rust advisory audits, standalone binary build, binary hardening checks, and runtime smoke checks.

Replaces #3 after porting its formatter validation onto current `master` and the published Jerboa v0.12.10 runtime. The repair: - keeps the formatter edge-case coverage from the original change; - locks current per-platform Jerboa release artifacts and verifies the selected runtime bundle; - uses the explicit unsafe-prelude compatibility boundary for Wafter's legacy scripts instead of rewriting generated dissectors; - updates dynamic-load regression assertions to call only specifically named reviewed bindings through `top-level-value`, without general `eval`; - keeps golden child invocations on the same explicit compatibility boundary; - updates security checks for the current locked-runtime and native pcap layout. Verification: - `./.forgejo/ci-required.sh` This passed locally, including security scanning, all regressions and fuzz smoke tests, Rust advisory audits, standalone binary build, binary hardening checks, and runtime smoke checks.

ober added 3 commits

2026-09-19 17:19:58 -04:00