[Context Engine] Security, performance, hostile-workspace and physical QA #321

Activity

1. raiseCatError commented on Oct 7, 2026

   

   raiseCatError

   on Oct 7, 2026

   OwnerAuthor

   More actions

   Physical QA checkpoint — Ghostty 1.3.1, macOS

   These are human observations only. Tests 1, 2 and 7 have no recorded observation and aren't reported here.

   Terminal title

   • Test 3 — FAIL. With Project and session on, after /rename QA Ghostty still showed notMyShell, not notMyShell — QA.
   • Test 4 — FAIL. Project title + Vim: after :q the title stayed "Thanks for flying Vim" until a later redraw (e.g. cd).
   • Test 5 — PASS. less README.md; title staying notMyShell is acceptable; q exits cleanly.
   • Test 6 — Security PASS / presentation FAIL. For cd /tmp/$'evil\e]0;PWNED\a' the OSC did not execute or take over the title, but the title showed debris: evil�]0;PWNED.
   • Test 8 — N/A (no Ghostty prompt-jump binding configured).

   Open in pager

   • Test 9 — PASS. seq 1 5000 → block action → Open in pager → full output in less; G reaches the end.
   • Test 10 — PASS. Resizing while less was open reflowed it; q restored NMSh and the shell kept working.
   • Note: F1 did not visibly open the palette; /palette and block actions work. Audit: com.apple.keyboard.fnState is unset on this Mac, so the top row sends media keys unless Fn is held. NMSh decodes ESC O P, CSI 11~ and (from Status Strip 2.0, module manager UX, and Ghostty physical-QA fixes #328) the kitty-protocol CSI P. Not yet re-tested with Fn+F1.

   Prompt / modules

   • Test 11 — functional PASS (Modules/Catalog/Packs, Enter → details with reads/history/freshness). UX: Space silently did nothing when nothing was recommendable.
   • Test 12 — functional PASS (narrow: no overlap). UX: details truncated instead of wrapping; the two-line preview dominated narrow panels.
   • Test 13 — PASS (NO_COLOR=1).
   • Test 14 — PASS (Safe glyphs).
   • Test 15 — PASS (module routed to the Status Strip appears there). UX: no / search; saving required leaving Modules and saving /prompt; no direct /modules; external prompt providers made the module subsystem look dead.

   tmux (fresh tmux new -s qa inside Ghostty, ./bin/nmsh)

   • Tests 16, 17, 18 — PASS. tmux's status bar stayed intact and separate from NMSh's Status Strip; Vim/less entered and exited cleanly; Ctrl-b d then tmux attach -t qa restored NMSh intact.
   • New defect: with NMSh owning the pane, the mouse wheel did not scroll the transcript. It cycled previous commands in the composer (like Up/Down), which can change the command being composed.

   Not yet performed: Terminal.app subset; Claude Code bridge physical test.

   Fixes for tests 3, 4, 6 (presentation), the tmux wheel defect and the module UX findings are in #328 (not merged). Each needs a physical re-test before it can count as passing. Keeping this issue open.
2. raiseCatError commented on Oct 7, 2026

   

   raiseCatError

   on Oct 7, 2026

   OwnerAuthor

   More actions

   Physical QA update — Ghostty / tmux (human observations), plus pending retests

   PASS (human, this pass):

   • F1 via normal F1 on an external Windows keyboard on macOS (Fn+F1 not applicable to that keyboard)
   • Project + session title after /rename; Vim title restoration; terminal title for the hostile directory (evil)
   • tmux wheel scrolls the transcript with mouse off and mouse on; composer stays unchanged while scrolling
   • tmux copy mode, Vim/less passthrough under tmux, detach/reattach
   • /modules search/save/Tab; /prompt → Modules draft/apply; narrow module details
   • Status Strip 2.0: Top/Bottom, Left/Center/Right, Plain/Powerline, presets + undo, Safe glyphs / NO_COLOR, Bottom strip above tmux's own status line, passthrough hide/restore, resizing

   Hostile cwd (mkdir -p /tmp/$'evil\e]0;PWNED\a'; cd …):

   • security PASS (no injection); terminal title PASS
   • NMSh prompt presentation was FAIL (evil�]0;PWNED). Fixed in Status Strip 2.0, module manager UX, and Ghostty physical-QA fixes #328 (6818e73); awaiting physical retest

   Cursor under Ghostty → tmux → NMSh: physical FAIL (rapid, irregular flicker while idle). Root cause measured; fixed in #328 (4ea9c0a). Automated measurement only; awaiting physical retest.

   Not performed yet: Terminal.app subset, Claude Code bridge. Keeping this issue open.
3. raiseCatError commented on Oct 8, 2026

   

   raiseCatError

   on Oct 8, 2026

   OwnerAuthor

   More actions

   Future roadmap QA boundaries

   #330 and children #331–#341 are future specifications, not implemented work or new passing QA evidence. Their issues require separate physical keyboard/focus/resize/passthrough, Safe/NO_COLOR and relevant host/tmux validation after implementation. #333 adds future multi-instance tmux publication/performance evidence; #341 has an independent executable-mod isolation gate, not a claim covered by existing Context Engine tests.

   Current #328 fixes/retests remain here unchanged. #329 remains paused until #328 lands. No existing FAIL/pending result is reclassified and no issue is closed.
4. raiseCatError

   added

   status:needs-human-qa

   on Oct 18, 2026