@outerlayer/cli 0.34.0-next.20261026145838 → 0.34.0-next.20261026182624

package/dist/{chunk-AE3OTPUU.js → chunk-SZU4YCBH.js}

@@ -1,45 +1,65 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { readsJobState, READ_JOB_STATE_FORMATS, jobStateFormatOf } from './chunk-ZVB57WI6.js';
-import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-63IVRRIO.js';
+import { itemsSentence, criteriaOf, hostItemsOf, loadCitationFinder, MAX_TEST_FILE_BYTES, MAX_TEST_FILES, criterionInputs, planCriteria, parseJudgeAnswer, inCriteriaOrder, oneLineReason, judgedItems } from './chunk-6D7H5DMZ.js';
+import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-P3NPTFLF.js';
 import { zodProblem } from './chunk-I3LTIAOR.js';
-import { senderPidfile } from './chunk-SKVA4KWD.js';
-import { installScrubContext } from './chunk-XTYYF6P7.js';
-import { writeDockerClientConfig } from './chunk-SI6WDF3U.js';
+import { senderPidfile } from './chunk-LD3BHLK7.js';
+import { installScrubContext } from './chunk-VUQKGBIQ.js';
+import { writeDockerClientConfig } from './chunk-CFFVCI2I.js';
 import { upgradedStarterText } from './chunk-XKJOIQ2Q.js';
-import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, hasClaudeCredential, AssetError, obtainImage, ensureRootfs, makeBuildsDirPrivate, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, startJailedInto, resolveAgentUser, AgentUserError, runBuildSteps, startHostServices, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, closeHostBuild, dropManagedClaudeKey, containerSenderCommand, hostCommandEnvironment, execArgv, signalInContainer, syncInContainer, copyTranscriptsFromContainer, MANAGED_UNJAILED_REASON, senderAliveScript, helperFirecrackerNote, managedClaudeKeyValues, stopJailed, deleteBuildDisk, managedClaudeKeyFor, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, ROOT_DISK_ID_PREFIX, copyJudgeTree } from './chunk-7P3H4RY2.js';
-import { readBranchHead, fetchCommit, diffBetween } from './chunk-VVOSUGEF.js';
-import { waitForAgent, vmExecArgs } from './chunk-2ILU7UAU.js';
-import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-OGPEHSNW.js';
-import { describeCallFailure, resolveGoverningSource, prefetchGovernedContext, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, WORKFLOW_PERMISSION_REASON, keptContextTree } from './chunk-PP6OX4OT.js';
-import { imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-3EHDZTRT.js';
-import { DEFAULT_CACHE_DISK, formatBytes, allocatedBytes } from './chunk-UONH72CJ.js';
-import { parseSize, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-M3ME6TLQ.js';
+import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, hasClaudeCredential, AssetError, obtainImage, ensureRootfs, makeBuildsDirPrivate, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, startJailedInto, resolveAgentUser, AgentUserError, runBuildSteps, createContainerRuntime, containerSenderCommand, hostCommandEnvironment, execArgv, signalInContainer, startHostServices, LEASE_SECONDS, managedBuildSettingsFor, stopContainer, cleanupContainer, outOfMemoryReason, closeHostBuild, dropManagedClaudeKey, dropManagedBuildSettings, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, syncInContainer, copyTranscriptsFromContainer, MANAGED_UNJAILED_REASON, senderAliveScript, managedMachineLimits, withFactoryHosts, helperFirecrackerNote, managedClaudeKeyValues, managedBuildSettingValues, stopJailed, deleteBuildDisk, managedClaudeKeyFor, ROOT_DISK_ID_PREFIX, copyTranscripts, containerJudgeEnvironment, senderSignalScript, copyJudgeTree } from './chunk-CNZRUVZ5.js';
+import { fetchCommit, readBranchHead, diffBetween } from './chunk-H47VGSCW.js';
+import { waitForAgent, vmExecArgs } from './chunk-3VZTNXK5.js';
+import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-6KFJIU73.js';
+import { describeCallFailure, resolveGoverningSource, prefetchGovernedContext, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, keptContextTree, WORKFLOW_PERMISSION_REASON } from './chunk-EPFFYDNX.js';
+import { imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-ZIKZZ4LK.js';
+import { formatBytes, DEFAULT_CACHE_DISK, allocatedBytes } from './chunk-IWVGALDC.js';
+import { HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, parseSize, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-HVQMIZ22.js';
 import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-4UPET3R7.js';
 import { isSameProcess, startTimeOf } from './chunk-JBJTC3UU.js';
-import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-6JZXIWX7.js';
+import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-JKNOJKVD.js';
 import { planArtifactUpload } from './chunk-MECW77XP.js';
 import { readCloudConfig } from './chunk-PJDQPF5N.js';
-import { signerFor } from './chunk-MOI2KDLH.js';
-import { resolvePackRoot, AGENTS_SKILLS_BASE, OUTERLAYER_SKILLS_BASE } from './chunk-ZQSANKS4.js';
-import { scrubText } from './chunk-GSSVJNP2.js';
+import { signerFor } from './chunk-L5VHGRQE.js';
+import { AGENTS_SKILLS_BASE, OUTERLAYER_SKILLS_BASE, resolvePackRoot } from './chunk-ZQSANKS4.js';
+import { scrubText } from './chunk-Z7WMU3RA.js';
 import { MAINTAINED_SKILLS } from './chunk-CDDED64E.js';
 import { resolveVersion } from './chunk-RA3O54FC.js';
 import { parsePolicy } from './chunk-FGXT5OXS.js';
-import { CheckItemsSchema, CHECK_ITEM_REASON_MAX_LENGTH } from './chunk-EOTMDIYC.js';
+import { CheckItemsSchema } from './chunk-EOTMDIYC.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
-import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath, jobConsolePath } from './chunk-PXGU3GKY.js';
-import { JOB_MOUNT, repositoriesOf, primaryOf, buildEnvironment, CHECKOUT_DIR, claudeCredential, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, authorEnvironment, withTunnelRecord, commitIdentityRecord, fdName, buildMavenSettingsXml, CLAUDE_CREDENTIAL_VARIABLES, currentClaudeCredential, removedClaudeCredentialValues, managedClaudeCredential, RELAY_PORT, repositoryPath, lifecycleWorkdir, CHECK_ITEMS_FILE, MAVEN_SETTINGS_FILE, checkEnvironment, EVAL_INPUT_DIR } from './chunk-G4W4B33M.js';
+import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath, jobConsolePath } from './chunk-GJ4KBHBD.js';
+import { JOB_MOUNT, repositoriesOf, primaryOf, buildEnvironment, CHECKOUT_DIR, claudeCredential, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, authorEnvironment, withTunnelRecord, commitIdentityRecord, RELAY_PORT, repositoryPath, lifecycleWorkdir, CHECK_ITEMS_FILE, fdName, buildMavenSettingsXml, CLAUDE_CREDENTIAL_VARIABLES, currentClaudeCredential, removedClaudeCredentialValues, managedClaudeCredential, checkEnvironment, MAVEN_SETTINGS_FILE, EVAL_INPUT_DIR } from './chunk-SDAEXUIX.js';
 import { RUNNER_WORDED_REASONS, UNKNOWN_TRACKING_REASON } from './chunk-MESOOLF4.js';
-import { existsSync, statSync, appendFileSync, rmSync, mkdirSync, chmodSync, writeFileSync, openSync, readFileSync, closeSync, readdirSync, lstatSync, fstatSync, readSync, realpathSync } from 'fs';
+import { randomBytes, createHash } from 'crypto';
+import { rmSync, existsSync, statSync, appendFileSync, mkdirSync, chmodSync, writeFileSync, openSync, closeSync, readFileSync, readdirSync, lstatSync, realpathSync, fstatSync, readSync } from 'fs';
 import { join, dirname, delimiter, sep } from 'path';
+import { spawn, spawnSync } from 'child_process';
 import { once } from 'events';
 import { createServer } from 'net';
-import { spawn, spawnSync } from 'child_process';
-import { randomBytes, createHash } from 'crypto';
-import { pathToFileURL } from 'url';
 
 createRequire(import.meta.url);
+async function serveLease(socketPath, channel, makeServer = createServer, listenOn) {
+  const server = makeServer((socket) => channel.accept(socket));
+  if (listenOn === void 0) {
+    rmSync(socketPath, { force: true });
+    server.listen(socketPath);
+    await once(server, "listening");
+  } else {
+    await listenOn(server);
+  }
+  server.on("error", () => void 0);
+  return {
+    ...channel,
+    listener: server,
+    close() {
+      channel.close();
+      server.close();
+      rmSync(socketPath, { force: true });
+    }
+  };
+}
 var PROBE_TIMEOUT_MS = 3e4;
 var PROBE_BYTES = 256 * 1024;
 function probeScript(dir, alive) {
@@ -104,26 +124,6 @@ function judgeProbe(probe, missedBefore) {
   if (probe.alive) return { kind: "running" };
   return missedBefore ? { kind: "lost" } : { kind: "recheck" };
 }
-async function serveLease(socketPath, channel, makeServer = createServer, listenOn) {
-  const server = makeServer((socket) => channel.accept(socket));
-  if (listenOn === void 0) {
-    rmSync(socketPath, { force: true });
-    server.listen(socketPath);
-    await once(server, "listening");
-  } else {
-    await listenOn(server);
-  }
-  server.on("error", () => void 0);
-  return {
-    ...channel,
-    listener: server,
-    close() {
-      channel.close();
-      server.close();
-      rmSync(socketPath, { force: true });
-    }
-  };
-}
 
 // src/runner/microvm/command-state.ts
 var MICROVM_COMMAND_DIR = "/build/.command";
@@ -175,6 +175,8 @@ async function stopMicroVmCommand(runtime, state) {
     (signal) => runtime.vm.exec(state.vsockPath, { argv: ["/bin/sh", "-c", STOP_COMMAND_SCRIPT], user: "root", cwd: "/", env: { PATH: GUEST_PATH } }, { signal })
   );
 }
+
+// src/runner/microvm/hooks.ts
 var MANAGED_NO_BUILDER_DISK_REASON = "this release of the CLI pins no builder root disk, and a managed runner builds its images in a builder microVM, never on the host. The build did not start; update the CLI";
 var DEFAULT_MEMORY = "8g";
 var DEFAULT_DISK = "40g";
@@ -193,6 +195,37 @@ var GUEST_MAVEN_DIR = `${JOB_MOUNT}/maven`;
 function buildMemoryBytes(config) {
   return parseSize(config.build?.memory ?? DEFAULT_MEMORY) ?? parseSize(DEFAULT_MEMORY);
 }
+function machineLimits(config, jobDir) {
+  const settings = managedBuildSettingsFor(jobDir);
+  if (settings !== void 0) return managedMachineLimits(settings);
+  return {
+    cpus: config.build?.cpus ?? DEFAULT_CPUS,
+    memoryBytes: buildMemoryBytes(config),
+    diskBytes: parseSize(config.build?.disk ?? DEFAULT_DISK) ?? parseSize(DEFAULT_DISK)
+  };
+}
+function recordedLimits(limits) {
+  return { memoryBytes: limits.memoryBytes, diskBytes: limits.diskBytes };
+}
+function memoryTextOf(config, jobDir, limits) {
+  return managedBuildSettingsFor(jobDir) === void 0 ? config.build?.memory : `${limits.memoryBytes / 1024 ** 3}g`;
+}
+function builderMachineFor(config, jobDir, assets, limits) {
+  return {
+    kernel: assets.kernel,
+    firecracker: assets.firecracker,
+    limits: { ...limits, cacheDiskBytes: parseSize(config.build?.cacheDisk ?? DEFAULT_CACHE_DISK) ?? parseSize(DEFAULT_CACHE_DISK) },
+    memory: memoryTextOf(config, jobDir, limits),
+    allowHosts: withFactoryHosts(config.build?.allowHosts, managedBuildSettingsFor(jobDir)),
+    managed: config.managed === true,
+    timeLimitMinutes: config.timeLimitMinutes
+  };
+}
+function factoryVariablesOf(config, jobDir) {
+  const held = managedBuildSettingsFor(jobDir)?.variables;
+  if (held !== void 0) return held;
+  return config.managed === true ? [] : void 0;
+}
 function firstLine(text2) {
   return text2.trim().split("\n")[0] ?? "";
 }
@@ -327,11 +360,8 @@ async function provisionMicroVm(input) {
     });
     if (unfetched !== void 0) return fail(unfetched);
   }
-  const limits = {
-    cpus: config.build?.cpus ?? DEFAULT_CPUS,
-    memoryBytes: buildMemoryBytes(config),
-    diskBytes: parseSize(config.build?.disk ?? DEFAULT_DISK) ?? parseSize(DEFAULT_DISK)
-  };
+  const limits = machineLimits(config, jobDir);
+  const memoryText = memoryTextOf(config, jobDir, limits);
   let buildsInBuilder = imageBuildOf(config) === "vm";
   if (buildsInBuilder && !vm.builderDiskPinned()) {
     if (config.managed === true) return fail(MANAGED_NO_BUILDER_DISK_REASON);
@@ -351,17 +381,7 @@ async function provisionMicroVm(input) {
     deadlineMs: input.deadlineMs,
     now: input.now,
     guestHelper: { path: assets.helper, sha256: assets.helperSha256 },
-    ...buildsInBuilder ? {
-      inBuilder: {
-        kernel: assets.kernel,
-        firecracker: assets.firecracker,
-        limits: { ...limits, cacheDiskBytes: parseSize(config.build?.cacheDisk ?? DEFAULT_CACHE_DISK) ?? parseSize(DEFAULT_CACHE_DISK) },
-        memory: config.build?.memory,
-        allowHosts: config.build?.allowHosts,
-        managed: config.managed === true,
-        timeLimitMinutes: config.timeLimitMinutes
-      }
-    } : {}
+    ...buildsInBuilder ? { inBuilder: builderMachineFor(config, jobDir, assets, limits) } : {}
   });
   if (!obtained.ok) return obtained.aborted === true ? { ok: false, reason: obtained.reason, aborted: true } : fail(obtained.reason);
   const { report } = obtained.built;
@@ -375,6 +395,7 @@ async function provisionMicroVm(input) {
     imageId: report.imageId,
     containerEnv: report.apply.containerEnv,
     builtIns: true,
+    limits: recordedLimits(limits),
     lifecycle: report.apply.lifecycle,
     ...governingSource.kind === "governed" ? { governing: { repository: governingSource.repository, ref: governingSource.ref, commit: governingSource.sha } } : {},
     ...report.docker === true ? { docker: true } : {}
@@ -387,7 +408,8 @@ async function provisionMicroVm(input) {
     repositories,
     hostEnv: runtime.hostEnv,
     containerEnv: report.apply.containerEnv,
-    builtIns: true
+    builtIns: true,
+    factoryVariables: factoryVariablesOf(config, jobDir)
   };
   const env = buildEnvironment(envInput);
   if (env.skippedTokenVariables.length > 0) {
@@ -406,7 +428,7 @@ async function provisionMicroVm(input) {
     let why = reason;
     if (!aborted && (state.cgroup !== void 0 || state.jailed !== void 0)) {
       try {
-        if (await microVmOomKills(runtime, state) > 0) why = outOfMemoryReason(config.build?.memory);
+        if (await microVmOomKills(runtime, state) > 0) why = outOfMemoryReason(memoryText);
       } catch (err) {
         log.error(`${tag} could not read the build's memory events: ${describeCallFailure(err)} \xB7 continuing`);
       }
@@ -425,7 +447,7 @@ async function provisionMicroVm(input) {
     imageConfig = { env: madeInBuilder.env, user: madeInBuilder.user };
   } else {
     try {
-      state.rootfs = await ensureRootfs({ host: vm.rootfs, runnerDir: runnerDirPath, imageId: report.imageId, memoryBytes: buildMemoryBytes(config) });
+      state.rootfs = await ensureRootfs({ host: vm.rootfs, runnerDir: runnerDirPath, imageId: report.imageId, memoryBytes: limits.memoryBytes });
       imageConfig = await vm.rootfs.imageConfig(report.imageId);
     } catch (err) {
       return bail(`the image could not be converted to a root disk: ${describeCallFailure(err)}`);
@@ -678,7 +700,8 @@ function vmExecFor(input, argv) {
     containerEnv: state.containerEnv ?? {},
     builtIns: state.builtIns === true,
     identity: input.job.commitIdentity,
-    imageEnv: state.imageEnv
+    imageEnv: state.imageEnv,
+    factoryVariables: factoryVariablesOf(input.config, input.jobDir)
   });
   const options = {
     socket: state.vsockPath,
@@ -707,7 +730,8 @@ async function startMicroVmCommand(input) {
     containerEnv: state.containerEnv ?? {},
     builtIns: state.builtIns === true,
     identity: input.job.commitIdentity,
-    imageEnv: state.imageEnv
+    imageEnv: state.imageEnv,
+    factoryVariables: factoryVariablesOf(input.config, input.jobDir)
   });
   const started = await input.runtime.vm.exec(state.vsockPath, {
     argv: ["/bin/sh", "-c", commandWithShim(input.job, input.cmdline)],
@@ -749,7 +773,8 @@ async function syncInMicroVm(input) {
       containerEnv: state.containerEnv ?? {},
       builtIns: state.builtIns === true,
       identity: job.commitIdentity,
-      imageEnv: state.imageEnv
+      imageEnv: state.imageEnv,
+      factoryVariables: factoryVariablesOf(input.config, input.jobDir)
     });
     const result = await runtime.vm.exec(state.vsockPath, {
       argv: ["outerlayer", "sync"],
@@ -873,6 +898,7 @@ async function startCheckMicroVm(input) {
   const { config, runtime, job, jobDir, tokens, log } = input;
   const { vm } = runtime;
   const tag = `#${job.item}`;
+  const limits = machineLimits(config, jobDir);
   const built = job.microvm;
   const repository = built?.repository ?? job.repository;
   if (built === void 0 || built.imageId === void 0 || repository === void 0 || job.branch === void 0) {
@@ -922,7 +948,7 @@ async function startCheckMicroVm(input) {
     state.rootfs = built.rootfs;
   } else {
     try {
-      state.rootfs = await ensureRootfs({ host: vm.rootfs, runnerDir: runnerDirPath, imageId: built.imageId, memoryBytes: buildMemoryBytes(config) });
+      state.rootfs = await ensureRootfs({ host: vm.rootfs, runnerDir: runnerDirPath, imageId: built.imageId, memoryBytes: limits.memoryBytes });
     } catch (err) {
       return fail(`the image could not be converted to a root disk: ${describeCallFailure(err)}`);
     }
@@ -940,16 +966,11 @@ async function startCheckMicroVm(input) {
       log: (line) => log.line(`${tag} ${line}`),
       readOnly: true
     });
-    runtime.tunnels.set(buildId, await startServicesFor(runtime, config, buildDir2, checksDir, void 0, false, gitRemote));
+    runtime.tunnels.set(buildId, await startServicesFor(runtime, config, buildDir2, checksDir, void 0, false, gitRemote, "socket", void 0, void 0, void 0, jobDir));
   } catch (err) {
     return fail(`the tunnel could not start: ${describeCallFailure(err)}`);
   }
   if (abandoned()) return fail(ABANDONED);
-  const limits = {
-    cpus: config.build?.cpus ?? DEFAULT_CPUS,
-    memoryBytes: buildMemoryBytes(config),
-    diskBytes: parseSize(config.build?.disk ?? DEFAULT_DISK) ?? parseSize(DEFAULT_DISK)
-  };
   const links = vsockLinks({ destinations: config.build?.destinations?.length ?? 0, builtIns: false });
   const configPath = join(buildDir2, "vm.json");
   const helper = await helperFor(runtime, (line) => log.line(`${tag} ${line}`), config.managed === true);
@@ -1009,7 +1030,16 @@ async function startCheckMicroVm(input) {
   const failed = await boot();
   if (failed !== void 0) return fail(failed);
   if (abandoned()) return fail(ABANDONED);
-  const env = checkEnvironment({ config, item: job.item, repository, hostEnv: runtime.hostEnv, containerEnv: built.containerEnv ?? {}, imageEnv: built.imageEnv });
+  const env = checkEnvironment({
+    config,
+    item: job.item,
+    repository,
+    hostEnv: runtime.hostEnv,
+    containerEnv: built.containerEnv ?? {},
+    imageEnv: built.imageEnv,
+    // The checks of a managed build get its factory's variables, as its command did, and none of the runner's own.
+    factoryVariables: factoryVariablesOf(config, jobDir)
+  });
   const evalInput = { dir: join(checksDir, EVAL_INPUT_NAME), delivered: false };
   const deliverEvalInput = async () => {
     await unpackIntoGuest(runtime, state, evalInput.dir, EVAL_INPUT_DIR, { readOnly: true });
@@ -1149,82 +1179,6 @@ async function stopOrphanedMicroVms(input) {
   return stopped;
 }
 
-// src/runner/microvm/guest-usage.ts
-var GUEST_USAGE_INTERVAL_MS = 15e3;
-var MS_PER_TICK = 10;
-function usageScript(procDir = "/proc") {
-  return [
-    `echo OL-USAGE-MEMINFO; cat ${procDir}/meminfo`,
-    `echo OL-USAGE-STAT; cat ${procDir}/stat`,
-    `if [ -r ${procDir}/pressure/memory ]; then echo OL-USAGE-PSI-MEMORY; cat ${procDir}/pressure/memory; fi`,
-    `if [ -r ${procDir}/pressure/cpu ]; then echo OL-USAGE-PSI-CPU; cat ${procDir}/pressure/cpu; fi`
-  ].join("; ");
-}
-function section(stdout, name) {
-  const lines = stdout.split("\n");
-  const start = lines.indexOf(`OL-USAGE-${name}`);
-  if (start === -1) return void 0;
-  const end = lines.findIndex((line, index) => index > start && line.startsWith("OL-USAGE-"));
-  return lines.slice(start + 1, end === -1 ? void 0 : end).join("\n");
-}
-function meminfoKb(text2, key) {
-  const match = new RegExp(`^${key}:\\s+(\\d+)\\s+kB\\s*$`, "m").exec(text2);
-  return match === null ? void 0 : Number(match[1]);
-}
-function pressureTotal(text2) {
-  if (text2 === void 0) return void 0;
-  const match = /^some\s.*\btotal=(\d+)\s*$/m.exec(text2);
-  return match === null ? void 0 : Number(match[1]);
-}
-function parseGuestSample(stdout) {
-  const meminfo = section(stdout, "MEMINFO");
-  const stat = section(stdout, "STAT");
-  if (meminfo === void 0 || stat === void 0) return void 0;
-  const totalKb = meminfoKb(meminfo, "MemTotal");
-  const availableKb = meminfoKb(meminfo, "MemAvailable");
-  const aggregate = /^cpu\s+(\d+(?:\s+\d+){7,})\s*$/m.exec(stat);
-  if (totalKb === void 0 || availableKb === void 0 || totalKb <= 0 || availableKb > totalKb || aggregate === null) return void 0;
-  const [user, nice, system, , , irq, softirq, steal] = aggregate[1].split(/\s+/).map(Number);
-  const vcpus = stat.split("\n").filter((line) => /^cpu\d+\s/.test(line)).length;
-  if (vcpus < 1) return void 0;
-  const memoryPressureUs = pressureTotal(section(stdout, "PSI-MEMORY"));
-  const cpuPressureUs = pressureTotal(section(stdout, "PSI-CPU"));
-  return {
-    memoryBytes: totalKb * 1024,
-    vcpus,
-    usedBytes: (totalKb - availableKb) * 1024,
-    cpuBusyMs: (user + nice + system + irq + softirq + steal) * MS_PER_TICK,
-    ...memoryPressureUs === void 0 ? {} : { memoryPressureUs },
-    ...cpuPressureUs === void 0 ? {} : { cpuPressureUs }
-  };
-}
-function foldSample(usage, sample) {
-  return { peakMemoryBytes: Math.max(usage?.peakMemoryBytes ?? 0, sample.usedBytes), last: sample };
-}
-function usageRecord(usage) {
-  if (usage === void 0) return void 0;
-  const { last } = usage;
-  return {
-    guestMemoryBytes: last.memoryBytes,
-    guestVcpus: last.vcpus,
-    peakMemoryBytes: usage.peakMemoryBytes,
-    cpuBusyMs: last.cpuBusyMs,
-    ...last.memoryPressureUs === void 0 ? {} : { memoryPressureUs: last.memoryPressureUs },
-    ...last.cpuPressureUs === void 0 ? {} : { cpuPressureUs: last.cpuPressureUs }
-  };
-}
-async function sampleGuest(runtime, state) {
-  if (state.vsockPath === void 0) return void 0;
-  try {
-    const result = await withinTime(
-      (signal) => runtime.vm.exec(state.vsockPath, { argv: ["/bin/sh", "-c", usageScript()], user: "root", cwd: "/", env: { PATH: GUEST_PATH } }, { signal })
-    );
-    return result.status === 0 ? parseGuestSample(result.stdout) : void 0;
-  } catch {
-    return void 0;
-  }
-}
-
 // src/runner/verdict.ts
 var VERDICT_SETTLE_MS = 5 * 6e4;
 var VERDICT_READ_EVERY_MS = 3e4;
@@ -1310,722 +1264,397 @@ async function settleVerdict(deps) {
     await deps.sleep(everyMs);
   }
 }
-var RUNNER_LOG_FILE = "runner.log";
-var RUNNER_LOG_KEEP_BYTES = 65536;
-function isTailedStage(stage) {
-  const tailed = ["provision", "sync", "cleanup", "report"];
-  return tailed.includes(stage);
+
+// src/runner/microvm/guest-usage.ts
+var GUEST_USAGE_INTERVAL_MS = 15e3;
+var MS_PER_TICK = 10;
+function usageScript(procDir = "/proc") {
+  return [
+    `echo OL-USAGE-MEMINFO; cat ${procDir}/meminfo`,
+    `echo OL-USAGE-STAT; cat ${procDir}/stat`,
+    `if [ -r ${procDir}/pressure/memory ]; then echo OL-USAGE-PSI-MEMORY; cat ${procDir}/pressure/memory; fi`,
+    `if [ -r ${procDir}/pressure/cpu ]; then echo OL-USAGE-PSI-CPU; cat ${procDir}/pressure/cpu; fi`
+  ].join("; ");
 }
-var PROVISION_PROBLEM = /\b(warn(ing)?|error|fail(ed|ure)?|refused)\b/i;
-var READ_LIMIT_BYTES = 1048576;
-var ITEM_LINE = /^#(\d+)\b/;
-var AttemptLogBook = class {
-  constructor(now = () => /* @__PURE__ */ new Date()) {
-    this.now = now;
-    this.dirs = /* @__PURE__ */ new Map();
-    this.lastByKey = /* @__PURE__ */ new Map();
-  }
-  /** Starts keeping lines for `item` in `jobDirPath`. Idempotent. */
-  open(item, jobDirPath) {
-    this.dirs.set(Number(item), jobDirPath);
-  }
-  /** Stops keeping lines for `item`; its file stays on disk until housekeeping removes the job directory. */
-  close(item) {
-    const number = Number(item);
-    this.dirs.delete(number);
-    for (const key of [...this.lastByKey.keys()]) {
-      if (key.startsWith(`${number}:`)) this.lastByKey.delete(key);
-    }
-  }
-  /** The log with every line it writes for an open item also kept in that item's file. */
-  wrap(log) {
-    return {
-      line: (text2) => {
-        log.line(text2);
-        this.keepItemLine(text2);
-      },
-      error: (text2) => {
-        log.error(text2);
-        this.keepItemLine(text2);
-      }
-    };
-  }
-  /** One line for `item` that does not itself start with its number. */
-  note(item, text2) {
-    this.append(Number(item), text2);
-  }
-  /** One line, written only when `text` differs from the last one written under `key` for the item. */
-  noteChanged(item, key, text2) {
-    const number = Number(item);
-    const slot = `${number}:${key}`;
-    if (this.lastByKey.get(slot) === text2) return;
-    this.lastByKey.set(slot, text2);
-    this.append(number, text2);
-  }
-  keepItemLine(text2) {
-    const match = ITEM_LINE.exec(text2);
-    if (match !== null) this.append(Number(match[1]), text2);
-  }
-  append(item, text2) {
-    const dir = this.dirs.get(item);
-    if (dir === void 0) return;
-    try {
-      appendFileSync(join(dir, RUNNER_LOG_FILE), `${logStamp(this.now())} ${text2.replace(/[\r\n]+/g, " ")}
-`, { mode: 384 });
-    } catch {
-    }
-  }
-};
-function readEnd(path, maxBytes) {
-  let fd;
-  try {
-    fd = openSync(path, "r");
-    const size = fstatSync(fd).size;
-    const length = Math.min(size, maxBytes);
-    const buffer = Buffer.alloc(length);
-    readSync(fd, buffer, 0, length, size - length);
-    return buffer.toString("utf8");
-  } catch {
-    return void 0;
-  } finally {
-    if (fd !== void 0) closeSync(fd);
-  }
+function section(stdout, name) {
+  const lines = stdout.split("\n");
+  const start = lines.indexOf(`OL-USAGE-${name}`);
+  if (start === -1) return void 0;
+  const end = lines.findIndex((line, index) => index > start && line.startsWith("OL-USAGE-"));
+  return lines.slice(start + 1, end === -1 ? void 0 : end).join("\n");
 }
-function lastLines(text2, count) {
-  const lines = text2.split("\n");
-  if (lines.at(-1) === "") lines.pop();
-  return lines.slice(-200);
+function meminfoKb(text2, key) {
+  const match = new RegExp(`^${key}:\\s+(\\d+)\\s+kB\\s*$`, "m").exec(text2);
+  return match === null ? void 0 : Number(match[1]);
 }
-function capRunnerLog(text2) {
-  const bytes = Buffer.from(text2, "utf8");
-  if (bytes.length <= RUNNER_LOG_KEEP_BYTES) return text2;
-  let start = bytes.length - RUNNER_LOG_KEEP_BYTES;
-  if (bytes[start - 1] !== 10) {
-    const newline = bytes.indexOf(10, start);
-    if (newline + 1 < bytes.length) {
-      start = newline + 1;
-    } else {
-      while ((bytes[start] & 192) === 128) start++;
-    }
-  }
-  return `[runner log truncated: the first ${start} bytes were cut]
-${bytes.subarray(start).toString("utf8")}`;
-}
-function buildReleaseLog(jobDirPath, endStage, scrub) {
-  const parts = [];
-  const own = readEnd(join(jobDirPath, RUNNER_LOG_FILE), READ_LIMIT_BYTES);
-  if (own !== void 0 && own.trim() !== "") parts.push(own.endsWith("\n") ? own.slice(0, -1) : own);
-  if (isTailedStage(endStage)) {
-    const file = `${endStage}.log`;
-    const stage = readEnd(join(jobDirPath, file), READ_LIMIT_BYTES);
-    const tail = stage === void 0 ? [] : lastLines(stage);
-    if (tail.length > 0) parts.push(`--- the last ${tail.length} lines of ${file} ---`, ...tail);
-  }
-  if (endStage !== "provision") {
-    const provision = readEnd(join(jobDirPath, "provision.log"), READ_LIMIT_BYTES);
-    const problems = provision === void 0 ? [] : provision.split("\n").filter((line) => PROVISION_PROBLEM.test(line)).slice(-50);
-    if (problems.length > 0) parts.push(`--- provision problems (${problems.length} lines of provision.log) ---`, ...problems);
-  }
-  if (parts.length === 0) return void 0;
-  return capRunnerLog(scrub(parts.join("\n")) + "\n");
+function pressureTotal(text2) {
+  if (text2 === void 0) return void 0;
+  const match = /^some\s.*\btotal=(\d+)\s*$/m.exec(text2);
+  return match === null ? void 0 : Number(match[1]);
 }
-var ENDED = "ended before provision finished";
-async function provisionProcess(input) {
-  const { config, runtime, item, repository, jobDir } = input;
-  if (claudeCredential(runtime.hostEnv) === void 0) return { ok: false, reason: AGENT_CREDENTIAL_MISSING };
-  if (repository === void 0 || repository === null || repository === "") {
-    return { ok: false, reason: "the work item names no repository to clone" };
-  }
-  const buildId = randomBytes(6).toString("hex");
-  const buildDir2 = buildDir(config.configPath, buildId);
-  const workDir = join(jobDir, "work");
-  const state = { buildId, buildDir: buildDir2, workDir };
-  const environment = sharedUserEnvironment(input.cliVersion);
-  input.save(state, environment);
-  const bail = async (reason) => {
-    try {
-      await cleanupProcess(runtime, state);
-    } catch (err) {
-      input.log.error(`#${item.number} cleanup failed: ${describeCallFailure(err)}`);
-    }
-    return { ok: false, reason };
+function parseGuestSample(stdout) {
+  const meminfo = section(stdout, "MEMINFO");
+  const stat = section(stdout, "STAT");
+  if (meminfo === void 0 || stat === void 0) return void 0;
+  const totalKb = meminfoKb(meminfo, "MemTotal");
+  const availableKb = meminfoKb(meminfo, "MemAvailable");
+  const aggregate = /^cpu\s+(\d+(?:\s+\d+){7,})\s*$/m.exec(stat);
+  if (totalKb === void 0 || availableKb === void 0 || totalKb <= 0 || availableKb > totalKb || aggregate === null) return void 0;
+  const [user, nice, system, , , irq, softirq, steal] = aggregate[1].split(/\s+/).map(Number);
+  const vcpus = stat.split("\n").filter((line) => /^cpu\d+\s/.test(line)).length;
+  if (vcpus < 1) return void 0;
+  const memoryPressureUs = pressureTotal(section(stdout, "PSI-MEMORY"));
+  const cpuPressureUs = pressureTotal(section(stdout, "PSI-CPU"));
+  return {
+    memoryBytes: totalKb * 1024,
+    vcpus,
+    usedBytes: (totalKb - availableKb) * 1024,
+    cpuBusyMs: (user + nice + system + irq + softirq + steal) * MS_PER_TICK,
+    ...memoryPressureUs === void 0 ? {} : { memoryPressureUs },
+    ...cpuPressureUs === void 0 ? {} : { cpuPressureUs }
   };
-  if (input.aborted()) return bail(ENDED);
-  mkdirSync(buildDir2, { recursive: true });
-  chmodSync(buildDir2, 493);
-  try {
-    await startHostServices({ runtime, config, build: state, jobDir, itemKey: input.itemKey, process: true, routeLog: (line) => input.log.line(`#${item.number} ${line}`) });
-  } catch (err) {
-    return bail(`the tunnel could not start: ${describeCallFailure(err)}`);
-  }
-  input.save(state, environment);
-  if (input.aborted()) return bail(ENDED);
-  const checkout = join(workDir, "checkout");
-  const remote = runtime.remoteFor?.(repository) ?? `https://github.com/${repository}.git`;
-  const cloned = await runtime.clone({ remote, dest: checkout });
-  if (!cloned.ok) return bail(cloned.reason);
-  if (input.aborted()) return bail(ENDED);
-  return { ok: true, workdir: checkout, state, environment };
 }
-function cleanupProcess(runtime, state) {
-  return closeHostBuild(runtime, state);
+function foldSample(usage, sample) {
+  return { peakMemoryBytes: Math.max(usage?.peakMemoryBytes ?? 0, sample.usedBytes), last: sample };
 }
-var ARTIFACT_PROOF_REASON = "Its declared artifact proves it; the judge does not judge artifacts.";
-var NO_CITING_TEST_REASON = "No test cites this criterion, and it declares no artifact proof.";
-var NO_VERDICT_REASON = "The judge gave no result for this criterion.";
-function criterionInputs(input) {
-  const paths = [...new Set((input.citations[input.criterion.id] ?? []).map((citation) => citation.path))].sort();
-  const hash = createHash("sha256");
-  const part = (text2) => {
-    hash.update(`${Buffer.byteLength(text2)}:`);
-    hash.update(text2);
+function usageRecord(usage) {
+  if (usage === void 0) return void 0;
+  const { last } = usage;
+  return {
+    guestMemoryBytes: last.memoryBytes,
+    guestVcpus: last.vcpus,
+    peakMemoryBytes: usage.peakMemoryBytes,
+    cpuBusyMs: last.cpuBusyMs,
+    ...last.memoryPressureUs === void 0 ? {} : { memoryPressureUs: last.memoryPressureUs },
+    ...last.cpuPressureUs === void 0 ? {} : { cpuPressureUs: last.cpuPressureUs }
   };
-  part("judge-criterion-v1");
-  part(input.brief);
-  part(input.criterion.id);
-  part(input.criterion.text);
-  part(input.criterion.proof ?? "");
-  for (const path of paths) {
-    part(path);
-    part(input.testFiles.get(path) ?? "");
-  }
-  return hash.digest("hex");
-}
-var HTTPS_LINK = /^https:\/\/\S+$/;
-function refsFor(id, citations) {
-  const refs = (citations[id] ?? []).slice(0, 20).map((citation) => ({
-    path: citation.path,
-    line: citation.line,
-    // Only an https link becomes an href on a page; any other is left off rather than refusing the check.
-    ...HTTPS_LINK.test(citation.href ?? "") ? { href: citation.href } : {}
-  }));
-  return refs.length === 0 ? void 0 : refs;
-}
-function planCriteria(input) {
-  const previousById = new Map(input.previous.map((item) => [item.id, item]));
-  const settled = [];
-  const toJudge = [];
-  for (const criterion of input.criteria) {
-    const inputs = input.inputs.get(criterion.id);
-    const base = { id: criterion.id, criterion: criterion.id, ...inputs === void 0 ? {} : { inputs } };
-    const refs = refsFor(criterion.id, input.citations);
-    if (criterion.proof !== null) {
-      settled.push({ ...base, result: "skipped", reason: ARTIFACT_PROOF_REASON });
-      continue;
-    }
-    if (refs === void 0) {
-      settled.push({ ...base, result: "fail", reason: NO_CITING_TEST_REASON });
-      continue;
-    }
-    const kept = previousById.get(criterion.id);
-    if (kept !== void 0 && inputs !== void 0 && kept.inputs === inputs && (kept.result === "pass" || kept.result === "fail")) {
-      settled.push({ ...base, result: kept.result, ...kept.reason === void 0 ? {} : { reason: kept.reason }, refs });
-      continue;
-    }
-    toJudge.push(criterion);
-  }
-  return { settled, toJudge };
-}
-var MAX_ANSWER_ENTRIES = 500;
-function readAnswer(raw) {
-  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return { ok: false, problem: "expected an object" };
-  const { result, items } = raw;
-  if (result !== void 0 && result !== "pass" && result !== "fail") return { ok: false, problem: 'result: must be "pass" or "fail"' };
-  if (items !== void 0 && !Array.isArray(items)) return { ok: false, problem: "items: must be an array" };
-  const entries = items ?? [];
-  if (entries.length > MAX_ANSWER_ENTRIES) return { ok: false, problem: `items: at most ${MAX_ANSWER_ENTRIES} entries` };
-  const read = [];
-  for (const [index, entry] of entries.entries()) {
-    const { id, result: itemResult, reason } = typeof entry === "object" && entry !== null ? entry : {};
-    if (typeof id !== "string" || id === "" || id.length > 200) return { ok: false, problem: `items.${index}.id: must be text of 1 to 200 characters` };
-    if (itemResult !== "pass" && itemResult !== "fail") return { ok: false, problem: `items.${index}.result: must be "pass" or "fail"` };
-    if (reason !== void 0 && typeof reason !== "string") return { ok: false, problem: `items.${index}.reason: must be text` };
-    read.push({ id, result: itemResult, ...reason === void 0 ? {} : { reason } });
-  }
-  return { ok: true, answer: { ...result === void 0 ? {} : { result }, items: read } };
-}
-function parseJudgeAnswer(text2) {
-  if (text2 === void 0 || text2.trim() === "") return void 0;
-  let raw;
+}
+async function sampleGuest(runtime, state) {
+  if (state.vsockPath === void 0) return void 0;
   try {
-    raw = JSON.parse(text2);
+    const result = await withinTime(
+      (signal) => runtime.vm.exec(state.vsockPath, { argv: ["/bin/sh", "-c", usageScript()], user: "root", cwd: "/", env: { PATH: GUEST_PATH } }, { signal })
+    );
+    return result.status === 0 ? parseGuestSample(result.stdout) : void 0;
   } catch {
-    return { ok: false, reason: "the judge's items.json is not JSON" };
+    return void 0;
   }
-  const read = readAnswer(raw);
-  return read.ok ? read : { ok: false, reason: `the judge's items.json does not match its shape: ${read.problem}` };
-}
-function oneLineReason(text2) {
-  if (text2 === void 0) return void 0;
-  const line = text2.replace(/\s+/g, " ").trim();
-  if (line === "") return void 0;
-  return line.length <= CHECK_ITEM_REASON_MAX_LENGTH ? line : `${line.slice(0, CHECK_ITEM_REASON_MAX_LENGTH - 1)}\u2026`;
-}
-function judgedItems(input) {
-  return input.toJudge.map((criterion) => {
-    const said = input.results.get(criterion.id);
-    const inputs = input.inputs.get(criterion.id);
-    const refs = refsFor(criterion.id, input.citations);
-    const reason = said === void 0 ? NO_VERDICT_REASON : oneLineReason(said.reason);
-    return {
-      id: criterion.id,
-      criterion: criterion.id,
-      result: said?.result ?? "fail",
-      ...reason === void 0 ? {} : { reason },
-      ...refs === void 0 ? {} : { refs },
-      ...inputs === void 0 || said === void 0 ? {} : { inputs }
-    };
-  });
-}
-function inCriteriaOrder(items, criteria) {
-  const order = new Map(criteria.map((criterion, index) => [criterion.id, index]));
-  return [...items].sort((a, b) => (order.get(a.id) ?? Number.MAX_SAFE_INTEGER) - (order.get(b.id) ?? Number.MAX_SAFE_INTEGER));
 }
-function itemsSentence(items, noun) {
-  const failing = items.filter((item) => item.result === "fail").map((item) => item.id);
-  if (failing.length === 0) return void 0;
-  return `${failing.length} of ${items.length} ${items.length === 1 ? noun.one : noun.many} not satisfied: ${failing.join(", ")}`;
-}
-
-// src/runner/host-checks.ts
-var MAX_VALIDATOR_FILES = 20;
-var VALIDATORS_DIR = ".outerlayer/validators";
-var POLICY_FILE = ".outerlayer/policy.yaml";
-var LIMIT_KEY_TAIL = " (runner.checks.timeLimitMinutes)";
-var MAX_CHECK_ITEMS_BYTES = 1024 * 1024;
-function commandItems(read, scrub) {
-  if (read.status !== 0 || read.stdout.trim() === "") return { ok: true, items: void 0 };
-  if (Buffer.byteLength(read.stdout) > MAX_CHECK_ITEMS_BYTES) return { ok: false, reason: `its check items file is longer than ${MAX_CHECK_ITEMS_BYTES} bytes` };
-  let raw;
+var STOP_WAIT_MS = 3e4;
+var POLL_MS = 200;
+var ASK_AGAIN_MS = 1e3;
+var EXIT_REPORT_WAIT_MS = 2e3;
+var exitsLogged = /* @__PURE__ */ new Map();
+var BUILD_HOME = "/build/home";
+async function startSender(input) {
+  const { config, job, jobDir, deps } = input;
+  const tag = `#${job.item}`;
+  if (job.itemKey === void 0) return void 0;
+  const spawnFn = deps.spawnFn ?? spawn;
   try {
-    raw = JSON.parse(read.stdout);
-  } catch {
-    return { ok: false, reason: "its check items file (OUTERLAYER_CHECK_ITEMS) is not JSON" };
-  }
-  const parsed = CheckItemsSchema.safeParse(raw);
-  if (!parsed.success) {
-    return { ok: false, reason: `its check items file does not match the check item shape: ${zodProblem(parsed.error.issues)}` };
+    const launch = launchFor(config, job, jobDir, deps);
+    const fd = openSync(join(jobDir, "sender.log"), "a", RUNNER_FILE_MODE);
+    let pid;
+    let exitLogged;
+    try {
+      const child = spawnFn(launch.command, launch.args, { env: launch.env, cwd: launch.cwd, detached: true, stdio: ["ignore", fd, fd] });
+      child.on("error", (err) => deps.log.error(`${tag} session sender failed: ${describeCallFailure(err)}`));
+      exitLogged = new Promise((resolve) => {
+        child.on("exit", (code, signal) => {
+          deps.log.line(`${tag} session sender exited \xB7 ${signal ?? `code ${code}`} \xB7 see sender.log`);
+          resolve();
+        });
+      });
+      child.unref?.();
+      pid = child.pid;
+    } finally {
+      closeSync(fd);
+    }
+    if (pid === void 0) {
+      deps.log.line(`${tag} session sender did not start: no pid`);
+      return void 0;
+    }
+    exitsLogged.set(pid, exitLogged);
+    deps.log.line(`${tag} session sender started \xB7 pid ${pid}`);
+    return { pid, start: startTimeOf(pid) ?? void 0 };
+  } catch (err) {
+    deps.log.error(`${tag} session sender did not start: ${describeCallFailure(err)} \xB7 continuing`);
+    return void 0;
   }
-  return { ok: true, items: parsed.data.map((item) => item.reason === void 0 ? item : { ...item, reason: scrub(item.reason) }) };
 }
-function isJudgeCheck(check) {
-  return "judge" in check;
+function launchFor(config, job, jobDir, deps) {
+  if (job.microvm !== void 0) {
+    const runtime = deps.runtime ?? createContainerRuntime();
+    const cli = deps.cliPath ?? join(runtime.cliBuild().distDir, "index.js");
+    return { ...microVmSenderCommand({ job, jobDir, runtime, config, cli }), cwd: jobDir };
+  }
+  if (job.container !== void 0) {
+    return { ...containerSenderCommand({ job, runtime: deps.runtime ?? createContainerRuntime(), config }), cwd: jobDir };
+  }
+  const env = jobEnv(config, job.item, job.itemKey, jobDir, process.env, job.branch, job.commitIdentity?.author);
+  const build = job.build;
+  const hostEnv = build === void 0 ? env : hostCommandEnvironment(env, build, config, job.commitIdentity?.hooksPath);
+  if (build?.exec !== void 0) {
+    return { command: build.exec, args: execArgv(job.workdir, ["outerlayer", "session-sender"]), env: hostEnv, cwd: jobDir };
+  }
+  return { command: process.execPath, args: [deps.cliPath ?? process.argv[1] ?? "outerlayer", "session-sender"], env: hostEnv, cwd: job.workdir ?? jobDir };
 }
-function lastLine(text2) {
-  return text2.split(/\r\n|\r|\n/).map((line) => line.trim()).filter((line) => line !== "").at(-1);
+async function restartSender(input) {
+  const { job, deps } = input;
+  const state = job.container;
+  if (state !== void 0 && job.itemKey !== void 0) {
+    const runtime = deps.runtime ?? createContainerRuntime();
+    const pidfile = senderPidfile(BUILD_HOME, Number(job.item));
+    const sleep = deps.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+    const running = async () => {
+      const probe = await runtime.host.exec({ container: state.container, user: state.agentUser ?? ADDED_USER, env: { literals: {}, passed: {} }, argv: ["/bin/sh", "-c", senderAliveScript(pidfile)] });
+      return probe.status === 0 && probe.stdout.trim() === "alive";
+    };
+    try {
+      await signalInContainer(runtime, state, pidfile, "TERM");
+      const deadline = (deps.waitMs ?? STOP_WAIT_MS) / POLL_MS;
+      for (let waited = 0; await running() && waited < deadline; waited += 1) await sleep(POLL_MS);
+      if (await running()) {
+        deps.log.error(`#${job.item} the session sender an earlier runner left did not stop in time \xB7 killing it`);
+        await signalInContainer(runtime, state, pidfile, "KILL");
+      }
+    } catch (err) {
+      deps.log.error(`#${job.item} stopping the session sender an earlier runner left failed: ${describeCallFailure(err)} \xB7 continuing`);
+    }
+  }
+  return startSender(input);
 }
-function readInside(root, rel) {
-  const path = join(root, rel);
+function isLive(sender) {
+  if (sender.start !== void 0) return isSameProcess(sender.pid, sender.start);
   try {
-    if (!lstatSync(path).isFile()) return void 0;
-    const inside = realpathSync(path);
-    const base = realpathSync(root);
-    return inside.startsWith(base + sep) ? readFileSync(inside, "utf8") : void 0;
+    process.kill(sender.pid, 0);
+    return true;
   } catch {
-    return void 0;
+    return false;
   }
 }
-var MAINTAINED_BRIEF = /^\.(?:agents|outerlayer)\/skills\/(outerlayer-[a-z]+)\/([A-Za-z0-9_./-]+)$/;
-function readBrief(root, brief) {
-  const own = readInside(root, brief);
-  if (own !== void 0) return own;
-  const match = MAINTAINED_BRIEF.exec(brief);
-  if (match === null || match[2].split("/").includes("..") || !MAINTAINED_SKILLS.includes(match[1])) return void 0;
+function signalHost(sender, signal) {
+  if (!isLive(sender)) return;
   try {
-    return readFileSync(join(resolvePackRoot(), "maintained", match[1], match[2]), "utf8");
+    process.kill(-sender.pid, signal);
   } catch {
-    return void 0;
+    try {
+      process.kill(sender.pid, signal);
+    } catch {
+    }
   }
 }
-function validatorFilesIn(root) {
-  const dir = join(root, VALIDATORS_DIR);
-  let names;
-  try {
-    if (!lstatSync(dir).isDirectory()) return [];
-    names = readdirSync(dir);
-  } catch {
-    return [];
-  }
-  const files = [];
-  for (const name of names.filter((entry) => /\.ya?ml$/.test(entry)).sort().slice(0, MAX_VALIDATOR_FILES)) {
-    const path = `${VALIDATORS_DIR}/${name}`;
-    const content = readInside(root, path);
-    if (content !== void 0) files.push({ path, content });
-  }
-  return files;
-}
-var CRITERIA_CHECK = "acceptance-criteria";
-function asHostReads(file, base, log, tag) {
-  const upgraded = upgradedStarterText(file.path, file.content, { base });
-  if (upgraded === void 0) return file;
-  log.line(`${tag} ${file.path} is an unedited copy an earlier release wrote, so it is read as this CLI writes it`);
-  return { path: file.path, content: upgraded };
-}
-function checksIn(root, log, tag) {
-  const base = existsSync(join(root, AGENTS_SKILLS_BASE)) ? AGENTS_SKILLS_BASE : OUTERLAYER_SKILLS_BASE;
-  const policyText = readInside(root, POLICY_FILE);
-  const policy = policyText === void 0 ? null : asHostReads({ path: POLICY_FILE, content: policyText }, base, log, tag);
-  const loaded = parsePolicy(policy, validatorFilesIn(root).map((file) => asHostReads(file, base, log, tag)));
-  for (const problem of loaded.problems) log.error(`${tag} ${problem.file}: ${problem.problem}`);
-  const hostChecks = loaded.customs.filter((def) => def.runWhere === "host" && def.level !== "off" && def.declaresEmit !== null);
-  const checks = [];
-  for (const def of hostChecks) {
-    if (def.judge !== void 0) checks.push({ name: def.declaresEmit, judge: { brief: def.judge.brief, text: readBrief(root, def.judge.brief), subjects: def.judge.subjects } });
-    else if (def.command !== void 0) checks.push({ name: def.declaresEmit, command: def.command });
-  }
-  const unrecorded = loaded.customs.filter((def) => def.level !== "off" && def.declaresEmit === CRITERIA_CHECK && !checks.some((check) => check.name === CRITERIA_CHECK)).map((def) => def.id);
-  return { checks, unrecorded };
-}
-async function readDefinitions(input, repository, scratch, token, tokens) {
-  const { config, job, deps } = input;
-  const tag = `#${job.item}`;
-  const stage = deps.stage ?? stageGovernedContext;
-  const controlPlaneUrl = (controlPlane) => deps.runtime.remoteFor?.(controlPlane) ?? `${deps.runtime.github.gitUrl}/${controlPlane}.git`;
-  const governing = (job.container ?? job.microvm)?.governing;
-  const kept = keptContextTree(input.jobDir, governing);
-  if (kept !== void 0) return { ok: true, ...checksIn(kept, deps.log, tag) };
-  const staged = await stage({
-    config,
-    repository,
-    ...governing === void 0 ? {} : { source: { repository: governing.repository, ref: governing.ref, sha: governing.commit } },
-    buildId: `checks-${randomBytes(4).toString("hex")}`,
-    buildDir: scratch,
-    fetchImpl: deps.fetchImpl,
-    controlPlaneUrl,
-    controlPlaneToken: tokens === void 0 ? void 0 : () => tokens.controlPlane(),
-    log: deps.log,
-    tag
+async function signalInGuest(runtime, state, pidfile, signal) {
+  const { status } = await runtime.vm.exec(state.vsockPath, {
+    argv: ["/bin/sh", "-c", senderSignalScript(pidfile, signal)],
+    user: state.agentUser ?? ADDED_USER,
+    cwd: "/",
+    env: { PATH: "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" }
   });
-  if (staged.kind === "refused") return { ok: false, reason: staged.reason };
-  if (staged.kind === "staged") {
-    try {
-      return { ok: true, ...checksIn(join(staged.dir, "tree"), deps.log, tag) };
-    } finally {
-      rmSync(staged.dir, { recursive: true, force: true });
-    }
-  }
-  const repo = join(scratch, "repo");
-  const remote = deps.runtime.remoteFor?.(repository) ?? `${deps.runtime.github.gitUrl}/${repository}.git`;
-  const started = (job.container ?? job.microvm)?.startCommit;
-  const commit = started !== void 0 && started !== "" ? started : job.environment?.recipe?.sourceCommit ?? await deps.runtime.readHead(remote, scratch);
-  if (commit === void 0) return { ok: false, reason: "the repository's default branch could not be read" };
-  const fetched = await (deps.fetchCommit ?? fetchCommit)({ remote, dir: repo, commit, token });
-  if (!fetched.ok) return { ok: false, reason: fetched.reason };
-  deps.log.line(`${tag} check definitions read at ${commit.slice(0, 12)}`);
-  return { ok: true, ...checksIn(repo, deps.log, tag) };
+  return status === 0;
 }
-function timeoutAfter(ms, sleep) {
-  if (sleep !== void 0) return { done: sleep(ms).then(() => "timeout"), cancel: () => void 0 };
+async function exitReported(pid) {
+  const logged = exitsLogged.get(pid);
   let timer;
-  const done = new Promise((resolve) => {
-    timer = setTimeout(() => resolve("timeout"), ms);
-    timer.unref();
+  const bound = new Promise((resolve) => {
+    timer = setTimeout(resolve, EXIT_REPORT_WAIT_MS);
+    timer.unref?.();
   });
-  return { done, cancel: () => clearTimeout(timer) };
-}
-function noCleanEnvironment(job) {
-  const ran = job.build?.workDir !== void 0 ? "builtin:process" : "a provision hook of the host's own";
-  return `the host has no clean environment for checks: this build ran under ${ran}, and checks run only in a new container or microVM from a build's image`;
+  await Promise.race([logged, bound]);
+  clearTimeout(timer);
+  exitsLogged.delete(pid);
 }
-function makeRecorder(input) {
-  const { config, job, deps } = input;
+async function stopSender(input) {
+  const { job, deps } = input;
+  const sender = job.sender;
+  if (sender === void 0) return;
   const tag = `#${job.item}`;
-  const now = deps.now ?? (() => /* @__PURE__ */ new Date());
-  let signer;
-  return async (name, result, sentence, opts = {}) => {
-    signer ??= await signerFor(config.configPath);
-    const keyTail = opts.keyTail ?? "";
-    const body = sentence === void 0 ? void 0 : cutReasonLine(`${scrubReason(sentence, config) ?? "check failed"}${keyTail}`);
-    const clientEmitId = `host-${createHash("sha256").update(`${job.claimId}:${job.startedAt}:${name}${opts.idTag === void 0 ? "" : `:${opts.idTag}`}`).digest("hex").slice(0, 40)}`;
-    const sent = await retrySend(
-      () => postJson(
-        config.url,
-        "/v1/emitted-results",
-        config.apiKey,
-        config.appId,
-        {
-          schemaVersion: 1,
-          // A field left undefined is not sent: the request is JSON.
-          emit: { clientEmitId, name, result, body, link: opts.link, items: opts.items, emittedAt: now().toISOString(), item: { number: Number(job.item) } }
-        },
-        deps.fetchImpl,
-        void 0,
-        signer
-      ),
-      { now: deps.now }
-    );
-    if (sent.ok) deps.log.line(`${tag} check ${name} ${result}${body === void 0 ? "" : `: ${body}`}`);
-    else deps.log.error(`${tag} check ${name} ${result} could not be recorded: ${sent.reason}`);
+  const sleep = deps.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+  const inContainer = job.container === void 0 ? void 0 : { state: job.container, runtime: deps.runtime ?? createContainerRuntime(), pidfile: senderPidfile(BUILD_HOME, Number(job.item)) };
+  const inGuest = job.microvm === void 0 ? void 0 : { state: job.microvm, runtime: deps.runtime ?? createContainerRuntime(), pidfile: senderPidfile(BUILD_HOME, Number(job.item)) };
+  const signalInside = async (signal) => {
+    if (inContainer !== void 0) return signalInContainer(inContainer.runtime, inContainer.state, inContainer.pidfile, signal).catch(() => void 0);
+    if (inGuest !== void 0) return signalInGuest(inGuest.runtime, inGuest.state, inGuest.pidfile, signal).catch(() => void 0);
+    return void 0;
   };
-}
-async function runHostChecks(input) {
-  const { config, job, jobDir, deps } = input;
-  const { runtime, log } = deps;
-  const tag = `#${job.item}`;
-  const now = deps.now ?? (() => /* @__PURE__ */ new Date());
-  const repository = job.repository ?? job.container?.repository;
-  if (repository === void 0) return;
-  const jobFilePath = join(jobDir, "job.json");
-  const tokens = runtime.credentials.get(jobDir);
-  let readToken;
   try {
-    readToken = await tokens?.token("read");
+    let reached = true;
+    if (inContainer !== void 0 || inGuest !== void 0) reached = await signalInside("TERM");
+    else signalHost(sender, "SIGTERM");
+    const deadline = (deps.waitMs ?? STOP_WAIT_MS) / POLL_MS;
+    for (let waited = 0; isLive(sender) && waited < deadline; waited += 1) {
+      await sleep(POLL_MS);
+      if (!reached && (waited + 1) % (ASK_AGAIN_MS / POLL_MS) === 0) reached = await signalInside("TERM");
+    }
+    if (isLive(sender)) {
+      deps.log.error(`${tag} session sender did not stop in time \xB7 killing it`);
+      await signalInside("KILL");
+      signalHost(sender, "SIGKILL");
+    }
+    await exitReported(sender.pid);
   } catch (err) {
-    log.error(`${tag} no read token for the checks: ${describeCallFailure(err)}`);
+    deps.log.error(`${tag} stopping the session sender failed: ${describeCallFailure(err)} \xB7 continuing`);
   }
-  const scratch = join(jobDir, "checks", "definitions");
-  rmSync(scratch, { recursive: true, force: true });
-  mkdirSync(scratch, { recursive: true });
-  let definitions;
-  try {
-    definitions = await readDefinitions(input, repository, scratch, readToken, tokens);
-  } catch (err) {
-    definitions = { ok: false, reason: describeCallFailure(err) };
-  } finally {
-    removeStagedContext(scratch);
+}
+var RUNNER_LOG_FILE = "runner.log";
+var RUNNER_LOG_KEEP_BYTES = 65536;
+function isTailedStage(stage) {
+  const tailed = ["provision", "sync", "cleanup", "report"];
+  return tailed.includes(stage);
+}
+var PROVISION_PROBLEM = /\b(warn(ing)?|error|fail(ed|ure)?|refused)\b/i;
+var READ_LIMIT_BYTES = 1048576;
+var ITEM_LINE = /^#(\d+)\b/;
+var AttemptLogBook = class {
+  constructor(now = () => /* @__PURE__ */ new Date()) {
+    this.now = now;
+    this.dirs = /* @__PURE__ */ new Map();
+    this.lastByKey = /* @__PURE__ */ new Map();
   }
-  if (!definitions.ok) {
-    log.line(`${tag} checks not run: the definitions could not be read: ${definitions.reason}`);
-    rmSync(scratch, { recursive: true, force: true });
-    return;
+  /** Starts keeping lines for `item` in `jobDirPath`. Idempotent. */
+  open(item, jobDirPath) {
+    this.dirs.set(Number(item), jobDirPath);
   }
-  const checks = definitions.checks.filter((check) => !isJudgeCheck(check));
-  if (checks.length === 0) {
-    rmSync(scratch, { recursive: true, force: true });
-    return;
+  /** Stops keeping lines for `item`; its file stays on disk until housekeeping removes the job directory. */
+  close(item) {
+    const number = Number(item);
+    this.dirs.delete(number);
+    for (const key of [...this.lastByKey.keys()]) {
+      if (key.startsWith(`${number}:`)) this.lastByKey.delete(key);
+    }
   }
-  log.line(`${tag} checks started (${checks.map((check) => check.name).join(", ")})`);
-  const startedMs = now().getTime();
-  const recorder = makeRecorder({ config, job, deps });
-  const record = (check, result, sentence, keyTail = "", items) => recorder(check.name, result, sentence, { keyTail, items });
-  const failAll = async (reason, keyTail = "") => {
-    log.error(`${tag} checks failed: ${reason}${keyTail}`);
-    for (const check of checks) await record(check, "fail", reason, keyTail);
-  };
-  try {
-    if (job.container === void 0 && job.microvm === void 0) return await failAll(noCleanEnvironment(job));
-    if (tokens === void 0) return await failAll("the build's repository tokens are no longer held, so the branch cannot be fetched");
-    if (job.branch === void 0) return await failAll("the build pushed no branch: the claim names none");
-    const claimed = repositoriesOf({ repositories: job.repositories, repository, branch: job.branch });
-    if (claimed.length === 0) return await failAll("the claim names no repository to check out");
-    const remoteOf = (name) => runtime.remoteFor?.(name) ?? `${runtime.github.gitUrl}/${name}.git`;
-    const remote = remoteOf(repository);
-    const pushed = /* @__PURE__ */ new Map();
-    const unpushed = [];
-    let primaryHead;
-    for (const entry of claimed) {
-      let entryToken = readToken;
-      if (!entry.primary) {
-        try {
-          entryToken = await tokens.token("read", entry.repository);
-        } catch (err) {
-          return await failAll(`no read token for ${entry.repository}: ${describeCallFailure(err)}`);
-        }
-      }
-      const read = await (deps.readBranch ?? readBranchHead)({ remote: remoteOf(entry.repository), dir: scratch, branch: entry.branch, token: entryToken });
-      if (read.kind === "unreadable") return await failAll(`the branch ${entry.branch} could not be read${entry.primary ? "" : ` on ${entry.repository}`}: ${read.reason}`);
-      if (read.kind === "absent") {
-        unpushed.push(entry);
-        continue;
+  /** The log with every line it writes for an open item also kept in that item's file. */
+  wrap(log) {
+    return {
+      line: (text2) => {
+        log.line(text2);
+        this.keepItemLine(text2);
+      },
+      error: (text2) => {
+        log.error(text2);
+        this.keepItemLine(text2);
       }
-      pushed.set(entry.repository, entry.branch);
-      if (entry.primary) primaryHead = read.sha;
-    }
-    if (pushed.size === 0) {
-      return await failAll(`the build pushed no branch: ${unpushed.map((entry) => `${entry.branch} does not exist on ${entry.repository}`).join("; ")}`);
-    }
-    const repositoriesToCheckOut = claimed;
-    const limitMinutes = config.checks?.timeLimitMinutes ?? DEFAULT_CHECK_TIME_LIMIT_MINUTES;
-    const minutes = `${limitMinutes} ${limitMinutes === 1 ? "minute" : "minutes"}`;
-    const environmentLog = join(jobDir, "checks", "environment.log");
-    let transcripts = { ok: false, reason: "the runner holds no way to read the build's sessions" };
-    if (deps.collectSessions !== void 0) {
-      try {
-        transcripts = await deps.collectSessions();
-      } catch (err) {
-        transcripts = { ok: false, reason: describeCallFailure(err) };
-      }
-    }
-    if (job.microvm !== void 0) {
-      if (deps.endBuildMicroVm === void 0) return await failAll("the runner has no way to stop the build's microVM, so no check environment was made");
-      try {
-        await deps.endBuildMicroVm();
-      } catch (err) {
-        return await failAll(`the build's microVM could not be stopped, so no check environment was made: ${describeCallFailure(err)}`);
-      }
-    }
-    let abandoned = false;
-    const setup = async () => {
-      const started = job.microvm !== void 0 ? await startCheckMicroVm({
-        config,
-        runtime,
-        job,
-        jobDir,
-        tokens,
-        log,
-        aborted: () => abandoned,
-        save: (state) => {
-          if (abandoned) return;
-          job.checkMicrovm = state;
-          writeJobFile(jobFilePath, job);
-        }
-      }) : await startCheckContainer({
-        config,
-        runtime,
-        job,
-        jobDir,
-        tokens,
-        log,
-        save: (state) => {
-          job.checkContainer = state;
-          writeJobFile(jobFilePath, job);
-        }
-      });
-      if (!started.ok) return `the check environment could not be made: ${started.reason}`;
-      const made = "container" in started ? started.container : started.environment;
-      const steps = [
-        {
-          argv: ["git", "config", "--global", `url.http://127.0.0.1:${RELAY_PORT}/github.com/.insteadOf`, "https://github.com/"],
-          workdir: "/build/work",
-          failed: (status) => `configuring git failed (exit ${status})`
-        },
-        ...repositoriesToCheckOut.flatMap((entry) => {
-          const branch = pushed.get(entry.repository);
-          const path = entry.primary ? CHECKOUT_DIR : repositoryPath(entry.repository);
-          const clone = {
-            argv: ["git", "clone", "--filter=blob:none", "--single-branch", ...branch === void 0 ? [] : ["--branch", branch], `https://github.com/${entry.repository}.git`, path],
-            workdir: "/build/work",
-            failed: (status) => `the clone of ${branch ?? `the default branch of ${entry.repository}`} failed (exit ${status})`
-          };
-          return entry.primary && repositoriesToCheckOut.length > 1 ? [
-            clone,
-            {
-              argv: ["sh", "-c", 'mkdir -p "$(dirname "$1")" && ln -s "$2" "$1"', "link", repositoryPath(entry.repository), CHECKOUT_DIR],
-              workdir: "/build/work",
-              failed: (status) => `linking ${entry.repository} at ${repositoryPath(entry.repository)} failed (exit ${status})`
-            }
-          ] : [clone];
-        })
-      ];
-      for (const step of steps) {
-        if (abandoned) return "the check environment setup ran out of time";
-        const ran = await made.exec(step.argv, step.workdir, { logPath: environmentLog });
-        if (ran.status !== 0) return `the check environment could not be prepared: ${step.failed(ran.status)}`;
-      }
-      const lifecycleDir = lifecycleWorkdir(repositoriesToCheckOut, (job.container ?? job.microvm)?.governing?.repository);
-      for (const step of lifecycleSteps((job.container ?? job.microvm)?.lifecycle ?? {})) {
-        log.line(`${tag} checks lifecycle ${step.name} (${step.source})`);
-        const ran = await made.exec(step.argv, lifecycleDir, { logPath: environmentLog });
-        if (ran.status !== 0) return `the check environment could not be prepared: ${lifecycleFailureReason(step, ran.status)}`;
-      }
-      return made;
     };
-    const setupTimer = timeoutAfter(limitMinutes * 6e4, deps.sleep);
-    let settled;
+  }
+  /** One line for `item` that does not itself start with its number. */
+  note(item, text2) {
+    this.append(Number(item), text2);
+  }
+  /** One line, written only when `text` differs from the last one written under `key` for the item. */
+  noteChanged(item, key, text2) {
+    const number = Number(item);
+    const slot = `${number}:${key}`;
+    if (this.lastByKey.get(slot) === text2) return;
+    this.lastByKey.set(slot, text2);
+    this.append(number, text2);
+  }
+  keepItemLine(text2) {
+    const match = ITEM_LINE.exec(text2);
+    if (match !== null) this.append(Number(match[1]), text2);
+  }
+  append(item, text2) {
+    const dir = this.dirs.get(item);
+    if (dir === void 0) return;
     try {
-      const outcome = await Promise.race([
-        setup().catch((err) => `the check environment could not be made: ${describeCallFailure(err)}`),
-        setupTimer.done
-      ]);
-      if (outcome === "timeout") {
-        abandoned = true;
-        return await failAll(`the check environment setup ran out of time after ${minutes}`, LIMIT_KEY_TAIL);
-      }
-      settled = outcome;
-    } finally {
-      setupTimer.cancel();
+      appendFileSync(join(dir, RUNNER_LOG_FILE), `${logStamp(this.now())} ${text2.replace(/[\r\n]+/g, " ")}
+`, { mode: 384 });
+    } catch {
     }
-    if (typeof settled === "string") return await failAll(settled);
-    const ready = settled;
-    try {
-      await writeEvalInput({
-        job,
-        dir: ready.evalInput.dir,
-        scratch,
-        remote,
-        readToken,
-        branchHead: primaryHead ?? (job.container ?? job.microvm)?.startCommit ?? "",
-        transcripts,
-        scrub: transcriptScrub(config, [config.apiKey, job.itemKey, readToken]),
-        readWorkItem: () => readWorkItem(config, job.item, deps.fetchImpl),
-        fetchDiff: deps.fetchDiff ?? ((input2) => diffBetween(input2)),
-        log
-      });
-    } catch (err) {
-      return await failAll(`the checks' input could not be written: ${describeCallFailure(err)}`);
+  }
+};
+function readEnd(path, maxBytes) {
+  let fd;
+  try {
+    fd = openSync(path, "r");
+    const size = fstatSync(fd).size;
+    const length = Math.min(size, maxBytes);
+    const buffer = Buffer.alloc(length);
+    readSync(fd, buffer, 0, length, size - length);
+    return buffer.toString("utf8");
+  } catch {
+    return void 0;
+  } finally {
+    if (fd !== void 0) closeSync(fd);
+  }
+}
+function lastLines(text2, count) {
+  const lines = text2.split("\n");
+  if (lines.at(-1) === "") lines.pop();
+  return lines.slice(-200);
+}
+function capRunnerLog(text2) {
+  const bytes = Buffer.from(text2, "utf8");
+  if (bytes.length <= RUNNER_LOG_KEEP_BYTES) return text2;
+  let start = bytes.length - RUNNER_LOG_KEEP_BYTES;
+  if (bytes[start - 1] !== 10) {
+    const newline = bytes.indexOf(10, start);
+    if (newline + 1 < bytes.length) {
+      start = newline + 1;
+    } else {
+      while ((bytes[start] & 192) === 128) start++;
     }
+  }
+  return `[runner log truncated: the first ${start} bytes were cut]
+${bytes.subarray(start).toString("utf8")}`;
+}
+function buildReleaseLog(jobDirPath, endStage, scrub) {
+  const parts = [];
+  const own = readEnd(join(jobDirPath, RUNNER_LOG_FILE), READ_LIMIT_BYTES);
+  if (own !== void 0 && own.trim() !== "") parts.push(own.endsWith("\n") ? own.slice(0, -1) : own);
+  if (isTailedStage(endStage)) {
+    const file = `${endStage}.log`;
+    const stage = readEnd(join(jobDirPath, file), READ_LIMIT_BYTES);
+    const tail = stage === void 0 ? [] : lastLines(stage);
+    if (tail.length > 0) parts.push(`--- the last ${tail.length} lines of ${file} ---`, ...tail);
+  }
+  if (endStage !== "provision") {
+    const provision = readEnd(join(jobDirPath, "provision.log"), READ_LIMIT_BYTES);
+    const problems = provision === void 0 ? [] : provision.split("\n").filter((line) => PROVISION_PROBLEM.test(line)).slice(-50);
+    if (problems.length > 0) parts.push(`--- provision problems (${problems.length} lines of provision.log) ---`, ...problems);
+  }
+  if (parts.length === 0) return void 0;
+  return capRunnerLog(scrub(parts.join("\n")) + "\n");
+}
+var ENDED = "ended before provision finished";
+async function provisionProcess(input) {
+  const { config, runtime, item, repository, jobDir } = input;
+  if (claudeCredential(runtime.hostEnv) === void 0) return { ok: false, reason: AGENT_CREDENTIAL_MISSING };
+  if (repository === void 0 || repository === null || repository === "") {
+    return { ok: false, reason: "the work item names no repository to clone" };
+  }
+  const buildId = randomBytes(6).toString("hex");
+  const buildDir2 = buildDir(config.configPath, buildId);
+  const workDir = join(jobDir, "work");
+  const state = { buildId, buildDir: buildDir2, workDir };
+  const environment = sharedUserEnvironment(input.cliVersion);
+  input.save(state, environment);
+  const bail = async (reason) => {
     try {
-      await ready.evalInput.deliver();
+      await cleanupProcess(runtime, state);
     } catch (err) {
-      return await failAll(err instanceof DeliveryFailure ? err.message : `the checks' input could not be written: ${describeCallFailure(err)}`);
-    }
-    let usable = true;
-    for (const check of checks) {
-      if (!usable) {
-        await record(check, "fail", "the check environment could not be restarted after an earlier check ran out of time");
-        continue;
-      }
-      const checkStartedMs = now().getTime();
-      const logPath = join(jobDir, "checks", `${check.name}.log`);
-      await ready.exec(["rm", "-f", CHECK_ITEMS_FILE], CHECKOUT_DIR, { logPath });
-      const running = ready.exec(["/bin/sh", "-c", check.command], CHECKOUT_DIR, { logPath });
-      running.catch(() => void 0);
-      const timer = timeoutAfter(limitMinutes * 6e4, deps.sleep);
-      let outcome;
-      try {
-        outcome = await Promise.race([running, timer.done]);
-      } catch (err) {
-        timer.cancel();
-        await record(check, "fail", `the command could not be run: ${describeCallFailure(err)}`);
-        continue;
-      }
-      timer.cancel();
-      if (outcome === "timeout") {
-        await record(check, "fail", `ran out of time after ${minutes}`, LIMIT_KEY_TAIL);
-        const restarting = ready.restart().catch(() => false);
-        const restartTimer = timeoutAfter(limitMinutes * 6e4, deps.sleep);
-        usable = await Promise.race([restarting, restartTimer.done]) === true;
-        restartTimer.cancel();
-        continue;
-      }
-      const read = await ready.exec(["head", "-c", String(MAX_CHECK_ITEMS_BYTES + 1), CHECK_ITEMS_FILE], CHECKOUT_DIR);
-      const items = commandItems(read, (text2) => scrubReason(text2, config) ?? text2);
-      if (!items.ok) {
-        await record(check, "fail", items.reason);
-        continue;
-      }
-      const failing = items.items === void 0 ? void 0 : itemsSentence(items.items, { one: "check item", many: "check items" });
-      if (outcome.status === 0 && failing === void 0) {
-        log.line(`${tag} check ${check.name} ran (${formatDuration(now().getTime() - checkStartedMs)})`);
-        await record(check, "pass", void 0, "", items.items);
-        continue;
-      }
-      if (outcome.status === 0) {
-        await record(check, "fail", failing, "", items.items);
-        continue;
-      }
-      const last = lastLine(outcome.stderr) ?? lastLine(outcome.stdout);
-      const scrubbed = last === void 0 ? void 0 : scrubReason(last, config);
-      await record(check, "fail", `exited ${outcome.status}${scrubbed === void 0 ? " with no output" : `: ${cutReasonLine(scrubbed, 140)}`}`, "", items.items);
+      input.log.error(`#${item.number} cleanup failed: ${describeCallFailure(err)}`);
     }
+    return { ok: false, reason };
+  };
+  if (input.aborted()) return bail(ENDED);
+  mkdirSync(buildDir2, { recursive: true });
+  chmodSync(buildDir2, 493);
+  try {
+    await startHostServices({ runtime, config, build: state, jobDir, itemKey: input.itemKey, process: true, routeLog: (line) => input.log.line(`#${item.number} ${line}`) });
   } catch (err) {
-    log.error(`${tag} checks stopped: ${describeCallFailure(err)}`);
-  } finally {
-    if (job.checkContainer !== void 0) {
-      await cleanupContainer(runtime, job.checkContainer).catch((err) => log.error(`${tag} removing the check environment failed: ${describeCallFailure(err)}`));
-      delete job.checkContainer;
-      writeJobFile(jobFilePath, job);
-    }
-    if (job.checkMicrovm !== void 0) {
-      await cleanupMicroVm(runtime, job.checkMicrovm).catch((err) => log.error(`${tag} removing the check environment failed: ${describeCallFailure(err)}`));
-      delete job.checkMicrovm;
-      writeJobFile(jobFilePath, job);
-    }
-    rmSync(scratch, { recursive: true, force: true });
-    rmSync(join(jobDir, "checks", EVAL_INPUT_NAME), { recursive: true, force: true });
-    if (existsSync(scratch)) log.error(`${tag} the checks' scratch directory could not be removed`);
-    log.line(`${tag} checks done (${formatDuration(now().getTime() - startedMs)})`);
+    return bail(`the tunnel could not start: ${describeCallFailure(err)}`);
   }
+  input.save(state, environment);
+  if (input.aborted()) return bail(ENDED);
+  const checkout = join(workDir, "checkout");
+  const remote = runtime.remoteFor?.(repository) ?? `https://github.com/${repository}.git`;
+  const cloned = await runtime.clone({ remote, dest: checkout });
+  if (!cloned.ok) return bail(cloned.reason);
+  if (input.aborted()) return bail(ENDED);
+  return { ok: true, workdir: checkout, state, environment };
+}
+function cleanupProcess(runtime, state) {
+  return closeHostBuild(runtime, state);
 }
 
 // src/runner/judge-verdict.ts
@@ -2109,15 +1738,10 @@ ${rows}
 }
 
 // src/runner/judge.ts
-var LIMIT_KEY_TAIL2 = " (runner.checks.timeLimitMinutes)";
+var LIMIT_KEY_TAIL = " (runner.checks.timeLimitMinutes)";
 var MAX_DIFF_BYTES = 4 * 1024 * 1024;
-var MAX_TEST_FILES = 2e4;
-var MAX_TEST_FILE_BYTES = 1024 * 1024;
 var NO_CLAUDE = "the image has no Claude Code for the judge";
 var REPORT_CAPTION = "The host's criteria judge, each criterion judged against the test that cites it";
-async function loadCitationFinder() {
-  return await import(pathToFileURL(join(resolvePackRoot(), "maintained", "outerlayer-build", "scripts", "criterion-citations.mjs")).href);
-}
 function testFilesIn(root, isTest, limits = { files: MAX_TEST_FILES, bytes: MAX_TEST_FILE_BYTES }) {
   const files = [];
   const walk = (dir, prefix) => {
@@ -2151,26 +1775,6 @@ async function hostPassedNames(config, item, fetchImpl) {
   } while (since !== null);
   return [...latest].filter(([, result]) => result === "pass").map(([name]) => name);
 }
-function criteriaOf(workItem) {
-  const criteria = Object(Object(workItem).criteria);
-  if (!Array.isArray(criteria?.items)) return void 0;
-  const drafted = criteria.drafted === true;
-  const items = [];
-  for (const entry of criteria.items) {
-    const { id, text: text2, proof } = Object(entry);
-    if (typeof id !== "string" || typeof text2 !== "string") continue;
-    items.push({ id, text: text2, proof: typeof proof === "string" ? proof : null, drafted });
-  }
-  return items.length === 0 ? void 0 : items;
-}
-function hostItemsOf(workItem, name) {
-  const checks = Object(workItem).checks;
-  if (!Array.isArray(checks)) return [];
-  const check = checks.find((entry) => Object(entry).name === name);
-  if (check?.source !== "host") return [];
-  const parsed = CheckItemsSchema.safeParse(check.items);
-  return parsed.success ? parsed.data : [];
-}
 function environmentFor(input) {
   const { config, job, jobDir, deps } = input;
   if (deps.judgeEnvironment !== void 0) return deps.judgeEnvironment;
@@ -2391,7 +1995,7 @@ async function runJudge(input) {
     const reason = at.reason ?? failing;
     const report = at.judgeReport !== void 0 && at.judgeReport !== "" ? at.judgeReport : renderJudgeReport({ check: check.name, result, reason, items, commit: at.head, extraHead: at.finder.renderBlock(at.citations) });
     const link = await uploadReport(check, report, { branch: at.branch, head: at.head });
-    await record(check.name, result, reason, { keyTail: at.limitKey === true ? LIMIT_KEY_TAIL2 : "", link, items: sendable(items) });
+    await record(check.name, result, reason, { keyTail: at.limitKey === true ? LIMIT_KEY_TAIL : "", link, items: sendable(items) });
   }
   async function finishWhole(check, at) {
     const where = { head: at.head, branch: at.branch };
@@ -2414,7 +2018,7 @@ async function runJudge(input) {
   }
   async function recordWhole(check, at) {
     const link = at.report === void 0 ? void 0 : await uploadReport(check, at.report, { branch: at.branch, head: at.head });
-    await record(check.name, at.result, at.reason, { keyTail: at.limitKey === true ? LIMIT_KEY_TAIL2 : "", link, items: sendable(at.items) });
+    await record(check.name, at.result, at.reason, { keyTail: at.limitKey === true ? LIMIT_KEY_TAIL : "", link, items: sendable(at.items) });
   }
   function sendable(items) {
     if (items === void 0) return void 0;
@@ -2650,7 +2254,7 @@ function mergeScrubConfig(a, b) {
 function releaseScrub(config, home) {
   const merged = mergeScrubConfig(config.scrub, readCloudConfig(home).scrub);
   const secrets = [...headerVariables(config.build?.destinations), ...CLAUDE_CREDENTIAL_VARIABLES].map((name) => process.env[name] ?? "");
-  const held = [currentClaudeCredential(process.env)?.value, ...removedClaudeCredentialValues(), ...managedClaudeKeyValues()].filter((value) => value !== void 0);
+  const held = [currentClaudeCredential(process.env)?.value, ...removedClaudeCredentialValues(), ...managedClaudeKeyValues(), ...managedBuildSettingValues()].filter((value) => value !== void 0);
   return { literals: [...scrubList(merged?.literals), ...secrets, ...held], patterns: scrubList(merged?.patterns) };
 }
 function transcriptScrub(config, secrets) {
@@ -2927,6 +2531,15 @@ function readTunnelRecord(path) {
     return void 0;
   }
 }
+var VALUES_NOT_HELD = "the runner restarted and could not read this build's variables from its factory again, so it cannot remove their values from what it uploads";
+var SCRUBBED_RELEASE_LOG = "release-log.txt";
+function readScrubbedReleaseLog(jobDirPath) {
+  try {
+    return readFileSync(join(jobDirPath, SCRUBBED_RELEASE_LOG), "utf8");
+  } catch {
+    return void 0;
+  }
+}
 async function finishJob(job, jobDirPath, outcome, config, deps, ending) {
   const spawnFn = deps.spawnFn ?? spawn;
   const now = deps.now ?? (() => /* @__PURE__ */ new Date());
@@ -2935,6 +2548,7 @@ async function finishJob(job, jobDirPath, outcome, config, deps, ending) {
   const logPath = join(jobDirPath, "command.log");
   const tag = `#${job.item}`;
   deps.attemptLogs?.open(job.item, jobDirPath);
+  const valuesNotHeld = (job.managedVariables?.length ?? 0) > 0 && managedBuildSettingsFor(jobDirPath) === void 0;
   if (job.sender !== void 0) {
     await stopSender({ job, deps: { spawnFn, runtime: deps.container, log } });
     delete job.sender;
@@ -2978,6 +2592,10 @@ async function finishJob(job, jobDirPath, outcome, config, deps, ending) {
     writeJobFile(jobFilePath, job);
   }
   const uploadSessions = async (workdir) => {
+    if (valuesNotHeld) {
+      log.error(`${tag} sync skipped: ${VALUES_NOT_HELD}`);
+      return;
+    }
     if (job.container === void 0 && job.microvm === void 0 && job.build?.exec === void 0 && workdirProblem(workdir) !== void 0) {
       log.line(`${tag} sync skipped: workdir ${workdir} is gone`);
     } else if (job.itemKey === void 0) {
@@ -3036,7 +2654,8 @@ async function finishJob(job, jobDirPath, outcome, config, deps, ending) {
       log.error(`${tag} removing an earlier attempt's check environment failed: ${describeCallFailure(err)} \xB7 continuing`);
     }
   }
-  if (outcome === "ok" && !job.cleanupRan && job.judgeRan !== true) {
+  if (valuesNotHeld && outcome === "ok" && !job.cleanupRan) log.error(`${tag} the host's judge and checks skipped: ${VALUES_NOT_HELD}`);
+  if (outcome === "ok" && !job.cleanupRan && job.judgeRan !== true && !valuesNotHeld) {
     setStage(job, jobDirPath, "judge");
     job.judgeRan = true;
     writeJobFile(jobFilePath, job);
@@ -3051,7 +2670,7 @@ async function finishJob(job, jobDirPath, outcome, config, deps, ending) {
       log.error(`${tag} the host's judge stopped: ${describeCallFailure(err)} \xB7 continuing`);
     }
   }
-  if (outcome === "ok" && !job.cleanupRan && job.checksRan !== true) {
+  if (outcome === "ok" && !job.cleanupRan && job.checksRan !== true && !valuesNotHeld) {
     setStage(job, jobDirPath, "checks");
     job.checksRan = true;
     writeJobFile(jobFilePath, job);
@@ -3265,12 +2884,17 @@ async function finishJob(job, jobDirPath, outcome, config, deps, ending) {
     writeJobFile(jobFilePath, job);
   }
   const sentAtMs = now().getTime();
-  const runnerLog = releaseLogFor(jobDirPath, job, config);
+  const runnerLog = valuesNotHeld ? `The runner sends no log for this attempt: ${VALUES_NOT_HELD}.
+` : releaseLogFor(jobDirPath, job, config);
   const detail = outcome === void 0 ? { log: runnerLog } : { stage: job.endStage, exitCode: job.endExitCode, reason: job.reason, environment: job.environment, log: runnerLog };
   const release = await retrySend(() => releaseLease(config, job.item, outcome, detail, deps.fetchImpl), {
     now: deps.now,
     sleep: deps.sleep
   });
+  if (!release.ok && release.retryable && job.managedVariables !== void 0 && runnerLog !== void 0) {
+    writeFileSync(join(jobDirPath, SCRUBBED_RELEASE_LOG), runnerLog, { mode: RUNNER_FILE_MODE });
+  }
+  dropManagedBuildSettings(jobDirPath);
   const alreadyReleased = release.ok && wasAlreadyReleased(release.value, outcome, sentAtMs);
   const endedAt = now();
   job.outcome = outcome;
@@ -3323,244 +2947,528 @@ async function retryFailedReleases(jobsDirPath, config, deps) {
     if (!job || job.releaseFailed === void 0 || job.releaseFailed === ALREADY_RELEASED || isUnfinished(job)) {
       continue;
     }
-    const runnerLog = releaseLogFor(dirPath, job, config);
+    const runnerLog = readScrubbedReleaseLog(dirPath) ?? releaseLogFor(dirPath, job, config);
     const detail = job.outcome === void 0 ? { log: runnerLog } : { stage: job.endStage, exitCode: job.endExitCode, reason: job.reason, environment: job.environment, log: runnerLog };
     const release = await retrySend(() => releaseLease(config, job.item, job.outcome, detail, deps.fetchImpl), {
       now: deps.now,
       sleep: deps.sleep
     });
     if (release.ok || !release.retryable) {
+      rmSync(join(dirPath, SCRUBBED_RELEASE_LOG), { force: true });
       job.releaseFailed = void 0;
       writeJobFile(jobFilePath, job);
     } else {
       job.releaseFailed = release.reason;
       writeJobFile(jobFilePath, job);
     }
-    results.push({ job, released: release.ok });
-  }
-  return results;
-}
-function isUnfinished(job) {
-  return job.outcome === void 0 && job.endedAt === void 0;
-}
-function unfinishedJobs(jobsDirPath) {
-  if (!existsSync(jobsDirPath)) return [];
-  const found = [];
-  for (const entry of readdirSync(jobsDirPath, { withFileTypes: true })) {
-    if (!entry.isDirectory()) continue;
-    const dirPath = join(jobsDirPath, entry.name);
-    const job = readJobFile(join(dirPath, "job.json"));
-    if (job && isUnfinished(job)) found.push({ dirPath, job });
+    results.push({ job, released: release.ok });
+  }
+  return results;
+}
+function isUnfinished(job) {
+  return job.outcome === void 0 && job.endedAt === void 0;
+}
+function unfinishedJobs(jobsDirPath) {
+  if (!existsSync(jobsDirPath)) return [];
+  const found = [];
+  for (const entry of readdirSync(jobsDirPath, { withFileTypes: true })) {
+    if (!entry.isDirectory()) continue;
+    const dirPath = join(jobsDirPath, entry.name);
+    const job = readJobFile(join(dirPath, "job.json"));
+    if (job && isUnfinished(job)) found.push({ dirPath, job });
+  }
+  return found;
+}
+function isContainerTracked(job) {
+  return job.container?.tracking === "container";
+}
+function isMicroVmTracked(job) {
+  return job.microvm?.tracking === "microvm";
+}
+function isTracked(job) {
+  return isContainerTracked(job) || isMicroVmTracked(job);
+}
+function trackingOf(job) {
+  return job.container?.tracking ?? job.microvm?.tracking;
+}
+function isReadable(job) {
+  return readsJobState(job, READ_JOB_STATE_FORMATS);
+}
+function listUnreadableJobs(jobsDirPath) {
+  return unfinishedJobs(jobsDirPath).flatMap(({ dirPath, job }) => isReadable(job) ? [] : [{ dirPath, job, format: jobStateFormatOf(job) }]);
+}
+function listTrackedJobs(jobsDirPath) {
+  return unfinishedJobs(jobsDirPath).flatMap(({ dirPath, job }) => {
+    if (!isReadable(job)) return [];
+    const tracking = trackingOf(job);
+    if (tracking === void 0) return [];
+    if ((tracking === "container" || tracking === "microvm") && inTeardown(job)) return [];
+    return [{ dirPath, job, known: tracking === "container" || tracking === "microvm" }];
+  });
+}
+function listAdoptableJobs(jobsDirPath) {
+  return unfinishedJobs(jobsDirPath).filter(
+    ({ job }) => isReadable(job) && job.microvm === void 0 && job.pid !== void 0 && job.start !== void 0 && isSameProcess(job.pid, job.start)
+  );
+}
+async function recoverLostJobs(jobsDirPath, config, deps) {
+  const recovered = [];
+  for (const { dirPath, job } of unfinishedJobs(jobsDirPath)) {
+    if (!isReadable(job)) continue;
+    const tracking = trackingOf(job);
+    if (tracking !== void 0 && tracking !== "container" && tracking !== "microvm") {
+      recovered.push(await finishJob(job, dirPath, "interrupted", config, deps, { reason: UNKNOWN_TRACKING_REASON }));
+      continue;
+    }
+    if ((tracking === "container" || tracking === "microvm") && !inTeardown(job)) continue;
+    const alive = job.pid !== void 0 && job.start !== void 0 && isSameProcess(job.pid, job.start);
+    if (alive) continue;
+    const recorded = outcomeFromExitCode(dirPath);
+    if (recorded !== void 0) job.exitCode = recorded.code;
+    recovered.push(await finishJob(job, dirPath, recorded?.outcome ?? "interrupted", config, deps));
+  }
+  return recovered;
+}
+
+// src/runner/host-checks.ts
+var MAX_VALIDATOR_FILES = 20;
+var VALIDATORS_DIR = ".outerlayer/validators";
+var POLICY_FILE = ".outerlayer/policy.yaml";
+var LIMIT_KEY_TAIL2 = " (runner.checks.timeLimitMinutes)";
+var MAX_CHECK_ITEMS_BYTES = 1024 * 1024;
+function commandItems(read, scrub) {
+  if (read.status !== 0 || read.stdout.trim() === "") return { ok: true, items: void 0 };
+  if (Buffer.byteLength(read.stdout) > MAX_CHECK_ITEMS_BYTES) return { ok: false, reason: `its check items file is longer than ${MAX_CHECK_ITEMS_BYTES} bytes` };
+  let raw;
+  try {
+    raw = JSON.parse(read.stdout);
+  } catch {
+    return { ok: false, reason: "its check items file (OUTERLAYER_CHECK_ITEMS) is not JSON" };
+  }
+  const parsed = CheckItemsSchema.safeParse(raw);
+  if (!parsed.success) {
+    return { ok: false, reason: `its check items file does not match the check item shape: ${zodProblem(parsed.error.issues)}` };
+  }
+  return { ok: true, items: parsed.data.map((item) => item.reason === void 0 ? item : { ...item, reason: scrub(item.reason) }) };
+}
+function isJudgeCheck(check) {
+  return "judge" in check;
+}
+function lastLine(text2) {
+  return text2.split(/\r\n|\r|\n/).map((line) => line.trim()).filter((line) => line !== "").at(-1);
+}
+function readInside(root, rel) {
+  const path = join(root, rel);
+  try {
+    if (!lstatSync(path).isFile()) return void 0;
+    const inside = realpathSync(path);
+    const base = realpathSync(root);
+    return inside.startsWith(base + sep) ? readFileSync(inside, "utf8") : void 0;
+  } catch {
+    return void 0;
+  }
+}
+var MAINTAINED_BRIEF = /^\.(?:agents|outerlayer)\/skills\/(outerlayer-[a-z]+)\/([A-Za-z0-9_./-]+)$/;
+function readBrief(root, brief) {
+  const own = readInside(root, brief);
+  if (own !== void 0) return own;
+  const match = MAINTAINED_BRIEF.exec(brief);
+  if (match === null || match[2].split("/").includes("..") || !MAINTAINED_SKILLS.includes(match[1])) return void 0;
+  try {
+    return readFileSync(join(resolvePackRoot(), "maintained", match[1], match[2]), "utf8");
+  } catch {
+    return void 0;
+  }
+}
+function validatorFilesIn(root) {
+  const dir = join(root, VALIDATORS_DIR);
+  let names;
+  try {
+    if (!lstatSync(dir).isDirectory()) return [];
+    names = readdirSync(dir);
+  } catch {
+    return [];
+  }
+  const files = [];
+  for (const name of names.filter((entry) => /\.ya?ml$/.test(entry)).sort().slice(0, MAX_VALIDATOR_FILES)) {
+    const path = `${VALIDATORS_DIR}/${name}`;
+    const content = readInside(root, path);
+    if (content !== void 0) files.push({ path, content });
+  }
+  return files;
+}
+var CRITERIA_CHECK = "acceptance-criteria";
+function asHostReads(file, base, log, tag) {
+  const upgraded = upgradedStarterText(file.path, file.content, { base });
+  if (upgraded === void 0) return file;
+  log.line(`${tag} ${file.path} is an unedited copy an earlier release wrote, so it is read as this CLI writes it`);
+  return { path: file.path, content: upgraded };
+}
+function checksIn(root, log, tag) {
+  const base = existsSync(join(root, AGENTS_SKILLS_BASE)) ? AGENTS_SKILLS_BASE : OUTERLAYER_SKILLS_BASE;
+  const policyText = readInside(root, POLICY_FILE);
+  const policy = policyText === void 0 ? null : asHostReads({ path: POLICY_FILE, content: policyText }, base, log, tag);
+  const loaded = parsePolicy(policy, validatorFilesIn(root).map((file) => asHostReads(file, base, log, tag)));
+  for (const problem of loaded.problems) log.error(`${tag} ${problem.file}: ${problem.problem}`);
+  const hostChecks = loaded.customs.filter((def) => def.runWhere === "host" && def.level !== "off" && def.declaresEmit !== null);
+  const checks = [];
+  for (const def of hostChecks) {
+    if (def.judge !== void 0) checks.push({ name: def.declaresEmit, judge: { brief: def.judge.brief, text: readBrief(root, def.judge.brief), subjects: def.judge.subjects } });
+    else if (def.command !== void 0) checks.push({ name: def.declaresEmit, command: def.command });
+  }
+  const unrecorded = loaded.customs.filter((def) => def.level !== "off" && def.declaresEmit === CRITERIA_CHECK && !checks.some((check) => check.name === CRITERIA_CHECK)).map((def) => def.id);
+  return { checks, unrecorded };
+}
+async function readDefinitions(input, repository, scratch, token, tokens) {
+  const { config, job, deps } = input;
+  const tag = `#${job.item}`;
+  const stage = deps.stage ?? stageGovernedContext;
+  const controlPlaneUrl = (controlPlane) => deps.runtime.remoteFor?.(controlPlane) ?? `${deps.runtime.github.gitUrl}/${controlPlane}.git`;
+  const governing = (job.container ?? job.microvm)?.governing;
+  const kept = keptContextTree(input.jobDir, governing);
+  if (kept !== void 0) return { ok: true, ...checksIn(kept, deps.log, tag) };
+  const staged = await stage({
+    config,
+    repository,
+    ...governing === void 0 ? {} : { source: { repository: governing.repository, ref: governing.ref, sha: governing.commit } },
+    buildId: `checks-${randomBytes(4).toString("hex")}`,
+    buildDir: scratch,
+    fetchImpl: deps.fetchImpl,
+    controlPlaneUrl,
+    controlPlaneToken: tokens === void 0 ? void 0 : () => tokens.controlPlane(),
+    log: deps.log,
+    tag
+  });
+  if (staged.kind === "refused") return { ok: false, reason: staged.reason };
+  if (staged.kind === "staged") {
+    try {
+      return { ok: true, ...checksIn(join(staged.dir, "tree"), deps.log, tag) };
+    } finally {
+      rmSync(staged.dir, { recursive: true, force: true });
+    }
   }
-  return found;
-}
-function isContainerTracked(job) {
-  return job.container?.tracking === "container";
-}
-function isMicroVmTracked(job) {
-  return job.microvm?.tracking === "microvm";
-}
-function isTracked(job) {
-  return isContainerTracked(job) || isMicroVmTracked(job);
-}
-function trackingOf(job) {
-  return job.container?.tracking ?? job.microvm?.tracking;
-}
-function isReadable(job) {
-  return readsJobState(job, READ_JOB_STATE_FORMATS);
-}
-function listUnreadableJobs(jobsDirPath) {
-  return unfinishedJobs(jobsDirPath).flatMap(({ dirPath, job }) => isReadable(job) ? [] : [{ dirPath, job, format: jobStateFormatOf(job) }]);
+  const repo = join(scratch, "repo");
+  const remote = deps.runtime.remoteFor?.(repository) ?? `${deps.runtime.github.gitUrl}/${repository}.git`;
+  const started = (job.container ?? job.microvm)?.startCommit;
+  const commit = started !== void 0 && started !== "" ? started : job.environment?.recipe?.sourceCommit ?? await deps.runtime.readHead(remote, scratch);
+  if (commit === void 0) return { ok: false, reason: "the repository's default branch could not be read" };
+  const fetched = await (deps.fetchCommit ?? fetchCommit)({ remote, dir: repo, commit, token });
+  if (!fetched.ok) return { ok: false, reason: fetched.reason };
+  deps.log.line(`${tag} check definitions read at ${commit.slice(0, 12)}`);
+  return { ok: true, ...checksIn(repo, deps.log, tag) };
 }
-function listTrackedJobs(jobsDirPath) {
-  return unfinishedJobs(jobsDirPath).flatMap(({ dirPath, job }) => {
-    if (!isReadable(job)) return [];
-    const tracking = trackingOf(job);
-    if (tracking === void 0) return [];
-    if ((tracking === "container" || tracking === "microvm") && inTeardown(job)) return [];
-    return [{ dirPath, job, known: tracking === "container" || tracking === "microvm" }];
+function timeoutAfter(ms, sleep) {
+  if (sleep !== void 0) return { done: sleep(ms).then(() => "timeout"), cancel: () => void 0 };
+  let timer;
+  const done = new Promise((resolve) => {
+    timer = setTimeout(() => resolve("timeout"), ms);
+    timer.unref();
   });
+  return { done, cancel: () => clearTimeout(timer) };
 }
-function listAdoptableJobs(jobsDirPath) {
-  return unfinishedJobs(jobsDirPath).filter(
-    ({ job }) => isReadable(job) && job.microvm === void 0 && job.pid !== void 0 && job.start !== void 0 && isSameProcess(job.pid, job.start)
-  );
+function noCleanEnvironment(job) {
+  const ran = job.build?.workDir !== void 0 ? "builtin:process" : "a provision hook of the host's own";
+  return `the host has no clean environment for checks: this build ran under ${ran}, and checks run only in a new container or microVM from a build's image`;
 }
-async function recoverLostJobs(jobsDirPath, config, deps) {
-  const recovered = [];
-  for (const { dirPath, job } of unfinishedJobs(jobsDirPath)) {
-    if (!isReadable(job)) continue;
-    const tracking = trackingOf(job);
-    if (tracking !== void 0 && tracking !== "container" && tracking !== "microvm") {
-      recovered.push(await finishJob(job, dirPath, "interrupted", config, deps, { reason: UNKNOWN_TRACKING_REASON }));
-      continue;
-    }
-    if ((tracking === "container" || tracking === "microvm") && !inTeardown(job)) continue;
-    const alive = job.pid !== void 0 && job.start !== void 0 && isSameProcess(job.pid, job.start);
-    if (alive) continue;
-    const recorded = outcomeFromExitCode(dirPath);
-    if (recorded !== void 0) job.exitCode = recorded.code;
-    recovered.push(await finishJob(job, dirPath, recorded?.outcome ?? "interrupted", config, deps));
-  }
-  return recovered;
+function makeRecorder(input) {
+  const { config, job, deps } = input;
+  const tag = `#${job.item}`;
+  const now = deps.now ?? (() => /* @__PURE__ */ new Date());
+  let signer;
+  return async (name, result, sentence, opts = {}) => {
+    signer ??= await signerFor(config.configPath);
+    const keyTail = opts.keyTail ?? "";
+    const body = sentence === void 0 ? void 0 : cutReasonLine(`${scrubReason(sentence, config) ?? "check failed"}${keyTail}`);
+    const clientEmitId = `host-${createHash("sha256").update(`${job.claimId}:${job.startedAt}:${name}${opts.idTag === void 0 ? "" : `:${opts.idTag}`}`).digest("hex").slice(0, 40)}`;
+    const sent = await retrySend(
+      () => postJson(
+        config.url,
+        "/v1/emitted-results",
+        config.apiKey,
+        config.appId,
+        {
+          schemaVersion: 1,
+          // A field left undefined is not sent: the request is JSON.
+          emit: { clientEmitId, name, result, body, link: opts.link, items: opts.items, emittedAt: now().toISOString(), item: { number: Number(job.item) } }
+        },
+        deps.fetchImpl,
+        void 0,
+        signer
+      ),
+      { now: deps.now }
+    );
+    if (sent.ok) deps.log.line(`${tag} check ${name} ${result}${body === void 0 ? "" : `: ${body}`}`);
+    else deps.log.error(`${tag} check ${name} ${result} could not be recorded: ${sent.reason}`);
+  };
 }
-
-// src/runner/sender.ts
-var STOP_WAIT_MS = 3e4;
-var POLL_MS = 200;
-var ASK_AGAIN_MS = 1e3;
-var EXIT_REPORT_WAIT_MS = 2e3;
-var exitsLogged = /* @__PURE__ */ new Map();
-var BUILD_HOME = "/build/home";
-async function startSender(input) {
+async function runHostChecks(input) {
   const { config, job, jobDir, deps } = input;
+  const { runtime, log } = deps;
   const tag = `#${job.item}`;
-  if (job.itemKey === void 0) return void 0;
-  const spawnFn = deps.spawnFn ?? spawn;
+  const now = deps.now ?? (() => /* @__PURE__ */ new Date());
+  const repository = job.repository ?? job.container?.repository;
+  if (repository === void 0) return;
+  const jobFilePath = join(jobDir, "job.json");
+  const tokens = runtime.credentials.get(jobDir);
+  let readToken;
   try {
-    const launch = launchFor(config, job, jobDir, deps);
-    const fd = openSync(join(jobDir, "sender.log"), "a", RUNNER_FILE_MODE);
-    let pid;
-    let exitLogged;
-    try {
-      const child = spawnFn(launch.command, launch.args, { env: launch.env, cwd: launch.cwd, detached: true, stdio: ["ignore", fd, fd] });
-      child.on("error", (err) => deps.log.error(`${tag} session sender failed: ${describeCallFailure(err)}`));
-      exitLogged = new Promise((resolve) => {
-        child.on("exit", (code, signal) => {
-          deps.log.line(`${tag} session sender exited \xB7 ${signal ?? `code ${code}`} \xB7 see sender.log`);
-          resolve();
-        });
+    readToken = await tokens?.token("read");
+  } catch (err) {
+    log.error(`${tag} no read token for the checks: ${describeCallFailure(err)}`);
+  }
+  const scratch = join(jobDir, "checks", "definitions");
+  rmSync(scratch, { recursive: true, force: true });
+  mkdirSync(scratch, { recursive: true });
+  let definitions;
+  try {
+    definitions = await readDefinitions(input, repository, scratch, readToken, tokens);
+  } catch (err) {
+    definitions = { ok: false, reason: describeCallFailure(err) };
+  } finally {
+    removeStagedContext(scratch);
+  }
+  if (!definitions.ok) {
+    log.line(`${tag} checks not run: the definitions could not be read: ${definitions.reason}`);
+    rmSync(scratch, { recursive: true, force: true });
+    return;
+  }
+  const checks = definitions.checks.filter((check) => !isJudgeCheck(check));
+  if (checks.length === 0) {
+    rmSync(scratch, { recursive: true, force: true });
+    return;
+  }
+  log.line(`${tag} checks started (${checks.map((check) => check.name).join(", ")})`);
+  const startedMs = now().getTime();
+  const recorder = makeRecorder({ config, job, deps });
+  const record = (check, result, sentence, keyTail = "", items) => recorder(check.name, result, sentence, { keyTail, items });
+  const failAll = async (reason, keyTail = "") => {
+    log.error(`${tag} checks failed: ${reason}${keyTail}`);
+    for (const check of checks) await record(check, "fail", reason, keyTail);
+  };
+  try {
+    if (job.container === void 0 && job.microvm === void 0) return await failAll(noCleanEnvironment(job));
+    if (tokens === void 0) return await failAll("the build's repository tokens are no longer held, so the branch cannot be fetched");
+    if (job.branch === void 0) return await failAll("the build pushed no branch: the claim names none");
+    const claimed = repositoriesOf({ repositories: job.repositories, repository, branch: job.branch });
+    if (claimed.length === 0) return await failAll("the claim names no repository to check out");
+    const remoteOf = (name) => runtime.remoteFor?.(name) ?? `${runtime.github.gitUrl}/${name}.git`;
+    const remote = remoteOf(repository);
+    const pushed = /* @__PURE__ */ new Map();
+    const unpushed = [];
+    let primaryHead;
+    for (const entry of claimed) {
+      let entryToken = readToken;
+      if (!entry.primary) {
+        try {
+          entryToken = await tokens.token("read", entry.repository);
+        } catch (err) {
+          return await failAll(`no read token for ${entry.repository}: ${describeCallFailure(err)}`);
+        }
+      }
+      const read = await (deps.readBranch ?? readBranchHead)({ remote: remoteOf(entry.repository), dir: scratch, branch: entry.branch, token: entryToken });
+      if (read.kind === "unreadable") return await failAll(`the branch ${entry.branch} could not be read${entry.primary ? "" : ` on ${entry.repository}`}: ${read.reason}`);
+      if (read.kind === "absent") {
+        unpushed.push(entry);
+        continue;
+      }
+      pushed.set(entry.repository, entry.branch);
+      if (entry.primary) primaryHead = read.sha;
+    }
+    if (pushed.size === 0) {
+      return await failAll(`the build pushed no branch: ${unpushed.map((entry) => `${entry.branch} does not exist on ${entry.repository}`).join("; ")}`);
+    }
+    const repositoriesToCheckOut = claimed;
+    const limitMinutes = config.checks?.timeLimitMinutes ?? DEFAULT_CHECK_TIME_LIMIT_MINUTES;
+    const minutes = `${limitMinutes} ${limitMinutes === 1 ? "minute" : "minutes"}`;
+    const environmentLog = join(jobDir, "checks", "environment.log");
+    let transcripts = { ok: false, reason: "the runner holds no way to read the build's sessions" };
+    if (deps.collectSessions !== void 0) {
+      try {
+        transcripts = await deps.collectSessions();
+      } catch (err) {
+        transcripts = { ok: false, reason: describeCallFailure(err) };
+      }
+    }
+    if (job.microvm !== void 0) {
+      if (deps.endBuildMicroVm === void 0) return await failAll("the runner has no way to stop the build's microVM, so no check environment was made");
+      try {
+        await deps.endBuildMicroVm();
+      } catch (err) {
+        return await failAll(`the build's microVM could not be stopped, so no check environment was made: ${describeCallFailure(err)}`);
+      }
+    }
+    let abandoned = false;
+    const setup = async () => {
+      const started = job.microvm !== void 0 ? await startCheckMicroVm({
+        config,
+        runtime,
+        job,
+        jobDir,
+        tokens,
+        log,
+        aborted: () => abandoned,
+        save: (state) => {
+          if (abandoned) return;
+          job.checkMicrovm = state;
+          writeJobFile(jobFilePath, job);
+        }
+      }) : await startCheckContainer({
+        config,
+        runtime,
+        job,
+        jobDir,
+        tokens,
+        log,
+        save: (state) => {
+          job.checkContainer = state;
+          writeJobFile(jobFilePath, job);
+        }
       });
-      child.unref?.();
-      pid = child.pid;
-    } finally {
-      closeSync(fd);
-    }
-    if (pid === void 0) {
-      deps.log.line(`${tag} session sender did not start: no pid`);
-      return void 0;
-    }
-    exitsLogged.set(pid, exitLogged);
-    deps.log.line(`${tag} session sender started \xB7 pid ${pid}`);
-    return { pid, start: startTimeOf(pid) ?? void 0 };
-  } catch (err) {
-    deps.log.error(`${tag} session sender did not start: ${describeCallFailure(err)} \xB7 continuing`);
-    return void 0;
-  }
-}
-function launchFor(config, job, jobDir, deps) {
-  if (job.microvm !== void 0) {
-    const runtime = deps.runtime ?? createContainerRuntime();
-    const cli = deps.cliPath ?? join(runtime.cliBuild().distDir, "index.js");
-    return { ...microVmSenderCommand({ job, runtime, config, cli }), cwd: jobDir };
-  }
-  if (job.container !== void 0) {
-    return { ...containerSenderCommand({ job, runtime: deps.runtime ?? createContainerRuntime(), config }), cwd: jobDir };
-  }
-  const env = jobEnv(config, job.item, job.itemKey, jobDir, process.env, job.branch, job.commitIdentity?.author);
-  const build = job.build;
-  const hostEnv = build === void 0 ? env : hostCommandEnvironment(env, build, config, job.commitIdentity?.hooksPath);
-  if (build?.exec !== void 0) {
-    return { command: build.exec, args: execArgv(job.workdir, ["outerlayer", "session-sender"]), env: hostEnv, cwd: jobDir };
-  }
-  return { command: process.execPath, args: [deps.cliPath ?? process.argv[1] ?? "outerlayer", "session-sender"], env: hostEnv, cwd: job.workdir ?? jobDir };
-}
-async function restartSender(input) {
-  const { job, deps } = input;
-  const state = job.container;
-  if (state !== void 0 && job.itemKey !== void 0) {
-    const runtime = deps.runtime ?? createContainerRuntime();
-    const pidfile = senderPidfile(BUILD_HOME, Number(job.item));
-    const sleep = deps.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
-    const running = async () => {
-      const probe = await runtime.host.exec({ container: state.container, user: state.agentUser ?? ADDED_USER, env: { literals: {}, passed: {} }, argv: ["/bin/sh", "-c", senderAliveScript(pidfile)] });
-      return probe.status === 0 && probe.stdout.trim() === "alive";
+      if (!started.ok) return `the check environment could not be made: ${started.reason}`;
+      const made = "container" in started ? started.container : started.environment;
+      const steps = [
+        {
+          argv: ["git", "config", "--global", `url.http://127.0.0.1:${RELAY_PORT}/github.com/.insteadOf`, "https://github.com/"],
+          workdir: "/build/work",
+          failed: (status) => `configuring git failed (exit ${status})`
+        },
+        ...repositoriesToCheckOut.flatMap((entry) => {
+          const branch = pushed.get(entry.repository);
+          const path = entry.primary ? CHECKOUT_DIR : repositoryPath(entry.repository);
+          const clone = {
+            argv: ["git", "clone", "--filter=blob:none", "--single-branch", ...branch === void 0 ? [] : ["--branch", branch], `https://github.com/${entry.repository}.git`, path],
+            workdir: "/build/work",
+            failed: (status) => `the clone of ${branch ?? `the default branch of ${entry.repository}`} failed (exit ${status})`
+          };
+          return entry.primary && repositoriesToCheckOut.length > 1 ? [
+            clone,
+            {
+              argv: ["sh", "-c", 'mkdir -p "$(dirname "$1")" && ln -s "$2" "$1"', "link", repositoryPath(entry.repository), CHECKOUT_DIR],
+              workdir: "/build/work",
+              failed: (status) => `linking ${entry.repository} at ${repositoryPath(entry.repository)} failed (exit ${status})`
+            }
+          ] : [clone];
+        })
+      ];
+      for (const step of steps) {
+        if (abandoned) return "the check environment setup ran out of time";
+        const ran = await made.exec(step.argv, step.workdir, { logPath: environmentLog });
+        if (ran.status !== 0) return `the check environment could not be prepared: ${step.failed(ran.status)}`;
+      }
+      const lifecycleDir = lifecycleWorkdir(repositoriesToCheckOut, (job.container ?? job.microvm)?.governing?.repository);
+      for (const step of lifecycleSteps((job.container ?? job.microvm)?.lifecycle ?? {})) {
+        log.line(`${tag} checks lifecycle ${step.name} (${step.source})`);
+        const ran = await made.exec(step.argv, lifecycleDir, { logPath: environmentLog });
+        if (ran.status !== 0) return `the check environment could not be prepared: ${lifecycleFailureReason(step, ran.status)}`;
+      }
+      return made;
     };
+    const setupTimer = timeoutAfter(limitMinutes * 6e4, deps.sleep);
+    let settled;
     try {
-      await signalInContainer(runtime, state, pidfile, "TERM");
-      const deadline = (deps.waitMs ?? STOP_WAIT_MS) / POLL_MS;
-      for (let waited = 0; await running() && waited < deadline; waited += 1) await sleep(POLL_MS);
-      if (await running()) {
-        deps.log.error(`#${job.item} the session sender an earlier runner left did not stop in time \xB7 killing it`);
-        await signalInContainer(runtime, state, pidfile, "KILL");
+      const outcome = await Promise.race([
+        setup().catch((err) => `the check environment could not be made: ${describeCallFailure(err)}`),
+        setupTimer.done
+      ]);
+      if (outcome === "timeout") {
+        abandoned = true;
+        return await failAll(`the check environment setup ran out of time after ${minutes}`, LIMIT_KEY_TAIL2);
       }
-    } catch (err) {
-      deps.log.error(`#${job.item} stopping the session sender an earlier runner left failed: ${describeCallFailure(err)} \xB7 continuing`);
+      settled = outcome;
+    } finally {
+      setupTimer.cancel();
     }
-  }
-  return startSender(input);
-}
-function isLive(sender) {
-  if (sender.start !== void 0) return isSameProcess(sender.pid, sender.start);
-  try {
-    process.kill(sender.pid, 0);
-    return true;
-  } catch {
-    return false;
-  }
-}
-function signalHost(sender, signal) {
-  if (!isLive(sender)) return;
-  try {
-    process.kill(-sender.pid, signal);
-  } catch {
+    if (typeof settled === "string") return await failAll(settled);
+    const ready = settled;
     try {
-      process.kill(sender.pid, signal);
-    } catch {
+      await writeEvalInput({
+        job,
+        dir: ready.evalInput.dir,
+        scratch,
+        remote,
+        readToken,
+        branchHead: primaryHead ?? (job.container ?? job.microvm)?.startCommit ?? "",
+        transcripts,
+        scrub: transcriptScrub(config, [config.apiKey, job.itemKey, readToken]),
+        readWorkItem: () => readWorkItem(config, job.item, deps.fetchImpl),
+        fetchDiff: deps.fetchDiff ?? ((input2) => diffBetween(input2)),
+        log
+      });
+    } catch (err) {
+      return await failAll(`the checks' input could not be written: ${describeCallFailure(err)}`);
     }
-  }
-}
-async function signalInGuest(runtime, state, pidfile, signal) {
-  const { status } = await runtime.vm.exec(state.vsockPath, {
-    argv: ["/bin/sh", "-c", senderSignalScript(pidfile, signal)],
-    user: state.agentUser ?? ADDED_USER,
-    cwd: "/",
-    env: { PATH: "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" }
-  });
-  return status === 0;
-}
-async function exitReported(pid) {
-  const logged = exitsLogged.get(pid);
-  let timer;
-  const bound = new Promise((resolve) => {
-    timer = setTimeout(resolve, EXIT_REPORT_WAIT_MS);
-    timer.unref?.();
-  });
-  await Promise.race([logged, bound]);
-  clearTimeout(timer);
-  exitsLogged.delete(pid);
-}
-async function stopSender(input) {
-  const { job, deps } = input;
-  const sender = job.sender;
-  if (sender === void 0) return;
-  const tag = `#${job.item}`;
-  const sleep = deps.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
-  const inContainer = job.container === void 0 ? void 0 : { state: job.container, runtime: deps.runtime ?? createContainerRuntime(), pidfile: senderPidfile(BUILD_HOME, Number(job.item)) };
-  const inGuest = job.microvm === void 0 ? void 0 : { state: job.microvm, runtime: deps.runtime ?? createContainerRuntime(), pidfile: senderPidfile(BUILD_HOME, Number(job.item)) };
-  const signalInside = async (signal) => {
-    if (inContainer !== void 0) return signalInContainer(inContainer.runtime, inContainer.state, inContainer.pidfile, signal).catch(() => void 0);
-    if (inGuest !== void 0) return signalInGuest(inGuest.runtime, inGuest.state, inGuest.pidfile, signal).catch(() => void 0);
-    return void 0;
-  };
-  try {
-    let reached = true;
-    if (inContainer !== void 0 || inGuest !== void 0) reached = await signalInside("TERM");
-    else signalHost(sender, "SIGTERM");
-    const deadline = (deps.waitMs ?? STOP_WAIT_MS) / POLL_MS;
-    for (let waited = 0; isLive(sender) && waited < deadline; waited += 1) {
-      await sleep(POLL_MS);
-      if (!reached && (waited + 1) % (ASK_AGAIN_MS / POLL_MS) === 0) reached = await signalInside("TERM");
+    try {
+      await ready.evalInput.deliver();
+    } catch (err) {
+      return await failAll(err instanceof DeliveryFailure ? err.message : `the checks' input could not be written: ${describeCallFailure(err)}`);
     }
-    if (isLive(sender)) {
-      deps.log.error(`${tag} session sender did not stop in time \xB7 killing it`);
-      await signalInside("KILL");
-      signalHost(sender, "SIGKILL");
+    let usable = true;
+    for (const check of checks) {
+      if (!usable) {
+        await record(check, "fail", "the check environment could not be restarted after an earlier check ran out of time");
+        continue;
+      }
+      const checkStartedMs = now().getTime();
+      const logPath = join(jobDir, "checks", `${check.name}.log`);
+      await ready.exec(["rm", "-f", CHECK_ITEMS_FILE], CHECKOUT_DIR, { logPath });
+      const running = ready.exec(["/bin/sh", "-c", check.command], CHECKOUT_DIR, { logPath });
+      running.catch(() => void 0);
+      const timer = timeoutAfter(limitMinutes * 6e4, deps.sleep);
+      let outcome;
+      try {
+        outcome = await Promise.race([running, timer.done]);
+      } catch (err) {
+        timer.cancel();
+        await record(check, "fail", `the command could not be run: ${describeCallFailure(err)}`);
+        continue;
+      }
+      timer.cancel();
+      if (outcome === "timeout") {
+        await record(check, "fail", `ran out of time after ${minutes}`, LIMIT_KEY_TAIL2);
+        const restarting = ready.restart().catch(() => false);
+        const restartTimer = timeoutAfter(limitMinutes * 6e4, deps.sleep);
+        usable = await Promise.race([restarting, restartTimer.done]) === true;
+        restartTimer.cancel();
+        continue;
+      }
+      const read = await ready.exec(["head", "-c", String(MAX_CHECK_ITEMS_BYTES + 1), CHECK_ITEMS_FILE], CHECKOUT_DIR);
+      const items = commandItems(read, (text2) => scrubReason(text2, config) ?? text2);
+      if (!items.ok) {
+        await record(check, "fail", items.reason);
+        continue;
+      }
+      const failing = items.items === void 0 ? void 0 : itemsSentence(items.items, { one: "check item", many: "check items" });
+      if (outcome.status === 0 && failing === void 0) {
+        log.line(`${tag} check ${check.name} ran (${formatDuration(now().getTime() - checkStartedMs)})`);
+        await record(check, "pass", void 0, "", items.items);
+        continue;
+      }
+      if (outcome.status === 0) {
+        await record(check, "fail", failing, "", items.items);
+        continue;
+      }
+      const last = lastLine(outcome.stderr) ?? lastLine(outcome.stdout);
+      const scrubbed = last === void 0 ? void 0 : scrubReason(last, config);
+      await record(check, "fail", `exited ${outcome.status}${scrubbed === void 0 ? " with no output" : `: ${cutReasonLine(scrubbed, 140)}`}`, "", items.items);
     }
-    await exitReported(sender.pid);
   } catch (err) {
-    deps.log.error(`${tag} stopping the session sender failed: ${describeCallFailure(err)} \xB7 continuing`);
+    log.error(`${tag} checks stopped: ${describeCallFailure(err)}`);
+  } finally {
+    if (job.checkContainer !== void 0) {
+      await cleanupContainer(runtime, job.checkContainer).catch((err) => log.error(`${tag} removing the check environment failed: ${describeCallFailure(err)}`));
+      delete job.checkContainer;
+      writeJobFile(jobFilePath, job);
+    }
+    if (job.checkMicrovm !== void 0) {
+      await cleanupMicroVm(runtime, job.checkMicrovm).catch((err) => log.error(`${tag} removing the check environment failed: ${describeCallFailure(err)}`));
+      delete job.checkMicrovm;
+      writeJobFile(jobFilePath, job);
+    }
+    rmSync(scratch, { recursive: true, force: true });
+    rmSync(join(jobDir, "checks", EVAL_INPUT_NAME), { recursive: true, force: true });
+    if (existsSync(scratch)) log.error(`${tag} the checks' scratch directory could not be removed`);
+    log.line(`${tag} checks done (${formatDuration(now().getTime() - startedMs)})`);
   }
 }
 
-export { ALREADY_RELEASED, AttemptLogBook, EXIT_CODE_FILE, GUEST_USAGE_INTERVAL_MS, MICROVM_COMMAND_DIR, RENEW_INTERVAL_SECONDS, appendCommandLog, commandLogOffset, deliverCommitHooks, describeHookEnd, finishJob, foldSample, hookLimitsFor, inTeardown, isContainerTracked, isGroupAlive, isIdle, isMicroVmTracked, isReadable, isTimedOut, isTracked, isUnfinished, jobEnv, judgeProbe, listAdoptableJobs, listTrackedJobs, listUnreadableJobs, microVmCommandLine, microVmOomKills, needsRenew, outcomeFromExitCode, probeCommand, probeMicroVmCommand, provisionMicroVm, provisionProcess, readCpuUsec, readProvisionOut, recoverLostJobs, releaseLease, renewLease, restartSender, retryFailedReleases, runCommand, runHook, sampleGuest, scrubReason, serveLease, setStage, startMicroVmCommand, startSender, stopOrphanedMicroVms, stripTerminalControls, unfinishedJobs, vmAlive, workdirProblem, writeGuestGhConfig };
+export { ALREADY_RELEASED, AttemptLogBook, EXIT_CODE_FILE, GUEST_USAGE_INTERVAL_MS, MAX_CHECK_ITEMS_BYTES, MICROVM_COMMAND_DIR, RENEW_INTERVAL_SECONDS, appendCommandLog, checksIn, commandItems, commandLogOffset, deliverCommitHooks, describeHookEnd, finishJob, foldSample, hookLimitsFor, inTeardown, isContainerTracked, isGroupAlive, isIdle, isJudgeCheck, isMicroVmTracked, isReadable, isTimedOut, isTracked, isUnfinished, jobEnv, judgeProbe, listAdoptableJobs, listTrackedJobs, listUnreadableJobs, makeRecorder, microVmCommandLine, microVmOomKills, needsRenew, outcomeFromExitCode, probeCommand, probeMicroVmCommand, provisionMicroVm, provisionProcess, readCpuUsec, readDefinitions, readProvisionOut, recoverLostJobs, releaseLease, renewLease, restartSender, retryFailedReleases, runCommand, runHook, runHostChecks, sampleGuest, scrubReason, serveLease, setStage, startMicroVmCommand, startSender, stopOrphanedMicroVms, stripTerminalControls, timeoutAfter, unfinishedJobs, vmAlive, workdirProblem, writeGuestGhConfig };