Spaces:
Sleeping
Sleeping
Commit History
-
Assembly · Phase J2: expose asm in the kernel sandbox
The kernel runner imports the trusted assembly module (real builtins, via a geomdir passed in the payload) and injects only its safe callables as `asm` into the generator's restricted globals — so generators gain composition without the import allowlist being widened (a generator that tries 'import geometry' is still rejected). asm injection is best-effort and doesn't affect generators that don't use it. 4 tests: an asm cone-on-cylinder runs end-to-end through the kernel and the parts are joined; suite green.2ce2625
-
Option A · Phase A2: sandbox kernel + geometry repair
kernel.run executes a model generator build(p)->(verts,faces) in a separate interpreter process with wall-clock timeout, rlimits, and a numpy/math/itertools import allowlist (a correctness guard, not a security boundary — process+rlimits + network isolation are). repair dedupes, drops degenerates, snaps regular solids to the best-fit sphere, fixes outward winding, and normalizes to dim 2.0 without worsening any targeted metric. 21 offline tests; suite 89 green.089a893