Spaces:
Sleeping
Sleeping
Commit History
-
Assembly · Phase J2: expose asm in the kernel sandbox
The kernel runner imports the trusted assembly module (real builtins, via a geomdir passed in the payload) and injects only its safe callables as `asm` into the generator's restricted globals — so generators gain composition without the import allowlist being widened (a generator that tries 'import geometry' is still rejected). asm injection is best-effort and doesn't affect generators that don't use it. 4 tests: an asm cone-on-cylinder runs end-to-end through the kernel and the parts are joined; suite green.2ce2625
