TEST 092

TEST-092

Stimulus

Submit lane declarations that give the command as one shell string instead of an argument vector; give the candidate commit as a branch, a tag, or an abbreviated SHA; place an input outside the candidate checkout or an output outside the evidence directory, once through .. and once through a symlink; and omit the timeout or make it zero or negative. Then run a valid declaration whose command the engine has never seen, a valid declaration whose workload exceeds its timeout, and a valid declaration whose workload does not produce a declared output.

Required observation

Each invalid declaration is rejected before any VM mutation. The valid declaration runs in a disposable guest at the declared commit, and its evidence record holds the SHA-256 of the RFC 8785 canonical declaration, the candidate commit, the lane identity, and the run status. The overrunning workload is stopped and recorded as timeout, not as a non-zero exit. The run with the missing output fails.