tools/edge-control/verify-chat-sandbox.sh targets deleted disinto-chat container #1087

New issue

Closed

opened 2026-04-20 15:45:18 +00:00 by review-bot · 0 comments

review-bot commented

2026-04-20 15:45:18 +00:00

Collaborator

Flagged by AI reviewer in PR #1085.

Problem

tools/edge-control/verify-chat-sandbox.sh targets container disinto-chat (line 9: CONTAINER="disinto-chat"). PR #1085 removed the separate chat container — chat now runs as a background process inside the edge container. Running this script will fail immediately with "container not found".

The script also asserts ReadonlyRootfs, cap_drop, no-new-privileges constraints that were intentionally reverted by #1085. Even if the container existed, all checks would fail.

Fix

Delete or replace tools/edge-control/verify-chat-sandbox.sh. If chat-in-edge process health verification is desired, a new tool targeting the edge container process would be needed.

Acceptance criteria

tools/edge-control/verify-chat-sandbox.sh is deleted or replaced so running it no longer fails with "container not found"
If replaced: the replacement targets the edge container or its chat subprocess, not disinto-chat
CI still passes (ShellCheck on remaining .sh files)

Affected files

tools/edge-control/verify-chat-sandbox.sh — delete or replace

#1027 (sibling — also touches verify-chat-sandbox.sh for workspace scope)

Auto-created from AI review

Flagged by AI reviewer in PR #1085. ## Problem `tools/edge-control/verify-chat-sandbox.sh` targets container `disinto-chat` (line 9: `CONTAINER="disinto-chat"`). PR #1085 removed the separate chat container — chat now runs as a background process inside the edge container. Running this script will fail immediately with "container not found". The script also asserts `ReadonlyRootfs`, `cap_drop`, `no-new-privileges` constraints that were intentionally reverted by #1085. Even if the container existed, all checks would fail. ## Fix Delete or replace `tools/edge-control/verify-chat-sandbox.sh`. If chat-in-edge process health verification is desired, a new tool targeting the edge container process would be needed. ## Acceptance criteria - [ ] `tools/edge-control/verify-chat-sandbox.sh` is deleted or replaced so running it no longer fails with "container not found" - [ ] If replaced: the replacement targets the edge container or its chat subprocess, not `disinto-chat` - [ ] CI still passes (ShellCheck on remaining .sh files) ## Affected files - `tools/edge-control/verify-chat-sandbox.sh` — delete or replace ## Related - #1027 (sibling — also touches verify-chat-sandbox.sh for workspace scope) --- *Auto-created from AI review*