[squid-protocol]

Part of #5060 (first checkbox: model-port scalar fields). The runtime refusal landed in #5332 and #5381; this PR pins the rest of the input class and records burned-estate reach.

Class: X39, XCTL of storage a LINK caller owns, model-port value COMMAREA traced by equality. Handled here: String[] element, derived values (suffixed String, sum: not traced, pinned as NORMAL), null field. Already handled: nested/list/map values, primitive tables, cross-width numbers.

Burned-estate reach: no burned program is both LINKed and an XCTL issuer (CardDemo XCTLers are transaction-started; ZECS001 XCTLs but LINKs ZECS002, which does not; COPAUS1C's LINK target is not in the corpus). Unreached, so no runtime change.

Tests: test_model_link_xctl_4956 (JDK 17), the 4816/4957 XCTL tests, refusals-registered, tree-wide guards: 76 passed, 3 skipped. pr_gates --fast 6/6. No golden bless (no parsing change); no template change.

Sibling gaps: copy vs same storage needs a real z/OS run (stays REFUSED); value derived from a DTO field cannot be traced (no burned program needs it, frontier). SET ADDRESS alias done in #4957.

Cross-repo: none.

🤖 Generated with Claude Code

[squid-protocol]

No description provided.

[squid-protocol]

PR #5478 @ 218f752: 2 failed check(s)

== full-suite (failure) -- real
https://github.com/squid-protocol/gitgalaxy/actions/runs/39131936366/job/117693059660
repro: python -m pytest -q tests
errors:
##[error]Process completed with exit code 1.
log tail:
Hosted Compute Agent
Version: 20261012.601
Commit: f3dc54e1fb89da6852db922499a0233137369e1d
Build Date: 2026-10-12T17:48:21Z
Worker ID: {fea32f88-fcbf-4723-8ea1-1d75bc36cb49}
Region: westus
Cloud: Azure
##[endgroup]
##[group]Operating System
Ubuntu
24.04.5
LTS
##[endgroup]
##[group]Runner Image
Image: ubuntu-24.04
Version: 20261012.334.1
Included Software: https://github.com/actions/runner-images/blob/ubuntu24/20261012.334/images/ubuntu/Ubuntu2404-Readme.md
Image Release: https://github.com/actions/runner-images/releases/tag/ubuntu24%2F20261012.334
##[endgroup]
##[group]GITHUB_TOKEN Permissions
Contents: read
Metadata: read
##[endgroup]
Secret source: Actions
Cache mode: write
Prepare workflow directory
Prepare all required actions
Complete job name: full-suite
##[group]Run echo "full-suite parts: $PARTS (tested-tree skip: $SKIP)"
echo "full-suite parts: $PARTS (tested-tree skip: $SKIP)"
# #4935: "skipped" is a pass only when the gate proved this tree green on the PR; otherwise it is a failure
test "$PARTS" = "success" || { test "$PARTS" = "skipped" && test "$SKIP" = "true"; }
shell: /usr/bin/bash -e {0}
env:
PARTS: failure
SKIP:
##[endgroup]
full-suite parts: failure (tested-tree skip: )
##[error]Process completed with exit code 1.
Cleaning up orphan processes

== full-suite part 1/3 (failure) -- real
https://github.com/squid-protocol/gitgalaxy/actions/runs/39131936366/job/117689731622
repro: python -m pytest -q tests/core_engine/test_ci_install_pins.py::test_workflows_build_without_isolation
failing tests: tests/core_engine/test_ci_install_pins.py::test_workflows_build_without_isolation
errors:
fail-on-cache-miss: false
[--ai-guardrails] [--fail-on-secrets]
[--fail-on-malware]
--fail-on-secrets CI/CD Gate: Fail build if hardcoded secrets are
--fail-on-malware CI/CD Gate: Fail build if ML threat inference flags
CI/CD Gate: Fail build if any file exceeds this risk
CI/CD Gate: fail the build if any file's structural
E AssertionError: [('java-base-generation.yml', 'pip install -e .')]
tests/core_engine/test_ci_install_pins.py:179: AssertionError
FAILED tests/core_engine/test_ci_install_pins.py::test_workflows_build_without_isolation - AssertionError: [('java-base-generation.yml', 'pip install -e .')]
##[error]Process completed with exit code 1.
log tail:
env:
PYTHONUTF8: 1
GITGALAXY_LICENSE_KEY: COMMUNITY_FREE_TIER
OMP_NUM_THREADS: 1
pythonLocation: /opt/hostedtoolcache/Python/3.12.15/x64
PKG_CONFIG_PATH: /opt/hostedtoolcache/Python/3.12.15/x64/lib/pkgconfig
Python_ROOT_DIR: /opt/hostedtoolcache/Python/3.12.15/x64
Python2_ROOT_DIR: /opt/hostedtoolcache/Python/3.12.15/x64
Python3_ROOT_DIR: /opt/hostedtoolcache/Python/3.12.15/x64
LD_LIBRARY_PATH: /opt/hostedtoolcache/Python/3.12.15/x64/lib
PYTEST_ADDOPTS: --ignore=tests/cobol_mainframe
##[endgroup]
With the provided path, there will be 1 file uploaded
Artifact name is valid!
Root directory input is valid!
Uploading artifact: test-times-part-1.zip
Beginning upload of artifact content to blob storage
Uploaded bytes 174694
Finished uploading artifact content to blob storage!
SHA256 digest of uploaded artifact is 03ed59542696f088756e97993fba199b7cbf8e74dcd1ad017c4b14ecd8c9e40d
Finalizing artifact upload
Artifact test-times-part-1 successfully finalized. Artifact ID 12138802454
Artifact test-times-part-1 has been successfully uploaded! Final size is 174694 bytes. Artifact ID is 12138802454
Artifact download URL: https://github.com/squid-protocol/gitgalaxy/actions/runs/39131936366/artifacts/12138802454
Post job cleanup.
[command]/usr/bin/git version
git version 2.55.0
Temporarily overriding HOME='/home/runner/work/_temp/e121ed75-3b2a-41fa-9aa1-f24d2d17aeda' before making global git config changes
Adding repository directory to the temporary git global config as a safe directory
[command]/usr/bin/git config --global --add safe.directory /home/runner/work/gitgalaxy/gitgalaxy
Removing SSH command configuration
[command]/usr/bin/git config --local --name-only --get-regexp core.sshCommand
[command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'core.sshCommand' && git config --local --unset-all 'core.sshCommand' || :"
Removing HTTP extra header
[command]/usr/bin/git config --local --name-only --get-regexp http.https://github.com/.extraheader
[command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'http.https://github.com/.extraheader' && git config --local --unset-all 'http.https://github.com/.extraheader' || :"
Removing includeIf entries pointing to credentials config files
[command]/usr/bin/git config --local --name-only --get-regexp ^includeIf.gitdir:
[command]/usr/bin/git submodule foreach --recursive git config --local --show-origin --name-only --get-regexp remote.origin.url
Cleaning up orphan processes

[squid-protocol]

No description provided.