Alexey Milovidov f290f52f5c Address review: give the triage sandbox a writable temporary directory ...

`--ro-bind / /` mounts the whole host filesystem read-only, and the triage
Bubblewrap layout only re-opened the private clone and the private home for
writing. Everything that falls back to the default temporary directory
(`mktemp`, compiler and linker helpers, Python tooling, some Git plumbing)
therefore failed with `EROFS`, so a routine inspection step inside triage
ended as a failure instead of a clean handoff to the coding model.

Mount a private `--tmpfs /tmp` and point `TMPDIR` at it. The mount is placed
before the clone and home binds so those still win if the worktree base itself
lives under `/tmp`.

Regression coverage asserts both flags and, when Bubblewrap is usable, runs
`mktemp` inside the namespace; the paired sanity check confirms that the same
sandbox without the temp mount does fail.

2026-09-02 06:45:23 +00:00

..

test_continue_all_prs.sh

Address review: give the triage sandbox a writable temporary directory

2026-09-02 06:45:23 +00:00