fix: enforce durable Windows launch release barrier

2026-09-06 13:44:50 +00:00
parent 486894557d
commit 3f15377ed5
6 changed files with 82 additions and 24 deletions
@@ -130,6 +130,9 @@ func windowsExecutionContext(value string) (rvboxv1.WindowsExecutionContext, boo
 type Process interface {
 	IssueUUID() domain.UUID
 	Identity() EffectiveIdentity
+	// Release crosses the durable launch-authorized barrier. A native Windows
+	// process is created suspended and must not execute before this call.
+	Release(context.Context) error
 	// ReadOutput returns the next bounded stdout/stderr chunk. It continues
 	// until both child pipes reach EOF, so Wait never reports a terminal
 	// result before the captured output has drained.