L01-06 — Audit untrusted PDF process isolation #20

Outcome

Define Core-to-worker input/output boundary, sandbox defaults, no customer-content telemetry, and supervisor recovery semantics.

Parent and boundary

Parent: #2. Owner: LoopLibCore. This issue owns one bounded slice of Evidence Core; consume accepted upstream contracts and keep PDF/verdict/publication authority with Core.

Acceptance

• A malformed file crashing the worker leaves the host alive and yields a fail-closed receipt.
• Failure case: A crash dump or error log containing PDF bytes is rejected; no in-process fallback parses untrusted input silently.

Required proof

Worker crash/timeout/resource fault injection and telemetry inspection. Record the exact source SHA, test command or hosted run, fixture/artifact identity, and any skipped or unavailable lane. Run the repository's mapped proof and check-change gate for a PR.

Handoff

Record changed files, observed result, remaining risk, and a 1–3 sentence anti-slop review. Completion means acceptance evidence, not merely a merged implementation.

Sources

Approved master roadmap · Legacy/research input.