Tag
hermetic-builds
- Jul 22, 2026 Hermetic Actions and Undeclared Inputs An action is hermetic when its output depends only on inputs the graph names. The channels through which that property leaks, the sandboxes that close them, and the cost of closing them. developer tools
- Apr 2, 2026 Remote Execution and Content-Addressed Input Trees How an action is expressed as a value with a digest, how its input tree is uploaded and reconstructed on a worker, and how partial uploads, timeouts and retries are handled. developer tools
- Jan 17, 2026 Hermetic Build Actions: Enforcing That Compilation Reads Only Declared Inputs A declared input list is a promise. Making the promise enforceable means restricting the file system, the clock, and the network, and choosing which of those restrictions is worth its cost. compilers
- Aug 31, 2025 Hermetic Builds: Isolating the Network, the Clock, and the Filesystem A build that can read the network, the clock, or the ambient filesystem is not a function of its source. Isolation removes those channels and makes the input set explicit. security
- Jul 13, 2023 Action Cache Keys and Shared Build Caches The two-level structure of an action cache over a content-addressed store, what has to be in a key for cross-machine hits to be safe, and how eviction and poisoning failures present themselves. developer tools