[drew]

Summary

Handle socket owners that exit during proxy identity resolution without weakening checks for live owners. Clean restack of #3598.

Related Issue

No issue required: localized race found during repeated proxy tests.

Changes

• Ignore a scanned socket owner only when its /proc entry has disappeared.
• Keep live identity failures and conflicting live owners denied.
• Isolate middleware tests from unrelated procfs identity timing and add regression coverage.

Testing

• Original 100 focused proxy rounds and 10 full network test rounds passed in fix(proxy): ignore exited socket owners and isolate middleware tests #3598; the pre-fix loop failed within five rounds.
• mise run pre-commit passed on this restacked branch.
• Combined mise run ci fails in Go gateway-list tests because this host has /etc/openshell/gateways/default; see test(go): isolate gateway listing from host config #3590.

Checklist

• Conventional, signed-off commit.
• Architecture documentation updated.

[copy-pr-bot]

Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually.

Contributors can view more details about this message here.