WIP: feat(tv-player): isolate authenticated media streams #1620

Draft
lytedev wants to merge 2 commits from propose/tv-player-private-stream into main
Owner

See the commits.

See the commits.
feat(tv-player): isolate authenticated media streams (WIP)
Some checks failed
/ check-format (push) Has been cancelled
/ build (push) Has been cancelled
e4639b0cec
test(tv-player): use the proven TCG launch configuration
All checks were successful
/ check-format (push) Successful in 21s
/ build (push) Successful in 21m4s
6bada73e87
The generated launcher combined -machine accel=kvm:tcg with -accel
tcg; QEMU rejects these accelerator options as incompatible. Use the
same forceAccel setting and machine option as the desktop capability
fixture instead of overriding the QEMU package or CPU.

Verified on Bigtower under the exclusive synthetic-validation lock:
Nix formatting, Ruff, Python compilation, and the registered NixOS TCG
check. All eight receiver tests pass, including authenticated identical
WAV bytes, credential canaries, owned process controls, replacement and
backpressure cancellation, legacy playlists, and pinned mpv null output.
Physical screen playback and the separate trusted client integration
remain outside this validation.
All checks were successful
/ check-format (push) Successful in 21s
Required
Details
/ build (push) Successful in 21m4s
Required
Details
This pull request is marked as a work in progress.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin propose/tv-player-private-stream:propose/tv-player-private-stream
git switch propose/tv-player-private-stream
Sign in to join this conversation.
No reviewers
No milestone
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
lytedev/nix!1620
No description provided.