Ephemeral Shouldn't Mean Downloading ffmpeg Again

说明与用途

为每个新环境重复下载和编译 ffmpeg 会浪费资源。引入基于哈希的 Tool Shed 缓存可在所有环境之间重用同一工件，节省时间和带宽，但也带来安全和隐私问题。

问题

Repeatedly downloading and compiling the same ffmpeg for each fresh Bench or Workshop wastes time and bandwidth.

结果

ffmpeg is built once and reused across all Benches and Workshops, saving time and bandwidth while maintaining recipe authority.

工作流

• Define ffmpeg build as a recipe step with pinned package set and network profile.
• Compute a hash key from recipe inputs and sealed base.
• Check Tool Shed for existing bytes matching the key.
• If present, reuse cached artifact; if not, derive ffmpeg, store bytes in Tool Shed, and hand over environment.
• Launch Bench or Workshop using the ready environment without exposing the derivation path to the agent.
• Ensure supervisor verifies that all Tool Shed bytes originate from verified recipe executions.
• Delete or purge Tool Shed when desired without affecting recipe authority.

证据

Ten Benches that all need ffmpeg means ten identical downloads and ten identical builds.

来源

The Tool Shed is where the derived bytes live. It is content-addressed.

来源

A hash is identity, not safety.

来源