prep docs and service updates

scripts/cleanup-runner-space.sh

@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+# Safe-ish workspace cleanup when the runner hits “No space left on device”.
+# Deletes build/test outputs that are regenerated; preserves offline caches and sources.
+set -euo pipefail
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+
+echo "Cleaning workspace outputs under: ${ROOT}"
+
+rm -rf "${ROOT}/TestResults" || true
+rm -rf "${ROOT}/out" || true
+rm -rf "${ROOT}/artifacts" || true
+
+# Trim common temp locations if they exist in repo workspace
+[ -d "${ROOT}/tmp" ] && find "${ROOT}/tmp" -mindepth 1 -maxdepth 1 -exec rm -rf {} +
+
+echo "Done. Consider also clearing any runner-level /tmp outside the workspace if safe."

scripts/commit-prep-artifacts.sh

@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Helper to stage and commit the prep/doc updates once disk/PTY issues are resolved.
+# Usage: ./scripts/commit-prep-artifacts.sh "Your commit message"
+
+root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+cd "$root"
+
+git add \
+  docs/modules/policy/prep/2025-11-20-policy-airgap-prep.md \
+  docs/modules/policy/prep/2025-11-20-policy-aoc-prep.md \
+  docs/modules/policy/prep/2025-11-20-policy-attest-prep.md \
+  docs/modules/policy/prep/2025-11-21-policy-metrics-29-004-prep.md \
+  docs/modules/policy/prep/2025-11-21-policy-path-scope-29-002-prep.md \
+  docs/modules/scanner/prep/2025-11-21-scanner-records-prep.md \
+  docs/samples/prep/2025-11-20-lnm-22-001-prep.md \
+  docs/implplan/SPRINT_0123_0001_0001_policy_reasoning.md \
+  docs/implplan/SPRINT_123_policy_reasoning.md \
+  docs/implplan/SPRINT_0125_0001_0001_policy_reasoning.md \
+  docs/implplan/SPRINT_0131_0001_0001_scanner_surface.md
+
+git status --short
+
+msg="${1:-Start prep on policy path/scope, metrics/logging, and scanner record payloads}"
+git commit -m "$msg"

scripts/run-node-isolated.sh

@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+# Convenience wrapper to run the isolated Node analyzer suite with cleanup enabled.
+set -euo pipefail
+
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+
+# auto-clean workspace outputs before running tests (uses cleanup helper inside test script)
+export CLEAN_BEFORE_NODE_TESTS="${CLEAN_BEFORE_NODE_TESTS:-1}"
+export DOTNET_SYSTEM_GLOBALIZATION_INVARIANT=1
+export DOTNET_CLI_TELEMETRY_OPTOUT=1
+export NUGET_PACKAGES="${ROOT}/offline/packages"
+
+exec "${ROOT}/src/Scanner/__Tests/node-tests-isolated.sh"