465c40822a
Package Apache license and standardize notices
...
Adopt the conventional NOTICE layout and include required license material in published crate archives. Verify workspace license metadata and the host coordinator's bundled ncurses notices.
2026-08-19 21:28:23 +09:00
8cef037fa3
Implement PTY-native session terminal control
2026-08-02 17:36:40 +09:00
2c420012bd
Own the patched runsc artifact and bind recovery identity
2026-07-26 18:01:03 +09:00
db9a561d0c
Bound and configure the per-Domain runsc dcache
2026-07-24 23:34:02 +09:00
acd0b4cc8c
Default profiles to persistent system paths
2026-07-22 03:23:38 +09:00
7aff8e542e
Restore persistent system path composition
2026-07-22 03:07:42 +09:00
31e9ab0f2d
Replace external reachability with an owned canary
2026-07-19 22:39:31 +09:00
1c86e1aa0e
Reserve an explicit Lazaret network topology
...
Launch slirp4netns on 10.137.54.0/24, update its gateway and DNS routes, and refuse configured allows or specific denies that collide with the enclosing Lazaret /23 while preserving broad RFC 1918 denial.
2026-07-19 19:52:14 +09:00
73e3e9fdee
Fix rootless launches with subordinate ID maps
...
Resolve and verify canonical caller subordinate ranges, launch preparation and runtime workers through mapped causal acquisition, and keep runsc in the existing user namespace. Repair descriptor-relative OCI cleanup and absent-mount recovery so failed launches can progress to the corrected path.
2026-07-19 19:51:47 +09:00
6fcadf7547
Cover State Reset scope in enum shape authority
2026-07-19 05:55:42 +09:00
77ba5319ce
Make core serialized enum shapes exhaustive
2026-07-19 05:48:19 +09:00
c361217fe9
Require schema ownership for signed payloads
2026-07-19 05:43:20 +09:00
76de24c75c
Make split modules own their dependency imports
2026-07-19 05:28:45 +09:00
247819250b
Replace lexical Rust fragments with real modules
2026-07-19 05:12:57 +09:00
f8849cdb5f
Centralize sandbox destination authority
2026-07-19 04:36:44 +09:00
54cc167f81
Make codec shape authority compile-time and fixed
2026-07-19 04:33:43 +09:00
22325aa76a
Decouple client contracts and close private role registries
2026-07-19 03:44:30 +09:00
ee9201b057
Decompose oversized Rust files by responsibility
2026-07-19 03:02:44 +09:00
03bfe92ca0
Retire the mutable design schema
...
Make Rust records and fixed codec tests the implementation-shape owner, remove the Mermaid category registry, and state the ownership boundary in the authoritative specification.
2026-07-19 02:45:32 +09:00
e7dd95aea6
Remove phase vocabulary from Lazaret interfaces
2026-07-18 22:35:48 +09:00
3f9b1b3543
Close hostile recovery and concurrency gaps
2026-07-18 05:47:15 +09:00
696dae610a
Integrate host escalation with production sessions
2026-07-18 04:03:39 +09:00
24d7d5b6e0
Add crash-consistent State Anchor maintenance
2026-07-17 23:23:19 +09:00
6816f0632e
Add interactive client terminal transport
2026-07-17 23:23:19 +09:00
2bc5982a62
Enforce exact recovery ownership before cold start
2026-07-17 23:23:19 +09:00
f21a847991
Integrate exact production recovery before cold start
2026-07-17 23:23:19 +09:00
d25942596f
Implement exact bootstrap recovery and artifact GC
2026-07-17 23:23:19 +09:00
4dd2b150d2
Compose selected State Anchor paths over prepared roots
2026-07-17 23:23:19 +09:00
71b0266cf2
Run non-interactive sessions through production coordination
2026-07-17 23:23:19 +09:00
fbd332c31f
Require explicit canonical network readiness targets
2026-07-17 23:23:19 +09:00
ba6a075839
Implement supervised rootless network readiness
2026-07-15 23:26:37 +09:00
407b75b1ff
Add confined host escalation transport
2026-07-15 19:59:51 +09:00
c3a76ec8c4
Add generation-bound TLS control face
...
Create ephemeral trust anchors, publish an exact-profile Unix control socket, and persist generation-authorized mTLS session registration through the Domain Store.
2026-07-15 18:19:18 +09:00
27bc3d835e
Validate persisted network readiness fingerprints
2026-07-15 17:12:07 +09:00
304fb225d6
Implement canonical network readiness derivation
2026-07-15 16:58:30 +09:00
d274e1835d
Pin protocol claim and signing vectors
2026-07-15 16:18:38 +09:00
af8669c165
Implement generation-bound protocol cryptography
2026-07-15 15:56:31 +09:00
5458460717
Implement verified OCI prepared-lower lifecycle
2026-07-15 15:48:46 +09:00
e4d9cc2dc9
Add the lock-owned transactional Domain Store
2026-07-15 14:10:50 +09:00
2d4ec2ed8b
Generalize benchmark qualification environment
2026-07-15 02:49:39 +09:00
6301eeba3e
Split record modules without changing wire behavior
2026-07-15 02:09:18 +09:00
f9eb966341
Implement trusted-host configuration resolution
2026-07-15 00:43:42 +09:00
f106a9f636
Classify serialized and runtime schema records
2026-07-14 23:34:56 +09:00
de57e77dc8
Add phase-aware pidfs process ownership records
2026-07-14 01:47:53 +09:00
16defc768a
Add typed schema records and strict version checks
2026-07-13 04:05:12 +09:00
b438dd5201
Bootstrap verified Rust implementation workspace
2026-07-13 02:25:59 +09:00
