35ab7f17c0
Generalize safe host-to-isolated rename migration
2026-07-29 22:20:04 +09:00
aaee63a6e3
Show progress while downloading sandbox images
2026-07-29 00:48:24 +09:00
0dda65fc2e
Support durable host-to-isolated workspace migration
2026-07-26 00:43:30 +09:00
0f6825c3b9
Add a static trusted sandbox init
2026-07-19 22:38:37 +09:00
73e3e9fdee
Fix rootless launches with subordinate ID maps
...
Resolve and verify canonical caller subordinate ranges, launch preparation and runtime workers through mapped causal acquisition, and keep runsc in the existing user namespace. Repair descriptor-relative OCI cleanup and absent-mount recovery so failed launches can progress to the corrected path.
2026-07-19 19:51:47 +09:00
897578e7cb
Consume shared sandbox destinations at runtime boundaries
2026-07-19 05:25:32 +09:00
f8849cdb5f
Centralize sandbox destination authority
2026-07-19 04:36:44 +09:00
22325aa76a
Decouple client contracts and close private role registries
2026-07-19 03:44:30 +09:00
bda342890f
Adopt mature Git config and DNS codecs
2026-07-19 00:40:26 +09:00
d08d931b5f
Organize the public CLI with clap
2026-07-18 23:25:40 +09:00
696dae610a
Integrate host escalation with production sessions
2026-07-18 04:03:39 +09:00
917409fcc6
Integrate routed Git workspaces with persistent state
2026-07-18 02:08:14 +09:00
24d7d5b6e0
Add crash-consistent State Anchor maintenance
2026-07-17 23:23:19 +09:00
46b52b4b43
Complete authenticated interactive prompt routing
2026-07-17 23:23:19 +09:00
6816f0632e
Add interactive client terminal transport
2026-07-17 23:23:19 +09:00
71b0266cf2
Run non-interactive sessions through production coordination
2026-07-17 23:23:19 +09:00
bc04112c77
Bind production cold start to installed Lazaret authorities
2026-07-17 23:23:19 +09:00
33ac0ba4ee
Compose cold-start resources under Runtime Supervisor ownership
2026-07-17 23:23:19 +09:00
49d5def1a9
Bind sandbox handoff authority and restore verifier gates
2026-07-17 23:23:19 +09:00
95104fa4e7
Implement fail-closed ignored workspace routing
2026-07-16 13:04:12 +09:00
ba6a075839
Implement supervised rootless network readiness
2026-07-15 23:26:37 +09:00
407b75b1ff
Add confined host escalation transport
2026-07-15 19:59:51 +09:00
fd78804fc7
Compose foreground sandbox process lifetimes
2026-07-15 19:30:43 +09:00
c3a76ec8c4
Add generation-bound TLS control face
...
Create ephemeral trust anchors, publish an exact-profile Unix control socket, and persist generation-authorized mTLS session registration through the Domain Store.
2026-07-15 18:19:18 +09:00
e6d6406c64
Implement exact State Anchor mount and lease lifecycle
2026-07-15 17:33:59 +09:00
af8669c165
Implement generation-bound protocol cryptography
2026-07-15 15:56:31 +09:00
5458460717
Implement verified OCI prepared-lower lifecycle
2026-07-15 15:48:46 +09:00
54f3a08b91
Confine terminfo injection to runtime control state
2026-07-15 15:16:25 +09:00
cf5948e8be
Build deterministic OCI sandbox specifications
2026-07-15 14:59:43 +09:00
e4d9cc2dc9
Add the lock-owned transactional Domain Store
2026-07-15 14:10:50 +09:00
96b494a8bb
Add the transactional prepared-artifact catalog
2026-07-15 13:40:52 +09:00
0716bab960
Integrate trusted-host configuration
...
# Conflicts:
# Cargo.lock
# Cargo.toml
# tools/lazaret_verify.py
2026-07-15 00:56:14 +09:00
f9eb966341
Implement trusted-host configuration resolution
2026-07-15 00:43:42 +09:00
1468f6b841
Add fail-closed Linux process and descriptor primitives
2026-07-15 00:39:26 +09:00
16defc768a
Add typed schema records and strict version checks
2026-07-13 04:05:12 +09:00
b438dd5201
Bootstrap verified Rust implementation workspace
2026-07-13 02:25:59 +09:00
