8cef037fa3
Implement PTY-native session terminal control
2026-08-02 17:36:40 +09:00
2c420012bd
Own the patched runsc artifact and bind recovery identity
2026-07-26 18:01:03 +09:00
503f090121
Establish bounded descriptor budgets for sandbox domains
2026-07-24 02:18:30 +09:00
1bd1d395d9
Bind prepared artifact selection against reclaim
2026-07-22 01:51:46 +09:00
af9b4de85a
Compose protected runtime files before sandbox handoff
2026-07-22 00:40:37 +09:00
e60baad993
Make Git router teardown process-bounded
2026-07-19 23:34:06 +09:00
31e9ab0f2d
Replace external reachability with an owned canary
2026-07-19 22:39:31 +09:00
1c86e1aa0e
Reserve an explicit Lazaret network topology
...
Launch slirp4netns on 10.137.54.0/24, update its gateway and DNS routes, and refuse configured allows or specific denies that collide with the enclosing Lazaret /23 while preserving broad RFC 1918 denial.
2026-07-19 19:52:14 +09:00
73e3e9fdee
Fix rootless launches with subordinate ID maps
...
Resolve and verify canonical caller subordinate ranges, launch preparation and runtime workers through mapped causal acquisition, and keep runsc in the existing user namespace. Repair descriptor-relative OCI cleanup and absent-mount recovery so failed launches can progress to the corrected path.
2026-07-19 19:51:47 +09:00
684ca52a01
Keep long-identity control sockets within sun_path
2026-07-19 05:16:33 +09:00
247819250b
Replace lexical Rust fragments with real modules
2026-07-19 05:12:57 +09:00
2f8a9f9178
Unify host coordinator lifecycle state
2026-07-19 04:17:25 +09:00
22325aa76a
Decouple client contracts and close private role registries
2026-07-19 03:44:30 +09:00
ee9201b057
Decompose oversized Rust files by responsibility
2026-07-19 03:02:44 +09:00
e7dd95aea6
Remove phase vocabulary from Lazaret interfaces
2026-07-18 22:35:48 +09:00
3f9b1b3543
Close hostile recovery and concurrency gaps
2026-07-18 05:47:15 +09:00
696dae610a
Integrate host escalation with production sessions
2026-07-18 04:03:39 +09:00
254bb37764
Serve concurrent terminal sessions with exact teardown
2026-07-18 02:51:19 +09:00
917409fcc6
Integrate routed Git workspaces with persistent state
2026-07-18 02:08:14 +09:00
1867f65d4e
Align network verifiers with runtime namespace sources
2026-07-17 23:23:20 +09:00
39307f4281
Preserve Session Terminal TTY through causal launch
2026-07-17 23:23:19 +09:00
2af8a4f09f
Publish the Session Terminal fixture generation
2026-07-17 23:23:19 +09:00
19c8ca6523
Synchronize stopped supervisor composition checks
2026-07-17 23:23:19 +09:00
cb6f6dc465
Give non-network runtime fixtures an isolated namespace
2026-07-17 23:23:19 +09:00
2bc5982a62
Enforce exact recovery ownership before cold start
2026-07-17 23:23:19 +09:00
f21a847991
Integrate exact production recovery before cold start
2026-07-17 23:23:19 +09:00
51ff63a3aa
Add coordinator-owned interactive session terminals
2026-07-17 23:23:19 +09:00
4dd2b150d2
Compose selected State Anchor paths over prepared roots
2026-07-17 23:23:19 +09:00
71b0266cf2
Run non-interactive sessions through production coordination
2026-07-17 23:23:19 +09:00
bc04112c77
Bind production cold start to installed Lazaret authorities
2026-07-17 23:23:19 +09:00
fc5b2b6ca0
Confine runtime staging to retained authority
2026-07-17 23:23:19 +09:00
b2f178d25e
Bind cold start to production authorities
2026-07-17 23:23:19 +09:00
a9c9cf7ab3
Fail teardown when control withdrawal fails
2026-07-17 23:23:19 +09:00
da7557b850
Route production control through lifecycle ownership
2026-07-17 23:23:19 +09:00
33ac0ba4ee
Compose cold-start resources under Runtime Supervisor ownership
2026-07-17 23:23:19 +09:00
510dfccf5a
Route lifecycle admission through the control registry
2026-07-17 23:23:19 +09:00
671473106c
Orchestrate normal domain lifecycle through adapters
2026-07-17 23:23:19 +09:00
49d5def1a9
Bind sandbox handoff authority and restore verifier gates
2026-07-17 23:23:19 +09:00
95104fa4e7
Implement fail-closed ignored workspace routing
2026-07-16 13:04:12 +09:00
ba6a075839
Implement supervised rootless network readiness
2026-07-15 23:26:37 +09:00
407b75b1ff
Add confined host escalation transport
2026-07-15 19:59:51 +09:00
fd78804fc7
Compose foreground sandbox process lifetimes
2026-07-15 19:30:43 +09:00
18afbeaa91
Make control identity mode umask-independent
...
Set and validate the publication identity through its retained descriptor so restrictive process masks cannot weaken or remove the required mode.
2026-07-15 18:19:18 +09:00
c3a76ec8c4
Add generation-bound TLS control face
...
Create ephemeral trust anchors, publish an exact-profile Unix control socket, and persist generation-authorized mTLS session registration through the Domain Store.
2026-07-15 18:19:18 +09:00
