30fc02d79f
Containerize local builds with rootless nerdctl
2026-08-18 01:36:48 +09:00
4aef12054e
Move the product specification under docs/spec
2026-08-18 01:36:13 +09:00
be64de8d91
License Lazaret under Apache 2.0
2026-08-18 01:35:35 +09:00
dfe1a387a6
Render host escalation cards with Ratatui
2026-08-04 00:42:39 +09:00
f468592d95
Implement retained virtual terminal presentation
2026-08-03 22:51:05 +09:00
aef24440a5
Adapt ignored workspace attributes to Rust 1.97 lint
2026-08-03 22:49:14 +09:00
ea463a6ca7
Specify retained terminal presentation
2026-08-03 21:47:27 +09:00
982395bb28
Preserve open inode identity across workspace renames
2026-08-03 01:06:54 +09:00
2df810f125
Reap final-session coordinator before returning
2026-08-02 20:27:08 +09:00
81b4928f16
Wait for Session disconnect before returning
2026-08-02 20:21:49 +09:00
6c570da60e
Recognize terminated runsc gofers during teardown
2026-08-02 19:57:36 +09:00
8cef037fa3
Implement PTY-native session terminal control
2026-08-02 17:36:40 +09:00
058e58e816
Refine modeled terminal behavior into PTY mechanics
2026-08-02 17:36:07 +09:00
6d3a2cfe16
Model terminal interaction authority and bounded verification
2026-08-02 14:02:32 +09:00
690738d846
Isolate interactive terminal session ownership
2026-08-01 00:00:47 +09:00
b240bc1d12
Correct hostinet receive flag handling
...
Accept and discard Linux-inert send-only flags on hostinet receive calls, add native and runsc syscall coverage, and bind the resulting immutable runtime build.
2026-07-31 04:07:41 +09:00
394fb65c86
Preserve hardlink topology during startup routing
2026-07-30 23:43:33 +09:00
52c8c56e4f
Check hardlink topology in workspace routing protocol
2026-07-30 22:51:34 +09:00
1ad3b84db2
Seal ignored-workspace routing at Domain startup
2026-07-30 00:52:58 +09:00
b114e3514b
Model startup-sealed workspace routing authority
2026-07-30 00:32:32 +09:00
35ab7f17c0
Generalize safe host-to-isolated rename migration
2026-07-29 22:20:04 +09:00
aaee63a6e3
Show progress while downloading sandbox images
2026-07-29 00:48:24 +09:00
e3e21fff45
Recover pre-identity session terminals safely
2026-07-29 00:42:11 +09:00
3c00a6c59f
Model actor-attributed terminal recovery
2026-07-29 00:39:06 +09:00
55eed08db7
Exclude image preparation from client startup deadline
2026-07-28 22:39:10 +09:00
8334fd379f
Confine package ownership changes to private mounts
2026-07-27 03:31:58 +09:00
2c420012bd
Own the patched runsc artifact and bind recovery identity
2026-07-26 18:01:03 +09:00
c474fa4a23
Recover inactive bootstrap waiter sockets safely
2026-07-26 15:56:48 +09:00
51d0c4db1d
Restore exact repository verification manifests
2026-07-26 01:07:45 +09:00
0dda65fc2e
Support durable host-to-isolated workspace migration
2026-07-26 00:43:30 +09:00
db9a561d0c
Bound and configure the per-Domain runsc dcache
2026-07-24 23:34:02 +09:00
503f090121
Establish bounded descriptor budgets for sandbox domains
2026-07-24 02:18:30 +09:00
42e197510e
Normalize inactive State Anchor work storage
2026-07-23 21:44:16 +09:00
7cd8a90af0
Serialize startup prepared artifact reclamation
2026-07-22 03:56:44 +09:00
acd0b4cc8c
Default profiles to persistent system paths
2026-07-22 03:23:38 +09:00
09dae24f52
Permit subordinate sandbox identity transitions
2026-07-22 03:08:27 +09:00
7aff8e542e
Restore persistent system path composition
2026-07-22 03:07:42 +09:00
84bb22a7db
Make concurrency verification deterministic and exhaustive
2026-07-22 01:51:55 +09:00
1bd1d395d9
Bind prepared artifact selection against reclaim
2026-07-22 01:51:46 +09:00
d799cf4837
Model prepared artifact selection before lease acquisition
2026-07-22 00:58:23 +09:00
af9b4de85a
Compose protected runtime files before sandbox handoff
2026-07-22 00:40:37 +09:00
85f0db08d7
Preserve live prepared-lower materializations during recovery
2026-07-21 23:47:29 +09:00
6eba9f25ca
Model live prepared-lower ownership during recovery
2026-07-21 23:46:54 +09:00
b288e77ed0
Explain active Domain maintenance contention
2026-07-21 22:41:46 +09:00
d38357a65d
Accept safe overlay work residue after unmount
2026-07-20 00:58:14 +09:00
e60baad993
Make Git router teardown process-bounded
2026-07-19 23:34:06 +09:00
31e9ab0f2d
Replace external reachability with an owned canary
2026-07-19 22:39:31 +09:00
0f6825c3b9
Add a static trusted sandbox init
2026-07-19 22:38:37 +09:00
02fc29acb1
Refine rootless and network readiness contracts
...
Correct the caller-configured user-namespace topology, bind modeled network readiness to the live sandbox and helper, and keep physical canary, topology, encoding, and capability predicates in compact specification tables below the model boundary.
2026-07-19 19:52:41 +09:00
1c86e1aa0e
Reserve an explicit Lazaret network topology
...
Launch slirp4netns on 10.137.54.0/24, update its gateway and DNS routes, and refuse configured allows or specific denies that collide with the enclosing Lazaret /23 while preserving broad RFC 1918 denial.
2026-07-19 19:52:14 +09:00
