4aef12054e
Move the product specification under docs/spec
2026-08-18 01:36:13 +09:00
ea463a6ca7
Specify retained terminal presentation
2026-08-03 21:47:27 +09:00
058e58e816
Refine modeled terminal behavior into PTY mechanics
2026-08-02 17:36:07 +09:00
6d3a2cfe16
Model terminal interaction authority and bounded verification
2026-08-02 14:02:32 +09:00
52c8c56e4f
Check hardlink topology in workspace routing protocol
2026-07-30 22:51:34 +09:00
1ad3b84db2
Seal ignored-workspace routing at Domain startup
2026-07-30 00:52:58 +09:00
b114e3514b
Model startup-sealed workspace routing authority
2026-07-30 00:32:32 +09:00
35ab7f17c0
Generalize safe host-to-isolated rename migration
2026-07-29 22:20:04 +09:00
aaee63a6e3
Show progress while downloading sandbox images
2026-07-29 00:48:24 +09:00
3c00a6c59f
Model actor-attributed terminal recovery
2026-07-29 00:39:06 +09:00
55eed08db7
Exclude image preparation from client startup deadline
2026-07-28 22:39:10 +09:00
8334fd379f
Confine package ownership changes to private mounts
2026-07-27 03:31:58 +09:00
0dda65fc2e
Support durable host-to-isolated workspace migration
2026-07-26 00:43:30 +09:00
db9a561d0c
Bound and configure the per-Domain runsc dcache
2026-07-24 23:34:02 +09:00
7cd8a90af0
Serialize startup prepared artifact reclamation
2026-07-22 03:56:44 +09:00
acd0b4cc8c
Default profiles to persistent system paths
2026-07-22 03:23:38 +09:00
7aff8e542e
Restore persistent system path composition
2026-07-22 03:07:42 +09:00
d799cf4837
Model prepared artifact selection before lease acquisition
2026-07-22 00:58:23 +09:00
6eba9f25ca
Model live prepared-lower ownership during recovery
2026-07-21 23:46:54 +09:00
31e9ab0f2d
Replace external reachability with an owned canary
2026-07-19 22:39:31 +09:00
02fc29acb1
Refine rootless and network readiness contracts
...
Correct the caller-configured user-namespace topology, bind modeled network readiness to the live sandbox and helper, and keep physical canary, topology, encoding, and capability predicates in compact specification tables below the model boundary.
2026-07-19 19:52:41 +09:00
b9dbd78087
Restore profile-first interactive launches
2026-07-19 13:59:43 +09:00
03bfe92ca0
Retire the mutable design schema
...
Make Rust records and fixed codec tests the implementation-shape owner, remove the Mermaid category registry, and state the ownership boundary in the authoritative specification.
2026-07-19 02:45:32 +09:00
e7dd95aea6
Remove phase vocabulary from Lazaret interfaces
2026-07-18 22:35:48 +09:00
24d7d5b6e0
Add crash-consistent State Anchor maintenance
2026-07-17 23:23:19 +09:00
6816f0632e
Add interactive client terminal transport
2026-07-17 23:23:19 +09:00
2bc5982a62
Enforce exact recovery ownership before cold start
2026-07-17 23:23:19 +09:00
d25942596f
Implement exact bootstrap recovery and artifact GC
2026-07-17 23:23:19 +09:00
71b0266cf2
Run non-interactive sessions through production coordination
2026-07-17 23:23:19 +09:00
308c5a1b56
Bind cross-process configuration by identity
2026-07-17 23:23:19 +09:00
fbd332c31f
Require explicit canonical network readiness targets
2026-07-17 23:23:19 +09:00
c8acf116d6
Restore pre-publication network readiness semantics
2026-07-17 23:23:19 +09:00
cf914bdf51
Narrow confined path authority at runtime handoff
2026-07-17 23:23:19 +09:00
1cac1e04c2
Restore specification and model authority boundaries
2026-07-17 23:23:19 +09:00
c3a76ec8c4
Add generation-bound TLS control face
...
Create ephemeral trust anchors, publish an exact-profile Unix control socket, and persist generation-authorized mTLS session registration through the Domain Store.
2026-07-15 18:19:18 +09:00
304fb225d6
Implement canonical network readiness derivation
2026-07-15 16:58:30 +09:00
af8669c165
Implement generation-bound protocol cryptography
2026-07-15 15:56:31 +09:00
5458460717
Implement verified OCI prepared-lower lifecycle
2026-07-15 15:48:46 +09:00
1fd87ba1bd
Validate every singleton Domain Store row
2026-07-15 14:22:43 +09:00
e4d9cc2dc9
Add the lock-owned transactional Domain Store
2026-07-15 14:10:50 +09:00
2d4ec2ed8b
Generalize benchmark qualification environment
2026-07-15 02:49:39 +09:00
c54372ea87
Define ignored workspace routing semantics and budgets
2026-07-15 01:10:28 +09:00
f106a9f636
Classify serialized and runtime schema records
2026-07-14 23:34:56 +09:00
b34421efa1
Limit pidfs support to the Linux 6.9 platform floor
2026-07-14 21:29:25 +09:00
c738d92f01
Confine verification tooling to current repository checks
2026-07-14 02:19:07 +09:00
de57e77dc8
Add phase-aware pidfs process ownership records
2026-07-14 01:47:53 +09:00
f840a48376
Enforce qualified pidfs host and process broker contracts
2026-07-14 00:12:32 +09:00
16defc768a
Add typed schema records and strict version checks
2026-07-13 04:05:12 +09:00
b438dd5201
Bootstrap verified Rust implementation workspace
2026-07-13 02:25:59 +09:00
08ce2aca24
Restore mandatory prepared-artifact reclamation
2026-07-13 00:30:02 +09:00
