8334fd379f
Confine package ownership changes to private mounts
2026-07-27 03:31:58 +09:00
2c420012bd
Own the patched runsc artifact and bind recovery identity
2026-07-26 18:01:03 +09:00
0dda65fc2e
Support durable host-to-isolated workspace migration
2026-07-26 00:43:30 +09:00
503f090121
Establish bounded descriptor budgets for sandbox domains
2026-07-24 02:18:30 +09:00
84bb22a7db
Make concurrency verification deterministic and exhaustive
2026-07-22 01:51:55 +09:00
247819250b
Replace lexical Rust fragments with real modules
2026-07-19 05:12:57 +09:00
22325aa76a
Decouple client contracts and close private role registries
2026-07-19 03:44:30 +09:00
ee9201b057
Decompose oversized Rust files by responsibility
2026-07-19 03:02:44 +09:00
a0055f67f1
Integrate the ignored-workspace corpus into verification
...
Give the Git Sentry launch shape one Rust owner, update the physical corpus to supply every authority, and make the default repository gate distinguish unavailable physical prerequisites from corpus failures.
2026-07-19 02:39:45 +09:00
e7dd95aea6
Remove phase vocabulary from Lazaret interfaces
2026-07-18 22:35:48 +09:00
3f9b1b3543
Close hostile recovery and concurrency gaps
2026-07-18 05:47:15 +09:00
943c56eea8
Verify materialized fuser patch
2026-07-17 23:25:15 +09:00
f21a847991
Integrate exact production recovery before cold start
2026-07-17 23:23:19 +09:00
49d5def1a9
Bind sandbox handoff authority and restore verifier gates
2026-07-17 23:23:19 +09:00
95104fa4e7
Implement fail-closed ignored workspace routing
2026-07-16 13:04:12 +09:00
fd78804fc7
Compose foreground sandbox process lifetimes
2026-07-15 19:30:43 +09:00
5458460717
Implement verified OCI prepared-lower lifecycle
2026-07-15 15:48:46 +09:00
2d4ec2ed8b
Generalize benchmark qualification environment
2026-07-15 02:49:39 +09:00
7a1b4dc447
Make workspace contract verification unambiguous
2026-07-15 01:22:32 +09:00
c54372ea87
Define ignored workspace routing semantics and budgets
2026-07-15 01:10:28 +09:00
6f722ce079
Enforce causal child acquisition boundaries
2026-07-15 00:39:26 +09:00
1468f6b841
Add fail-closed Linux process and descriptor primitives
2026-07-15 00:39:26 +09:00
c738d92f01
Confine verification tooling to current repository checks
2026-07-14 02:19:07 +09:00
f840a48376
Enforce qualified pidfs host and process broker contracts
2026-07-14 00:12:32 +09:00
b438dd5201
Bootstrap verified Rust implementation workspace
2026-07-13 02:25:59 +09:00
