30fc02d79f
Containerize local builds with rootless nerdctl
2026-08-18 01:36:48 +09:00
4aef12054e
Move the product specification under docs/spec
2026-08-18 01:36:13 +09:00
6c570da60e
Recognize terminated runsc gofers during teardown
2026-08-02 19:57:36 +09:00
6d3a2cfe16
Model terminal interaction authority and bounded verification
2026-08-02 14:02:32 +09:00
b240bc1d12
Correct hostinet receive flag handling
...
Accept and discard Linux-inert send-only flags on hostinet receive calls, add native and runsc syscall coverage, and bind the resulting immutable runtime build.
2026-07-31 04:07:41 +09:00
52c8c56e4f
Check hardlink topology in workspace routing protocol
2026-07-30 22:51:34 +09:00
1ad3b84db2
Seal ignored-workspace routing at Domain startup
2026-07-30 00:52:58 +09:00
b114e3514b
Model startup-sealed workspace routing authority
2026-07-30 00:32:32 +09:00
35ab7f17c0
Generalize safe host-to-isolated rename migration
2026-07-29 22:20:04 +09:00
8334fd379f
Confine package ownership changes to private mounts
2026-07-27 03:31:58 +09:00
2c420012bd
Own the patched runsc artifact and bind recovery identity
2026-07-26 18:01:03 +09:00
0dda65fc2e
Support durable host-to-isolated workspace migration
2026-07-26 00:43:30 +09:00
503f090121
Establish bounded descriptor budgets for sandbox domains
2026-07-24 02:18:30 +09:00
84bb22a7db
Make concurrency verification deterministic and exhaustive
2026-07-22 01:51:55 +09:00
247819250b
Replace lexical Rust fragments with real modules
2026-07-19 05:12:57 +09:00
22325aa76a
Decouple client contracts and close private role registries
2026-07-19 03:44:30 +09:00
ee9201b057
Decompose oversized Rust files by responsibility
2026-07-19 03:02:44 +09:00
a0055f67f1
Integrate the ignored-workspace corpus into verification
...
Give the Git Sentry launch shape one Rust owner, update the physical corpus to supply every authority, and make the default repository gate distinguish unavailable physical prerequisites from corpus failures.
2026-07-19 02:39:45 +09:00
e7dd95aea6
Remove phase vocabulary from Lazaret interfaces
2026-07-18 22:35:48 +09:00
3f9b1b3543
Close hostile recovery and concurrency gaps
2026-07-18 05:47:15 +09:00
943c56eea8
Verify materialized fuser patch
2026-07-17 23:25:15 +09:00
f21a847991
Integrate exact production recovery before cold start
2026-07-17 23:23:19 +09:00
49d5def1a9
Bind sandbox handoff authority and restore verifier gates
2026-07-17 23:23:19 +09:00
95104fa4e7
Implement fail-closed ignored workspace routing
2026-07-16 13:04:12 +09:00
fd78804fc7
Compose foreground sandbox process lifetimes
2026-07-15 19:30:43 +09:00
5458460717
Implement verified OCI prepared-lower lifecycle
2026-07-15 15:48:46 +09:00
2d4ec2ed8b
Generalize benchmark qualification environment
2026-07-15 02:49:39 +09:00
7a1b4dc447
Make workspace contract verification unambiguous
2026-07-15 01:22:32 +09:00
c54372ea87
Define ignored workspace routing semantics and budgets
2026-07-15 01:10:28 +09:00
6f722ce079
Enforce causal child acquisition boundaries
2026-07-15 00:39:26 +09:00
1468f6b841
Add fail-closed Linux process and descriptor primitives
2026-07-15 00:39:26 +09:00
c738d92f01
Confine verification tooling to current repository checks
2026-07-14 02:19:07 +09:00
f840a48376
Enforce qualified pidfs host and process broker contracts
2026-07-14 00:12:32 +09:00
b438dd5201
Bootstrap verified Rust implementation workspace
2026-07-13 02:25:59 +09:00
