4aef12054e
Move the product specification under docs/spec
2026-08-18 01:36:13 +09:00
be64de8d91
License Lazaret under Apache 2.0
2026-08-18 01:35:35 +09:00
dfe1a387a6
Render host escalation cards with Ratatui
2026-08-04 00:42:39 +09:00
f468592d95
Implement retained virtual terminal presentation
2026-08-03 22:51:05 +09:00
aef24440a5
Adapt ignored workspace attributes to Rust 1.97 lint
2026-08-03 22:49:14 +09:00
ea463a6ca7
Specify retained terminal presentation
2026-08-03 21:47:27 +09:00
982395bb28
Preserve open inode identity across workspace renames
2026-08-03 01:06:54 +09:00
2df810f125
Reap final-session coordinator before returning
2026-08-02 20:27:08 +09:00
81b4928f16
Wait for Session disconnect before returning
2026-08-02 20:21:49 +09:00
6c570da60e
Recognize terminated runsc gofers during teardown
2026-08-02 19:57:36 +09:00
8cef037fa3
Implement PTY-native session terminal control
2026-08-02 17:36:40 +09:00
058e58e816
Refine modeled terminal behavior into PTY mechanics
2026-08-02 17:36:07 +09:00
6d3a2cfe16
Model terminal interaction authority and bounded verification
2026-08-02 14:02:32 +09:00
690738d846
Isolate interactive terminal session ownership
2026-08-01 00:00:47 +09:00
b240bc1d12
Correct hostinet receive flag handling
...
Accept and discard Linux-inert send-only flags on hostinet receive calls, add native and runsc syscall coverage, and bind the resulting immutable runtime build.
2026-07-31 04:07:41 +09:00
394fb65c86
Preserve hardlink topology during startup routing
2026-07-30 23:43:33 +09:00
52c8c56e4f
Check hardlink topology in workspace routing protocol
2026-07-30 22:51:34 +09:00
1ad3b84db2
Seal ignored-workspace routing at Domain startup
2026-07-30 00:52:58 +09:00
b114e3514b
Model startup-sealed workspace routing authority
2026-07-30 00:32:32 +09:00
35ab7f17c0
Generalize safe host-to-isolated rename migration
2026-07-29 22:20:04 +09:00
aaee63a6e3
Show progress while downloading sandbox images
2026-07-29 00:48:24 +09:00
e3e21fff45
Recover pre-identity session terminals safely
2026-07-29 00:42:11 +09:00
3c00a6c59f
Model actor-attributed terminal recovery
2026-07-29 00:39:06 +09:00
55eed08db7
Exclude image preparation from client startup deadline
2026-07-28 22:39:10 +09:00
8334fd379f
Confine package ownership changes to private mounts
2026-07-27 03:31:58 +09:00
2c420012bd
Own the patched runsc artifact and bind recovery identity
2026-07-26 18:01:03 +09:00
c474fa4a23
Recover inactive bootstrap waiter sockets safely
2026-07-26 15:56:48 +09:00
51d0c4db1d
Restore exact repository verification manifests
2026-07-26 01:07:45 +09:00
0dda65fc2e
Support durable host-to-isolated workspace migration
2026-07-26 00:43:30 +09:00
db9a561d0c
Bound and configure the per-Domain runsc dcache
2026-07-24 23:34:02 +09:00
503f090121
Establish bounded descriptor budgets for sandbox domains
2026-07-24 02:18:30 +09:00
42e197510e
Normalize inactive State Anchor work storage
2026-07-23 21:44:16 +09:00
7cd8a90af0
Serialize startup prepared artifact reclamation
2026-07-22 03:56:44 +09:00
acd0b4cc8c
Default profiles to persistent system paths
2026-07-22 03:23:38 +09:00
09dae24f52
Permit subordinate sandbox identity transitions
2026-07-22 03:08:27 +09:00
7aff8e542e
Restore persistent system path composition
2026-07-22 03:07:42 +09:00
84bb22a7db
Make concurrency verification deterministic and exhaustive
2026-07-22 01:51:55 +09:00
1bd1d395d9
Bind prepared artifact selection against reclaim
2026-07-22 01:51:46 +09:00
d799cf4837
Model prepared artifact selection before lease acquisition
2026-07-22 00:58:23 +09:00
af9b4de85a
Compose protected runtime files before sandbox handoff
2026-07-22 00:40:37 +09:00
85f0db08d7
Preserve live prepared-lower materializations during recovery
2026-07-21 23:47:29 +09:00
6eba9f25ca
Model live prepared-lower ownership during recovery
2026-07-21 23:46:54 +09:00
b288e77ed0
Explain active Domain maintenance contention
2026-07-21 22:41:46 +09:00
d38357a65d
Accept safe overlay work residue after unmount
2026-07-20 00:58:14 +09:00
e60baad993
Make Git router teardown process-bounded
2026-07-19 23:34:06 +09:00
31e9ab0f2d
Replace external reachability with an owned canary
2026-07-19 22:39:31 +09:00
0f6825c3b9
Add a static trusted sandbox init
2026-07-19 22:38:37 +09:00
02fc29acb1
Refine rootless and network readiness contracts
...
Correct the caller-configured user-namespace topology, bind modeled network readiness to the live sandbox and helper, and keep physical canary, topology, encoding, and capability predicates in compact specification tables below the model boundary.
2026-07-19 19:52:41 +09:00
1c86e1aa0e
Reserve an explicit Lazaret network topology
...
Launch slirp4netns on 10.137.54.0/24, update its gateway and DNS routes, and refuse configured allows or specific denies that collide with the enclosing Lazaret /23 while preserving broad RFC 1918 denial.
2026-07-19 19:52:14 +09:00
73e3e9fdee
Fix rootless launches with subordinate ID maps
...
Resolve and verify canonical caller subordinate ranges, launch preparation and runtime workers through mapped causal acquisition, and keep runsc in the existing user namespace. Repair descriptor-relative OCI cleanup and absent-mount recovery so failed launches can progress to the corrected path.
2026-07-19 19:51:47 +09:00
