54cc167f81
Make codec shape authority compile-time and fixed
2026-07-19 04:33:43 +09:00
2f8a9f9178
Unify host coordinator lifecycle state
2026-07-19 04:17:25 +09:00
d70f483844
Replace runtime argv handoff with a sealed typed record
2026-07-19 03:56:49 +09:00
22325aa76a
Decouple client contracts and close private role registries
2026-07-19 03:44:30 +09:00
30cd36dcdd
Expose typed Prepared Lower failures
2026-07-19 03:18:50 +09:00
ee9201b057
Decompose oversized Rust files by responsibility
2026-07-19 03:02:44 +09:00
e7dd95aea6
Remove phase vocabulary from Lazaret interfaces
2026-07-18 22:35:48 +09:00
3f9b1b3543
Close hostile recovery and concurrency gaps
2026-07-18 05:47:15 +09:00
696dae610a
Integrate host escalation with production sessions
2026-07-18 04:03:39 +09:00
254bb37764
Serve concurrent terminal sessions with exact teardown
2026-07-18 02:51:19 +09:00
917409fcc6
Integrate routed Git workspaces with persistent state
2026-07-18 02:08:14 +09:00
1867f65d4e
Align network verifiers with runtime namespace sources
2026-07-17 23:23:20 +09:00
39307f4281
Preserve Session Terminal TTY through causal launch
2026-07-17 23:23:19 +09:00
2af8a4f09f
Publish the Session Terminal fixture generation
2026-07-17 23:23:19 +09:00
19c8ca6523
Synchronize stopped supervisor composition checks
2026-07-17 23:23:19 +09:00
cb6f6dc465
Give non-network runtime fixtures an isolated namespace
2026-07-17 23:23:19 +09:00
e97ab6471c
Refuse orphan state without Domain Store authority
2026-07-17 23:23:19 +09:00
24d7d5b6e0
Add crash-consistent State Anchor maintenance
2026-07-17 23:23:19 +09:00
5cd0772866
Bind terminal fixture to runtime root identity
2026-07-17 23:23:19 +09:00
29bc02fd7b
Retain prompt resume resize until route transition
2026-07-17 23:23:19 +09:00
46b52b4b43
Complete authenticated interactive prompt routing
2026-07-17 23:23:19 +09:00
6816f0632e
Add interactive client terminal transport
2026-07-17 23:23:19 +09:00
d597b05484
Refuse unrecorded publication artifacts during recovery
2026-07-17 23:23:19 +09:00
2bc5982a62
Enforce exact recovery ownership before cold start
2026-07-17 23:23:19 +09:00
f21a847991
Integrate exact production recovery before cold start
2026-07-17 23:23:19 +09:00
d25942596f
Implement exact bootstrap recovery and artifact GC
2026-07-17 23:23:19 +09:00
0f4845d4f8
Stop terminal grace polling after authority loss
2026-07-17 23:23:19 +09:00
c5ed009fb8
Gate terminal group cleanup on live authority
2026-07-17 23:23:19 +09:00
4dc5daa57b
Harden session terminal release authority
2026-07-17 23:23:19 +09:00
51ff63a3aa
Add coordinator-owned interactive session terminals
2026-07-17 23:23:19 +09:00
3b76b59bdf
Require fresh State Anchor absence before lease release
2026-07-17 23:23:19 +09:00
4dd2b150d2
Compose selected State Anchor paths over prepared roots
2026-07-17 23:23:19 +09:00
71b0266cf2
Run non-interactive sessions through production coordination
2026-07-17 23:23:19 +09:00
4cf7a5e595
Refuse inexact production selector authorities
2026-07-17 23:23:19 +09:00
bc04112c77
Bind production cold start to installed Lazaret authorities
2026-07-17 23:23:19 +09:00
fc5b2b6ca0
Confine runtime staging to retained authority
2026-07-17 23:23:19 +09:00
b2f178d25e
Bind cold start to production authorities
2026-07-17 23:23:19 +09:00
a9c9cf7ab3
Fail teardown when control withdrawal fails
2026-07-17 23:23:19 +09:00
da7557b850
Route production control through lifecycle ownership
2026-07-17 23:23:19 +09:00
33ac0ba4ee
Compose cold-start resources under Runtime Supervisor ownership
2026-07-17 23:23:19 +09:00
510dfccf5a
Route lifecycle admission through the control registry
2026-07-17 23:23:19 +09:00
671473106c
Orchestrate normal domain lifecycle through adapters
2026-07-17 23:23:19 +09:00
49d5def1a9
Bind sandbox handoff authority and restore verifier gates
2026-07-17 23:23:19 +09:00
95104fa4e7
Implement fail-closed ignored workspace routing
2026-07-16 13:04:12 +09:00
ba6a075839
Implement supervised rootless network readiness
2026-07-15 23:26:37 +09:00
407b75b1ff
Add confined host escalation transport
2026-07-15 19:59:51 +09:00
903ff837d6
Enforce sandbox causal edge stdio policies
2026-07-15 19:30:43 +09:00
fd78804fc7
Compose foreground sandbox process lifetimes
2026-07-15 19:30:43 +09:00
18afbeaa91
Make control identity mode umask-independent
...
Set and validate the publication identity through its retained descriptor so restrictive process masks cannot weaken or remove the required mode.
2026-07-15 18:19:18 +09:00
c3a76ec8c4
Add generation-bound TLS control face
...
Create ephemeral trust anchors, publish an exact-profile Unix control socket, and persist generation-authorized mTLS session registration through the Domain Store.
2026-07-15 18:19:18 +09:00
