Commit graph

195 commits

Author SHA256 Message Date
74481b043d Update README.md 2026-08-21 02:30:03 +09:00
f989f3bc01 Preserve native terminal behavior through trusted prompts 2026-08-20 05:29:43 +09:00
7e68cfdc1f Delegate terminal presentation mechanics to the model 2026-08-20 02:37:57 +09:00
8699103dfc Model terminal presentation ownership and restoration 2026-08-20 02:10:44 +09:00
465c40822a Package Apache license and standardize notices
Adopt the conventional NOTICE layout and include required license material in published crate archives. Verify workspace license metadata and the host coordinator's bundled ncurses notices.
2026-08-19 21:28:23 +09:00
30fc02d79f Containerize local builds with rootless nerdctl delivery-30fc02d79f95d8c727a4bd96d565939f4d594d540b4cf301b2298d7d59743a4e 2026-08-18 01:36:48 +09:00
4aef12054e Move the product specification under docs/spec 2026-08-18 01:36:13 +09:00
be64de8d91 License Lazaret under Apache 2.0 2026-08-18 01:35:35 +09:00
dfe1a387a6 Render host escalation cards with Ratatui 2026-08-04 00:42:39 +09:00
f468592d95 Implement retained virtual terminal presentation 2026-08-03 22:51:05 +09:00
aef24440a5 Adapt ignored workspace attributes to Rust 1.97 lint 2026-08-03 22:49:14 +09:00
ea463a6ca7 Specify retained terminal presentation 2026-08-03 21:47:27 +09:00
982395bb28 Preserve open inode identity across workspace renames 2026-08-03 01:06:54 +09:00
2df810f125 Reap final-session coordinator before returning 2026-08-02 20:27:08 +09:00
81b4928f16 Wait for Session disconnect before returning 2026-08-02 20:21:49 +09:00
6c570da60e Recognize terminated runsc gofers during teardown 2026-08-02 19:57:36 +09:00
8cef037fa3 Implement PTY-native session terminal control 2026-08-02 17:36:40 +09:00
058e58e816 Refine modeled terminal behavior into PTY mechanics 2026-08-02 17:36:07 +09:00
6d3a2cfe16 Model terminal interaction authority and bounded verification 2026-08-02 14:02:32 +09:00
690738d846 Isolate interactive terminal session ownership 2026-08-01 00:00:47 +09:00
b240bc1d12 Correct hostinet receive flag handling
Accept and discard Linux-inert send-only flags on hostinet receive calls, add native and runsc syscall coverage, and bind the resulting immutable runtime build.
2026-07-31 04:07:41 +09:00
394fb65c86 Preserve hardlink topology during startup routing 2026-07-30 23:43:33 +09:00
52c8c56e4f Check hardlink topology in workspace routing protocol 2026-07-30 22:51:34 +09:00
1ad3b84db2 Seal ignored-workspace routing at Domain startup 2026-07-30 00:52:58 +09:00
b114e3514b Model startup-sealed workspace routing authority 2026-07-30 00:32:32 +09:00
35ab7f17c0 Generalize safe host-to-isolated rename migration 2026-07-29 22:20:04 +09:00
aaee63a6e3 Show progress while downloading sandbox images 2026-07-29 00:48:24 +09:00
e3e21fff45 Recover pre-identity session terminals safely 2026-07-29 00:42:11 +09:00
3c00a6c59f Model actor-attributed terminal recovery 2026-07-29 00:39:06 +09:00
55eed08db7 Exclude image preparation from client startup deadline 2026-07-28 22:39:10 +09:00
8334fd379f Confine package ownership changes to private mounts 2026-07-27 03:31:58 +09:00
2c420012bd Own the patched runsc artifact and bind recovery identity 2026-07-26 18:01:03 +09:00
c474fa4a23 Recover inactive bootstrap waiter sockets safely 2026-07-26 15:56:48 +09:00
51d0c4db1d Restore exact repository verification manifests 2026-07-26 01:07:45 +09:00
0dda65fc2e Support durable host-to-isolated workspace migration 2026-07-26 00:43:30 +09:00
db9a561d0c Bound and configure the per-Domain runsc dcache 2026-07-24 23:34:02 +09:00
503f090121 Establish bounded descriptor budgets for sandbox domains 2026-07-24 02:18:30 +09:00
42e197510e Normalize inactive State Anchor work storage 2026-07-23 21:44:16 +09:00
7cd8a90af0 Serialize startup prepared artifact reclamation 2026-07-22 03:56:44 +09:00
acd0b4cc8c Default profiles to persistent system paths 2026-07-22 03:23:38 +09:00
09dae24f52 Permit subordinate sandbox identity transitions 2026-07-22 03:08:27 +09:00
7aff8e542e Restore persistent system path composition 2026-07-22 03:07:42 +09:00
84bb22a7db Make concurrency verification deterministic and exhaustive 2026-07-22 01:51:55 +09:00
1bd1d395d9 Bind prepared artifact selection against reclaim 2026-07-22 01:51:46 +09:00
d799cf4837 Model prepared artifact selection before lease acquisition 2026-07-22 00:58:23 +09:00
af9b4de85a Compose protected runtime files before sandbox handoff 2026-07-22 00:40:37 +09:00
85f0db08d7 Preserve live prepared-lower materializations during recovery 2026-07-21 23:47:29 +09:00
6eba9f25ca Model live prepared-lower ownership during recovery 2026-07-21 23:46:54 +09:00
b288e77ed0 Explain active Domain maintenance contention 2026-07-21 22:41:46 +09:00
d38357a65d Accept safe overlay work residue after unmount 2026-07-20 00:58:14 +09:00