Author	SHA256	Message	Date
ms2k	b240bc1d12	Correct hostinet receive flag handling ... Accept and discard Linux-inert send-only flags on hostinet receive calls, add native and runsc syscall coverage, and bind the resulting immutable runtime build.	2026-07-31 04:07:41 +09:00
ms2k	35ab7f17c0	Generalize safe host-to-isolated rename migration	2026-07-29 22:20:04 +09:00
ms2k	8334fd379f	Confine package ownership changes to private mounts	2026-07-27 03:31:58 +09:00
ms2k	2c420012bd	Own the patched runsc artifact and bind recovery identity	2026-07-26 18:01:03 +09:00
ms2k	95104fa4e7	Implement fail-closed ignored workspace routing	2026-07-16 13:04:12 +09:00