903ff837d6
Enforce sandbox causal edge stdio policies
2026-07-15 19:30:43 +09:00
b653293840
Clarify sandbox causal edge descriptors
2026-07-15 19:30:43 +09:00
fd78804fc7
Compose foreground sandbox process lifetimes
2026-07-15 19:30:43 +09:00
3171c41399
Verify irreversible capability removal
2026-07-15 19:30:09 +09:00
18afbeaa91
Make control identity mode umask-independent
...
Set and validate the publication identity through its retained descriptor so restrictive process masks cannot weaken or remove the required mode.
2026-07-15 18:19:18 +09:00
c3a76ec8c4
Add generation-bound TLS control face
...
Create ephemeral trust anchors, publish an exact-profile Unix control socket, and persist generation-authorized mTLS session registration through the Domain Store.
2026-07-15 18:19:18 +09:00
8886436841
Refuse inconsistent State Anchor acquisition checkpoints
2026-07-15 17:41:05 +09:00
48c10e9a7a
Make State Anchor acquisition resumable and descriptor-confined
2026-07-15 17:33:59 +09:00
e6d6406c64
Implement exact State Anchor mount and lease lifecycle
2026-07-15 17:33:59 +09:00
27bc3d835e
Validate persisted network readiness fingerprints
2026-07-15 17:12:07 +09:00
304fb225d6
Implement canonical network readiness derivation
2026-07-15 16:58:30 +09:00
d274e1835d
Pin protocol claim and signing vectors
2026-07-15 16:18:38 +09:00
af8669c165
Implement generation-bound protocol cryptography
2026-07-15 15:56:31 +09:00
fba5471352
Permit integrated OCI schema dependency lines
2026-07-15 15:50:16 +09:00
898271c430
Complete nested prepared-lower reclaim ordering
2026-07-15 15:48:46 +09:00
0dfd7767b5
Close prepared-lower identity and reclaim races
2026-07-15 15:48:46 +09:00
5458460717
Implement verified OCI prepared-lower lifecycle
2026-07-15 15:48:46 +09:00
54f3a08b91
Confine terminfo injection to runtime control state
2026-07-15 15:16:25 +09:00
cf5948e8be
Build deterministic OCI sandbox specifications
2026-07-15 14:59:43 +09:00
bf8a3de567
Validate every Domain Store metadata row
2026-07-15 14:28:22 +09:00
1fd87ba1bd
Validate every singleton Domain Store row
2026-07-15 14:22:43 +09:00
e4d9cc2dc9
Add the lock-owned transactional Domain Store
2026-07-15 14:10:50 +09:00
96b494a8bb
Add the transactional prepared-artifact catalog
2026-07-15 13:40:52 +09:00
2d4ec2ed8b
Generalize benchmark qualification environment
2026-07-15 02:49:39 +09:00
c1b40f923a
Integrate core record modularization
2026-07-15 02:16:30 +09:00
6301eeba3e
Split record modules without changing wire behavior
2026-07-15 02:09:18 +09:00
ccf23ccac1
Integrate ignored workspace contract
2026-07-15 01:23:54 +09:00
7a1b4dc447
Make workspace contract verification unambiguous
2026-07-15 01:22:32 +09:00
c54372ea87
Define ignored workspace routing semantics and budgets
2026-07-15 01:10:28 +09:00
0716bab960
Integrate trusted-host configuration
...
# Conflicts:
# Cargo.lock
# Cargo.toml
# tools/lazaret_verify.py
2026-07-15 00:56:14 +09:00
f9eb966341
Implement trusted-host configuration resolution
2026-07-15 00:43:42 +09:00
6f722ce079
Enforce causal child acquisition boundaries
2026-07-15 00:39:26 +09:00
1468f6b841
Add fail-closed Linux process and descriptor primitives
2026-07-15 00:39:26 +09:00
f106a9f636
Classify serialized and runtime schema records
2026-07-14 23:34:56 +09:00
b34421efa1
Limit pidfs support to the Linux 6.9 platform floor
2026-07-14 21:29:25 +09:00
c738d92f01
Confine verification tooling to current repository checks
2026-07-14 02:19:07 +09:00
de57e77dc8
Add phase-aware pidfs process ownership records
2026-07-14 01:47:53 +09:00
f840a48376
Enforce qualified pidfs host and process broker contracts
2026-07-14 00:12:32 +09:00
16defc768a
Add typed schema records and strict version checks
2026-07-13 04:05:12 +09:00
b438dd5201
Bootstrap verified Rust implementation workspace
2026-07-13 02:25:59 +09:00
08ce2aca24
Restore mandatory prepared-artifact reclamation
2026-07-13 00:30:02 +09:00
a1ed8b9984
Clarify trusted runtime network capability scope
2026-07-12 14:23:42 +09:00
6db7cf1d5f
Define protocol cryptography packaging
2026-07-12 03:08:09 +09:00
eded0faa7a
Separate lease-loss release and finalize session terminals
2026-07-12 01:27:19 +09:00
1698296ecd
Define schema authority and durable store refinements
2026-07-11 23:33:04 +09:00
0e8269ab71
Define prepared-lower lease and reclaim invariants
2026-07-11 18:54:23 +09:00
d884a60624
Ignore development scratchpad and journal paths.
...
Replace the old spikes/ ignore with scratchpad (development-scratchpad repo)
and keep docs/journal ignored. Combines the parallel local and origin tips
that both only adjusted these .gitignore entries.
2026-07-11 15:10:59 +09:00
518c0ad531
Select multi-process SC architecture and align protocol model
...
Promote Host Coordinator + Runtime Supervisor + attached runsc as the product
architecture in the specification, and extend the TLA+ model with generation-scoped
identities, multi-role durable intent, network readiness, prepared-lower lease, and
connectivity-helper ownership. TLC-checked; trim product prose that the model now owns.
2026-07-10 02:37:48 +09:00
697aada29e
Check host coordinator domain ownership
...
Add a TLC-checked invariant requiring any Host Coordinator process record to belong to a non-absent, lock-held Domain. Include the invariant in the aggregate safety operator and remove journal-only markers from protocol model comments so the model remains grounded in product vocabulary.
2026-07-10 01:42:26 +09:00
9b88a48b15
protocol: align SC vocabulary and durable intent with sealed product language
...
Add SessionCoordinatorPresent aliases, HC protocol-face naming, and abstract
durable intent/path-mismatch refuse invariants for FM1/FM4/FM5. TLC green at
395837 generated / 110013 distinct / depth 49.
2026-07-10 00:53:19 +09:00
