aaee63a6e3
Show progress while downloading sandbox images
2026-07-29 00:48:24 +09:00
e3e21fff45
Recover pre-identity session terminals safely
2026-07-29 00:42:11 +09:00
55eed08db7
Exclude image preparation from client startup deadline
2026-07-28 22:39:10 +09:00
2c420012bd
Own the patched runsc artifact and bind recovery identity
2026-07-26 18:01:03 +09:00
c474fa4a23
Recover inactive bootstrap waiter sockets safely
2026-07-26 15:56:48 +09:00
503f090121
Establish bounded descriptor budgets for sandbox domains
2026-07-24 02:18:30 +09:00
42e197510e
Normalize inactive State Anchor work storage
2026-07-23 21:44:16 +09:00
7cd8a90af0
Serialize startup prepared artifact reclamation
2026-07-22 03:56:44 +09:00
1bd1d395d9
Bind prepared artifact selection against reclaim
2026-07-22 01:51:46 +09:00
af9b4de85a
Compose protected runtime files before sandbox handoff
2026-07-22 00:40:37 +09:00
e60baad993
Make Git router teardown process-bounded
2026-07-19 23:34:06 +09:00
31e9ab0f2d
Replace external reachability with an owned canary
2026-07-19 22:39:31 +09:00
0f6825c3b9
Add a static trusted sandbox init
2026-07-19 22:38:37 +09:00
1c86e1aa0e
Reserve an explicit Lazaret network topology
...
Launch slirp4netns on 10.137.54.0/24, update its gateway and DNS routes, and refuse configured allows or specific denies that collide with the enclosing Lazaret /23 while preserving broad RFC 1918 denial.
2026-07-19 19:52:14 +09:00
73e3e9fdee
Fix rootless launches with subordinate ID maps
...
Resolve and verify canonical caller subordinate ranges, launch preparation and runtime workers through mapped causal acquisition, and keep runsc in the existing user namespace. Repair descriptor-relative OCI cleanup and absent-mount recovery so failed launches can progress to the corrected path.
2026-07-19 19:51:47 +09:00
91d88336df
Derive prepared runtime files from the sandbox contract
2026-07-19 05:55:34 +09:00
76de24c75c
Make split modules own their dependency imports
2026-07-19 05:28:45 +09:00
897578e7cb
Consume shared sandbox destinations at runtime boundaries
2026-07-19 05:25:32 +09:00
684ca52a01
Keep long-identity control sockets within sun_path
2026-07-19 05:16:33 +09:00
247819250b
Replace lexical Rust fragments with real modules
2026-07-19 05:12:57 +09:00
f8849cdb5f
Centralize sandbox destination authority
2026-07-19 04:36:44 +09:00
54cc167f81
Make codec shape authority compile-time and fixed
2026-07-19 04:33:43 +09:00
2f8a9f9178
Unify host coordinator lifecycle state
2026-07-19 04:17:25 +09:00
d70f483844
Replace runtime argv handoff with a sealed typed record
2026-07-19 03:56:49 +09:00
22325aa76a
Decouple client contracts and close private role registries
2026-07-19 03:44:30 +09:00
30cd36dcdd
Expose typed Prepared Lower failures
2026-07-19 03:18:50 +09:00
ee9201b057
Decompose oversized Rust files by responsibility
2026-07-19 03:02:44 +09:00
e7dd95aea6
Remove phase vocabulary from Lazaret interfaces
2026-07-18 22:35:48 +09:00
3f9b1b3543
Close hostile recovery and concurrency gaps
2026-07-18 05:47:15 +09:00
696dae610a
Integrate host escalation with production sessions
2026-07-18 04:03:39 +09:00
254bb37764
Serve concurrent terminal sessions with exact teardown
2026-07-18 02:51:19 +09:00
917409fcc6
Integrate routed Git workspaces with persistent state
2026-07-18 02:08:14 +09:00
1867f65d4e
Align network verifiers with runtime namespace sources
2026-07-17 23:23:20 +09:00
39307f4281
Preserve Session Terminal TTY through causal launch
2026-07-17 23:23:19 +09:00
2af8a4f09f
Publish the Session Terminal fixture generation
2026-07-17 23:23:19 +09:00
19c8ca6523
Synchronize stopped supervisor composition checks
2026-07-17 23:23:19 +09:00
cb6f6dc465
Give non-network runtime fixtures an isolated namespace
2026-07-17 23:23:19 +09:00
e97ab6471c
Refuse orphan state without Domain Store authority
2026-07-17 23:23:19 +09:00
24d7d5b6e0
Add crash-consistent State Anchor maintenance
2026-07-17 23:23:19 +09:00
5cd0772866
Bind terminal fixture to runtime root identity
2026-07-17 23:23:19 +09:00
29bc02fd7b
Retain prompt resume resize until route transition
2026-07-17 23:23:19 +09:00
46b52b4b43
Complete authenticated interactive prompt routing
2026-07-17 23:23:19 +09:00
6816f0632e
Add interactive client terminal transport
2026-07-17 23:23:19 +09:00
d597b05484
Refuse unrecorded publication artifacts during recovery
2026-07-17 23:23:19 +09:00
2bc5982a62
Enforce exact recovery ownership before cold start
2026-07-17 23:23:19 +09:00
f21a847991
Integrate exact production recovery before cold start
2026-07-17 23:23:19 +09:00
d25942596f
Implement exact bootstrap recovery and artifact GC
2026-07-17 23:23:19 +09:00
0f4845d4f8
Stop terminal grace polling after authority loss
2026-07-17 23:23:19 +09:00
c5ed009fb8
Gate terminal group cleanup on live authority
2026-07-17 23:23:19 +09:00
4dc5daa57b
Harden session terminal release authority
2026-07-17 23:23:19 +09:00
