55eed08db7
Exclude image preparation from client startup deadline
2026-07-28 22:39:10 +09:00
1bd1d395d9
Bind prepared artifact selection against reclaim
2026-07-22 01:51:46 +09:00
73e3e9fdee
Fix rootless launches with subordinate ID maps
...
Resolve and verify canonical caller subordinate ranges, launch preparation and runtime workers through mapped causal acquisition, and keep runsc in the existing user namespace. Repair descriptor-relative OCI cleanup and absent-mount recovery so failed launches can progress to the corrected path.
2026-07-19 19:51:47 +09:00
247819250b
Replace lexical Rust fragments with real modules
2026-07-19 05:12:57 +09:00
54cc167f81
Make codec shape authority compile-time and fixed
2026-07-19 04:33:43 +09:00
22325aa76a
Decouple client contracts and close private role registries
2026-07-19 03:44:30 +09:00
ee9201b057
Decompose oversized Rust files by responsibility
2026-07-19 03:02:44 +09:00
3f9b1b3543
Close hostile recovery and concurrency gaps
2026-07-18 05:47:15 +09:00
696dae610a
Integrate host escalation with production sessions
2026-07-18 04:03:39 +09:00
f5455d1d6c
Preserve inherited target stdin authority
2026-07-17 23:23:20 +09:00
39307f4281
Preserve Session Terminal TTY through causal launch
2026-07-17 23:23:19 +09:00
6816f0632e
Add interactive client terminal transport
2026-07-17 23:23:19 +09:00
d25942596f
Implement exact bootstrap recovery and artifact GC
2026-07-17 23:23:19 +09:00
51ff63a3aa
Add coordinator-owned interactive session terminals
2026-07-17 23:23:19 +09:00
71b0266cf2
Run non-interactive sessions through production coordination
2026-07-17 23:23:19 +09:00
b2f178d25e
Bind cold start to production authorities
2026-07-17 23:23:19 +09:00
49d5def1a9
Bind sandbox handoff authority and restore verifier gates
2026-07-17 23:23:19 +09:00
ba6a075839
Implement supervised rootless network readiness
2026-07-15 23:26:37 +09:00
407b75b1ff
Add confined host escalation transport
2026-07-15 19:59:51 +09:00
903ff837d6
Enforce sandbox causal edge stdio policies
2026-07-15 19:30:43 +09:00
b653293840
Clarify sandbox causal edge descriptors
2026-07-15 19:30:43 +09:00
fd78804fc7
Compose foreground sandbox process lifetimes
2026-07-15 19:30:43 +09:00
3171c41399
Verify irreversible capability removal
2026-07-15 19:30:09 +09:00
6f722ce079
Enforce causal child acquisition boundaries
2026-07-15 00:39:26 +09:00
1468f6b841
Add fail-closed Linux process and descriptor primitives
2026-07-15 00:39:26 +09:00
