Author	SHA256	Message	Date
ms2k	903ff837d6	Enforce sandbox causal edge stdio policies	2026-07-15 19:30:43 +09:00
ms2k	fd78804fc7	Compose foreground sandbox process lifetimes	2026-07-15 19:30:43 +09:00
ms2k	18afbeaa91	Make control identity mode umask-independent ... Set and validate the publication identity through its retained descriptor so restrictive process masks cannot weaken or remove the required mode.	2026-07-15 18:19:18 +09:00
ms2k	c3a76ec8c4	Add generation-bound TLS control face ... Create ephemeral trust anchors, publish an exact-profile Unix control socket, and persist generation-authorized mTLS session registration through the Domain Store.	2026-07-15 18:19:18 +09:00
ms2k	8886436841	Refuse inconsistent State Anchor acquisition checkpoints	2026-07-15 17:41:05 +09:00
ms2k	48c10e9a7a	Make State Anchor acquisition resumable and descriptor-confined	2026-07-15 17:33:59 +09:00
ms2k	e6d6406c64	Implement exact State Anchor mount and lease lifecycle	2026-07-15 17:33:59 +09:00
ms2k	bf8a3de567	Validate every Domain Store metadata row	2026-07-15 14:28:22 +09:00
ms2k	1fd87ba1bd	Validate every singleton Domain Store row	2026-07-15 14:22:43 +09:00
ms2k	e4d9cc2dc9	Add the lock-owned transactional Domain Store	2026-07-15 14:10:50 +09:00
ms2k	b438dd5201	Bootstrap verified Rust implementation workspace	2026-07-13 02:25:59 +09:00