b240bc1d12
Correct hostinet receive flag handling
...
Accept and discard Linux-inert send-only flags on hostinet receive calls, add native and runsc syscall coverage, and bind the resulting immutable runtime build.
2026-07-31 04:07:41 +09:00
35ab7f17c0
Generalize safe host-to-isolated rename migration
2026-07-29 22:20:04 +09:00
8334fd379f
Confine package ownership changes to private mounts
2026-07-27 03:31:58 +09:00
2c420012bd
Own the patched runsc artifact and bind recovery identity
2026-07-26 18:01:03 +09:00
db9a561d0c
Bound and configure the per-Domain runsc dcache
2026-07-24 23:34:02 +09:00
503f090121
Establish bounded descriptor budgets for sandbox domains
2026-07-24 02:18:30 +09:00
09dae24f52
Permit subordinate sandbox identity transitions
2026-07-22 03:08:27 +09:00
7aff8e542e
Restore persistent system path composition
2026-07-22 03:07:42 +09:00
31e9ab0f2d
Replace external reachability with an owned canary
2026-07-19 22:39:31 +09:00
1c86e1aa0e
Reserve an explicit Lazaret network topology
...
Launch slirp4netns on 10.137.54.0/24, update its gateway and DNS routes, and refuse configured allows or specific denies that collide with the enclosing Lazaret /23 while preserving broad RFC 1918 denial.
2026-07-19 19:52:14 +09:00
73e3e9fdee
Fix rootless launches with subordinate ID maps
...
Resolve and verify canonical caller subordinate ranges, launch preparation and runtime workers through mapped causal acquisition, and keep runsc in the existing user namespace. Repair descriptor-relative OCI cleanup and absent-mount recovery so failed launches can progress to the corrected path.
2026-07-19 19:51:47 +09:00
8a85b2387d
Protect every product-owned sandbox destination
2026-07-19 05:42:17 +09:00
d7de87fb8f
Make external codec boundaries explicit and exhaustive
2026-07-19 05:33:39 +09:00
76de24c75c
Make split modules own their dependency imports
2026-07-19 05:28:45 +09:00
247819250b
Replace lexical Rust fragments with real modules
2026-07-19 05:12:57 +09:00
f8849cdb5f
Centralize sandbox destination authority
2026-07-19 04:36:44 +09:00
54cc167f81
Make codec shape authority compile-time and fixed
2026-07-19 04:33:43 +09:00
d70f483844
Replace runtime argv handoff with a sealed typed record
2026-07-19 03:56:49 +09:00
22325aa76a
Decouple client contracts and close private role registries
2026-07-19 03:44:30 +09:00
ee9201b057
Decompose oversized Rust files by responsibility
2026-07-19 03:02:44 +09:00
bda342890f
Adopt mature Git config and DNS codecs
2026-07-19 00:40:26 +09:00
e7dd95aea6
Remove phase vocabulary from Lazaret interfaces
2026-07-18 22:35:48 +09:00
917409fcc6
Integrate routed Git workspaces with persistent state
2026-07-18 02:08:14 +09:00
1867f65d4e
Align network verifiers with runtime namespace sources
2026-07-17 23:23:20 +09:00
cb6f6dc465
Give non-network runtime fixtures an isolated namespace
2026-07-17 23:23:19 +09:00
3b76b59bdf
Require fresh State Anchor absence before lease release
2026-07-17 23:23:19 +09:00
4dd2b150d2
Compose selected State Anchor paths over prepared roots
2026-07-17 23:23:19 +09:00
bc04112c77
Bind production cold start to installed Lazaret authorities
2026-07-17 23:23:19 +09:00
33ac0ba4ee
Compose cold-start resources under Runtime Supervisor ownership
2026-07-17 23:23:19 +09:00
49d5def1a9
Bind sandbox handoff authority and restore verifier gates
2026-07-17 23:23:19 +09:00
ba6a075839
Implement supervised rootless network readiness
2026-07-15 23:26:37 +09:00
903ff837d6
Enforce sandbox causal edge stdio policies
2026-07-15 19:30:43 +09:00
b653293840
Clarify sandbox causal edge descriptors
2026-07-15 19:30:43 +09:00
fd78804fc7
Compose foreground sandbox process lifetimes
2026-07-15 19:30:43 +09:00
e6d6406c64
Implement exact State Anchor mount and lease lifecycle
2026-07-15 17:33:59 +09:00
54f3a08b91
Confine terminfo injection to runtime control state
2026-07-15 15:16:25 +09:00
cf5948e8be
Build deterministic OCI sandbox specifications
2026-07-15 14:59:43 +09:00
b438dd5201
Bootstrap verified Rust implementation workspace
2026-07-13 02:25:59 +09:00
