6c570da60e
Recognize terminated runsc gofers during teardown
2026-08-02 19:57:36 +09:00
6d3a2cfe16
Model terminal interaction authority and bounded verification
2026-08-02 14:02:32 +09:00
b240bc1d12
Correct hostinet receive flag handling
...
Accept and discard Linux-inert send-only flags on hostinet receive calls, add native and runsc syscall coverage, and bind the resulting immutable runtime build.
2026-07-31 04:07:41 +09:00
52c8c56e4f
Check hardlink topology in workspace routing protocol
2026-07-30 22:51:34 +09:00
1ad3b84db2
Seal ignored-workspace routing at Domain startup
2026-07-30 00:52:58 +09:00
b114e3514b
Model startup-sealed workspace routing authority
2026-07-30 00:32:32 +09:00
35ab7f17c0
Generalize safe host-to-isolated rename migration
2026-07-29 22:20:04 +09:00
8334fd379f
Confine package ownership changes to private mounts
2026-07-27 03:31:58 +09:00
2c420012bd
Own the patched runsc artifact and bind recovery identity
2026-07-26 18:01:03 +09:00
51d0c4db1d
Restore exact repository verification manifests
2026-07-26 01:07:45 +09:00
0dda65fc2e
Support durable host-to-isolated workspace migration
2026-07-26 00:43:30 +09:00
503f090121
Establish bounded descriptor budgets for sandbox domains
2026-07-24 02:18:30 +09:00
84bb22a7db
Make concurrency verification deterministic and exhaustive
2026-07-22 01:51:55 +09:00
0f6825c3b9
Add a static trusted sandbox init
2026-07-19 22:38:37 +09:00
b9c3bcfbbc
Add a repository-local host installer
2026-07-19 13:55:52 +09:00
247819250b
Replace lexical Rust fragments with real modules
2026-07-19 05:12:57 +09:00
2f8a9f9178
Unify host coordinator lifecycle state
2026-07-19 04:17:25 +09:00
22325aa76a
Decouple client contracts and close private role registries
2026-07-19 03:44:30 +09:00
ee9201b057
Decompose oversized Rust files by responsibility
2026-07-19 03:02:44 +09:00
a0055f67f1
Integrate the ignored-workspace corpus into verification
...
Give the Git Sentry launch shape one Rust owner, update the physical corpus to supply every authority, and make the default repository gate distinguish unavailable physical prerequisites from corpus failures.
2026-07-19 02:39:45 +09:00
e7dd95aea6
Remove phase vocabulary from Lazaret interfaces
2026-07-18 22:35:48 +09:00
3f9b1b3543
Close hostile recovery and concurrency gaps
2026-07-18 05:47:15 +09:00
943c56eea8
Verify materialized fuser patch
2026-07-17 23:25:15 +09:00
252cb83e5e
Scope terminal process lint exemption
2026-07-17 23:23:19 +09:00
e97ab6471c
Refuse orphan state without Domain Store authority
2026-07-17 23:23:19 +09:00
24d7d5b6e0
Add crash-consistent State Anchor maintenance
2026-07-17 23:23:19 +09:00
f21a847991
Integrate exact production recovery before cold start
2026-07-17 23:23:19 +09:00
d25942596f
Implement exact bootstrap recovery and artifact GC
2026-07-17 23:23:19 +09:00
49d5def1a9
Bind sandbox handoff authority and restore verifier gates
2026-07-17 23:23:19 +09:00
95104fa4e7
Implement fail-closed ignored workspace routing
2026-07-16 13:04:12 +09:00
407b75b1ff
Add confined host escalation transport
2026-07-15 19:59:51 +09:00
b653293840
Clarify sandbox causal edge descriptors
2026-07-15 19:30:43 +09:00
fd78804fc7
Compose foreground sandbox process lifetimes
2026-07-15 19:30:43 +09:00
e6d6406c64
Implement exact State Anchor mount and lease lifecycle
2026-07-15 17:33:59 +09:00
5458460717
Implement verified OCI prepared-lower lifecycle
2026-07-15 15:48:46 +09:00
0716bab960
Integrate trusted-host configuration
...
# Conflicts:
# Cargo.lock
# Cargo.toml
# tools/lazaret_verify.py
2026-07-15 00:56:14 +09:00
f9eb966341
Implement trusted-host configuration resolution
2026-07-15 00:43:42 +09:00
6f722ce079
Enforce causal child acquisition boundaries
2026-07-15 00:39:26 +09:00
1468f6b841
Add fail-closed Linux process and descriptor primitives
2026-07-15 00:39:26 +09:00
c738d92f01
Confine verification tooling to current repository checks
2026-07-14 02:19:07 +09:00
f840a48376
Enforce qualified pidfs host and process broker contracts
2026-07-14 00:12:32 +09:00
b438dd5201
Bootstrap verified Rust implementation workspace
2026-07-13 02:25:59 +09:00
