d799cf4837
Model prepared artifact selection before lease acquisition
2026-07-22 00:58:23 +09:00
af9b4de85a
Compose protected runtime files before sandbox handoff
2026-07-22 00:40:37 +09:00
85f0db08d7
Preserve live prepared-lower materializations during recovery
2026-07-21 23:47:29 +09:00
6eba9f25ca
Model live prepared-lower ownership during recovery
2026-07-21 23:46:54 +09:00
b288e77ed0
Explain active Domain maintenance contention
2026-07-21 22:41:46 +09:00
d38357a65d
Accept safe overlay work residue after unmount
2026-07-20 00:58:14 +09:00
e60baad993
Make Git router teardown process-bounded
2026-07-19 23:34:06 +09:00
31e9ab0f2d
Replace external reachability with an owned canary
2026-07-19 22:39:31 +09:00
0f6825c3b9
Add a static trusted sandbox init
2026-07-19 22:38:37 +09:00
02fc29acb1
Refine rootless and network readiness contracts
...
Correct the caller-configured user-namespace topology, bind modeled network readiness to the live sandbox and helper, and keep physical canary, topology, encoding, and capability predicates in compact specification tables below the model boundary.
2026-07-19 19:52:41 +09:00
1c86e1aa0e
Reserve an explicit Lazaret network topology
...
Launch slirp4netns on 10.137.54.0/24, update its gateway and DNS routes, and refuse configured allows or specific denies that collide with the enclosing Lazaret /23 while preserving broad RFC 1918 denial.
2026-07-19 19:52:14 +09:00
73e3e9fdee
Fix rootless launches with subordinate ID maps
...
Resolve and verify canonical caller subordinate ranges, launch preparation and runtime workers through mapped causal acquisition, and keep runsc in the existing user namespace. Repair descriptor-relative OCI cleanup and absent-mount recovery so failed launches can progress to the corrected path.
2026-07-19 19:51:47 +09:00
b9dbd78087
Restore profile-first interactive launches
2026-07-19 13:59:43 +09:00
b9c3bcfbbc
Add a repository-local host installer
2026-07-19 13:55:52 +09:00
a6c2f31f4a
Keep prepared-lower test artifacts in the workspace
2026-07-19 06:02:45 +09:00
6fcadf7547
Cover State Reset scope in enum shape authority
2026-07-19 05:55:42 +09:00
91d88336df
Derive prepared runtime files from the sandbox contract
2026-07-19 05:55:34 +09:00
77ba5319ce
Make core serialized enum shapes exhaustive
2026-07-19 05:48:19 +09:00
5376aa90f9
Make ID-map artifact identity encoding explicit
2026-07-19 05:43:28 +09:00
c361217fe9
Require schema ownership for signed payloads
2026-07-19 05:43:20 +09:00
8a85b2387d
Protect every product-owned sandbox destination
2026-07-19 05:42:17 +09:00
d7de87fb8f
Make external codec boundaries explicit and exhaustive
2026-07-19 05:33:39 +09:00
76de24c75c
Make split modules own their dependency imports
2026-07-19 05:28:45 +09:00
56b54163ae
Test Domain Store mutations without a duplicate policy engine
2026-07-19 05:25:41 +09:00
897578e7cb
Consume shared sandbox destinations at runtime boundaries
2026-07-19 05:25:32 +09:00
684ca52a01
Keep long-identity control sockets within sun_path
2026-07-19 05:16:33 +09:00
247819250b
Replace lexical Rust fragments with real modules
2026-07-19 05:12:57 +09:00
f8849cdb5f
Centralize sandbox destination authority
2026-07-19 04:36:44 +09:00
54cc167f81
Make codec shape authority compile-time and fixed
2026-07-19 04:33:43 +09:00
bfe21dfb3f
Fail closed before Domain Store mutations
2026-07-19 04:26:35 +09:00
2f8a9f9178
Unify host coordinator lifecycle state
2026-07-19 04:17:25 +09:00
85046fdd7f
Make Domain Store mutations row-local
2026-07-19 04:07:05 +09:00
d70f483844
Replace runtime argv handoff with a sealed typed record
2026-07-19 03:56:49 +09:00
22325aa76a
Decouple client contracts and close private role registries
2026-07-19 03:44:30 +09:00
786049534d
Unify client Domain observation
2026-07-19 03:25:27 +09:00
30cd36dcdd
Expose typed Prepared Lower failures
2026-07-19 03:18:50 +09:00
ee9201b057
Decompose oversized Rust files by responsibility
2026-07-19 03:02:44 +09:00
03bfe92ca0
Retire the mutable design schema
...
Make Rust records and fixed codec tests the implementation-shape owner, remove the Mermaid category registry, and state the ownership boundary in the authoritative specification.
2026-07-19 02:45:32 +09:00
a0055f67f1
Integrate the ignored-workspace corpus into verification
...
Give the Git Sentry launch shape one Rust owner, update the physical corpus to supply every authority, and make the default repository gate distinguish unavailable physical prerequisites from corpus failures.
2026-07-19 02:39:45 +09:00
bda342890f
Adopt mature Git config and DNS codecs
2026-07-19 00:40:26 +09:00
d08d931b5f
Organize the public CLI with clap
2026-07-18 23:25:40 +09:00
e7dd95aea6
Remove phase vocabulary from Lazaret interfaces
2026-07-18 22:35:48 +09:00
3f9b1b3543
Close hostile recovery and concurrency gaps
2026-07-18 05:47:15 +09:00
696dae610a
Integrate host escalation with production sessions
2026-07-18 04:03:39 +09:00
254bb37764
Serve concurrent terminal sessions with exact teardown
2026-07-18 02:51:19 +09:00
917409fcc6
Integrate routed Git workspaces with persistent state
2026-07-18 02:08:14 +09:00
943c56eea8
Verify materialized fuser patch
2026-07-17 23:25:15 +09:00
1867f65d4e
Align network verifiers with runtime namespace sources
2026-07-17 23:23:20 +09:00
f5455d1d6c
Preserve inherited target stdin authority
2026-07-17 23:23:20 +09:00
39307f4281
Preserve Session Terminal TTY through causal launch
2026-07-17 23:23:19 +09:00
