fd78804fc7
Compose foreground sandbox process lifetimes
2026-07-15 19:30:43 +09:00
c3a76ec8c4
Add generation-bound TLS control face
...
Create ephemeral trust anchors, publish an exact-profile Unix control socket, and persist generation-authorized mTLS session registration through the Domain Store.
2026-07-15 18:19:18 +09:00
e6d6406c64
Implement exact State Anchor mount and lease lifecycle
2026-07-15 17:33:59 +09:00
af8669c165
Implement generation-bound protocol cryptography
2026-07-15 15:56:31 +09:00
5458460717
Implement verified OCI prepared-lower lifecycle
2026-07-15 15:48:46 +09:00
54f3a08b91
Confine terminfo injection to runtime control state
2026-07-15 15:16:25 +09:00
cf5948e8be
Build deterministic OCI sandbox specifications
2026-07-15 14:59:43 +09:00
e4d9cc2dc9
Add the lock-owned transactional Domain Store
2026-07-15 14:10:50 +09:00
96b494a8bb
Add the transactional prepared-artifact catalog
2026-07-15 13:40:52 +09:00
0716bab960
Integrate trusted-host configuration
...
# Conflicts:
# Cargo.lock
# Cargo.toml
# tools/lazaret_verify.py
2026-07-15 00:56:14 +09:00
f9eb966341
Implement trusted-host configuration resolution
2026-07-15 00:43:42 +09:00
1468f6b841
Add fail-closed Linux process and descriptor primitives
2026-07-15 00:39:26 +09:00
16defc768a
Add typed schema records and strict version checks
2026-07-13 04:05:12 +09:00
b438dd5201
Bootstrap verified Rust implementation workspace
2026-07-13 02:25:59 +09:00
