Rootless gVisor sandbox for development tools and coding agents.

Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
ms2k 02fc29acb1 Refine rootless and network readiness contracts ... Correct the caller-configured user-namespace topology, bind modeled network readiness to the live sandbox and helper, and keep physical canary, topology, encoding, and capability predicates in compact specification tables below the model boundary.		2026-07-19 19:52:41 +09:00
.cargo	Implement fail-closed ignored workspace routing	2026-07-16 13:04:12 +09:00
crates	Reserve an explicit Lazaret network topology	2026-07-19 19:52:14 +09:00
docs	Refine rootless and network readiness contracts	2026-07-19 19:52:41 +09:00
patches	Implement fail-closed ignored workspace routing	2026-07-16 13:04:12 +09:00
tests	Replace lexical Rust fragments with real modules	2026-07-19 05:12:57 +09:00
tools	Add a repository-local host installer	2026-07-19 13:55:52 +09:00
.clippy.toml	Confine verification tooling to current repository checks	2026-07-14 02:19:07 +09:00
.gitignore	Bootstrap verified Rust implementation workspace	2026-07-13 02:25:59 +09:00
Cargo.lock	Fix rootless launches with subordinate ID maps	2026-07-19 19:51:47 +09:00
Cargo.toml	Centralize sandbox destination authority	2026-07-19 04:36:44 +09:00
deny.toml	Close hostile recovery and concurrency gaps	2026-07-18 05:47:15 +09:00
rust-toolchain.toml	Bind sandbox handoff authority and restore verifier gates	2026-07-17 23:23:19 +09:00