Rootless gVisor sandbox for development tools and coding agents.
  • Rust 93.5%
  • Python 6%
  • Shell 0.4%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
ms2k 18afbeaa91 Make control identity mode umask-independent
Set and validate the publication identity through its retained descriptor so restrictive process masks cannot weaken or remove the required mode.
2026-07-15 18:19:18 +09:00
crates Make control identity mode umask-independent 2026-07-15 18:19:18 +09:00
docs Add generation-bound TLS control face 2026-07-15 18:19:18 +09:00
tests Implement verified OCI prepared-lower lifecycle 2026-07-15 15:48:46 +09:00
tools Implement exact State Anchor mount and lease lifecycle 2026-07-15 17:33:59 +09:00
.clippy.toml Confine verification tooling to current repository checks 2026-07-14 02:19:07 +09:00
.gitignore Bootstrap verified Rust implementation workspace 2026-07-13 02:25:59 +09:00
Cargo.lock Add generation-bound TLS control face 2026-07-15 18:19:18 +09:00
Cargo.toml Add generation-bound TLS control face 2026-07-15 18:19:18 +09:00
deny.toml Implement generation-bound protocol cryptography 2026-07-15 15:56:31 +09:00
rust-toolchain.toml Bootstrap verified Rust implementation workspace 2026-07-13 02:25:59 +09:00