Rootless gVisor sandbox for development tools and coding agents.

Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
ms2k 682d7c7db7 docs: formalize protocol identity and transition to regular-file escalation mailbox ... - Replaces stream/socket escalation with a sandboxed regular-file Escalation Mailbox to satisfy runsc isolation boundaries without exposing `host-uds=open`. - Expands the TLA+ protocol model with role-bound certificates, tuple authorization, and structured domain-failure recovery paths. - Adds physical integration journals for host terminfo injection, persistent /etc DNS shims, rootless Podman network topology, and static client delivery. - Establishes specification requirements for safe host-only State Anchor inspection and crash-consistent reset operations.		2026-06-30 02:35:43 +09:00
docs	docs: formalize protocol identity and transition to regular-file escalation mailbox	2026-06-30 02:35:43 +09:00
.gitignore	docs: include protocol encoding cryptography selection test	2026-06-29 23:27:32 +09:00