Rootless gVisor sandbox for development tools and coding agents.

Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
ms2k 73e3e9fdee Fix rootless launches with subordinate ID maps ... Resolve and verify canonical caller subordinate ranges, launch preparation and runtime workers through mapped causal acquisition, and keep runsc in the existing user namespace. Repair descriptor-relative OCI cleanup and absent-mount recovery so failed launches can progress to the corrected path.		2026-07-19 19:51:47 +09:00
.cargo	Implement fail-closed ignored workspace routing	2026-07-16 13:04:12 +09:00
crates	Fix rootless launches with subordinate ID maps	2026-07-19 19:51:47 +09:00
docs	Restore profile-first interactive launches	2026-07-19 13:59:43 +09:00
patches	Implement fail-closed ignored workspace routing	2026-07-16 13:04:12 +09:00
tests	Replace lexical Rust fragments with real modules	2026-07-19 05:12:57 +09:00
tools	Add a repository-local host installer	2026-07-19 13:55:52 +09:00
.clippy.toml	Confine verification tooling to current repository checks	2026-07-14 02:19:07 +09:00
.gitignore	Bootstrap verified Rust implementation workspace	2026-07-13 02:25:59 +09:00
Cargo.lock	Fix rootless launches with subordinate ID maps	2026-07-19 19:51:47 +09:00
Cargo.toml	Centralize sandbox destination authority	2026-07-19 04:36:44 +09:00
deny.toml	Close hostile recovery and concurrency gaps	2026-07-18 05:47:15 +09:00
rust-toolchain.toml	Bind sandbox handoff authority and restore verifier gates	2026-07-17 23:23:19 +09:00