Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
ms2k 73e3e9fdee Fix rootless launches with subordinate ID maps ... Resolve and verify canonical caller subordinate ranges, launch preparation and runtime workers through mapped causal acquisition, and keep runsc in the existing user namespace. Repair descriptor-relative OCI cleanup and absent-mount recovery so failed launches can progress to the corrected path.		2026-07-19 19:51:47 +09:00
..
lazaret-client	Restore profile-first interactive launches	2026-07-19 13:59:43 +09:00
lazaret-control-client	Make codec shape authority compile-time and fixed	2026-07-19 04:33:43 +09:00
lazaret-core	Fix rootless launches with subordinate ID maps	2026-07-19 19:51:47 +09:00
lazaret-domain-state	Make external codec boundaries explicit and exhaustive	2026-07-19 05:33:39 +09:00
lazaret-escalation-client	Consume shared sandbox destinations at runtime boundaries	2026-07-19 05:25:32 +09:00
lazaret-host-coordinator	Fix rootless launches with subordinate ID maps	2026-07-19 19:51:47 +09:00
lazaret-ignored-workspace	Replace lexical Rust fragments with real modules	2026-07-19 05:12:57 +09:00
lazaret-linux	Fix rootless launches with subordinate ID maps	2026-07-19 19:51:47 +09:00
lazaret-prepared-lower	Fix rootless launches with subordinate ID maps	2026-07-19 19:51:47 +09:00
lazaret-runtime-supervisor	Fix rootless launches with subordinate ID maps	2026-07-19 19:51:47 +09:00
lazaret-sandbox-contract	Protect every product-owned sandbox destination	2026-07-19 05:42:17 +09:00
lazaret-state-anchor	Replace lexical Rust fragments with real modules	2026-07-19 05:12:57 +09:00
lazaret-storage-catalog	Fix rootless launches with subordinate ID maps	2026-07-19 19:51:47 +09:00