Rootless gVisor sandbox for development tools and coding agents.

Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
ms2k b240bc1d12 Correct hostinet receive flag handling ... Accept and discard Linux-inert send-only flags on hostinet receive calls, add native and runsc syscall coverage, and bind the resulting immutable runtime build.		2026-07-31 04:07:41 +09:00
.cargo	Implement fail-closed ignored workspace routing	2026-07-16 13:04:12 +09:00
crates	Correct hostinet receive flag handling	2026-07-31 04:07:41 +09:00
docs	Check hardlink topology in workspace routing protocol	2026-07-30 22:51:34 +09:00
patches	Correct hostinet receive flag handling	2026-07-31 04:07:41 +09:00
tests	Correct hostinet receive flag handling	2026-07-31 04:07:41 +09:00
tools	Correct hostinet receive flag handling	2026-07-31 04:07:41 +09:00
.clippy.toml	Confine verification tooling to current repository checks	2026-07-14 02:19:07 +09:00
.gitignore	Bootstrap verified Rust implementation workspace	2026-07-13 02:25:59 +09:00
Cargo.lock	Generalize safe host-to-isolated rename migration	2026-07-29 22:20:04 +09:00
Cargo.toml	Generalize safe host-to-isolated rename migration	2026-07-29 22:20:04 +09:00
deny.toml	Close hostile recovery and concurrency gaps	2026-07-18 05:47:15 +09:00
rust-toolchain.toml	Bind sandbox handoff authority and restore verifier gates	2026-07-17 23:23:19 +09:00