coulomb/glas-harness
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Review sand-boxer metered route and request credential-chain status (GLAS-IN-0002)
Some checks failed
ci / validate (push) Has been cancelled
Details

Browse source 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 251574@bnt-lap001
Assistant-Session: 7d35c398-3815-44dc-84f1-df369a1594e9
This commit is contained in:
tegwick 2026-09-21 15:45:42 +02:00
parent 66dc6ce37d
commit b49466e950
2 changed files with 24 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

7
docs/intakes/residuals.md
View file

@ -109,6 +109,13 @@ description: |
concrete lane, credential delivery, enforced egress, pinned Claude runtime,
and deployment/Glas acceptance remain open in SAND-WP-0015-T04.
2026-09-21 review: sand-boxer bfe0e4c/be42de7/7a61383 add an owner-metered
Messages route (provider key outside bwrap, empty egress, owner socket) and
frozen-lock runtime builds. The Claude-route acceptance should use that
empty-egress profile. Blocked on SECRETS-WP-0009-T03 live delivery and the
approval-engine deployment; status requests sent 2026-09-21 (see
GLAS-WP-0015-T03).
Done when a non-secret probe and one real rein command execute inside the
namespace, the source checkout is not visible/mutable, required egress is
explicit, and teardown removes the sandbox workspace.