From a2149bb630c580011e2c7573f574066439beb3f6 Mon Sep 17 00:00:00 2001
From: tegwick <bernd.worsch@gmail.com>
Date: Tue, 22 Sep 2026 02:34:20 +0200
Subject: [PATCH] Pin sandboxer 221126c in the runtime contract lock

Fixes the bwrap info-fd partial-read race that failed the owner runtime
proof on railiance01.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 272244@bnt-lap001
Assistant-Session: c8962fa7-b290-47df-865f-403ddb6c77e9
---
 deploy/runtime-contract-lock.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/deploy/runtime-contract-lock.json b/deploy/runtime-contract-lock.json
index 399e1e9..8fc2c5a 100644
--- a/deploy/runtime-contract-lock.json
+++ b/deploy/runtime-contract-lock.json
@@ -19,7 +19,7 @@
       "version": "0.1.0"
     },
     {
-      "commit": "7a61383e59f0a1d8229c57f48e231de67c0f338a",
+      "commit": "221126cb77ea41ec283598a23d628f760a51bdea",
       "distribution": "sandboxer",
       "source": "../sand-boxer",
       "version": "0.0.0"