coulomb/sand-boxer
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add bounded stdin to owner execution
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a06def-6490-7033-8448-2eab2d12ed44
This commit is contained in:
tegwick 2026-09-04 22:30:11 +02:00
parent fd9297810c
commit b6655d8859
15 changed files with 74 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

5
workplans/SAND-WP-0014-owner-mediated-execution.md
View file

@ -91,6 +91,11 @@ The authenticated HTTP smoke subsequently exposed and fixed a lifecycle defect:
could disappear before a later API `exec`. Owner sandboxes now persist across
requests and remain bounded by explicit destroy, TTL expiry, and stale reaping.
The consumer-contract audit also found that Glas needs to create a private task
file without writing through the host mirror or putting prompt content in argv.
Owner exec now supports bounded `stdin_text` (1,000,000 UTF-8 bytes), delivers it
only to the child process, and excludes it from results and lifecycle evidence.
## Prove one governed rein and coordinate consumers
```task