Add owner-mediated bwrap execution boundary

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a06def-6490-7033-8448-2eab2d12ed44
This commit is contained in:
tegwick 2026-09-04 22:12:19 +02:00
parent 877676d1f1
commit d79e3fe358
23 changed files with 1321 additions and 86 deletions

View file

@ -71,7 +71,7 @@ def test_resolve_initial_ttl() -> None:
def test_extend_expires_at_caps_at_max() -> None:
anchor = datetime(2026, 6, 24, 10, 0, tzinfo=UTC)
anchor = datetime.now(UTC)
current = anchor + timedelta(hours=23)
new_expires, applied = extend_expires_at(
current,
@ -262,4 +262,4 @@ def test_manager_expire_dry_run_and_apply(store: SandboxStore) -> None:
applied = manager.expire(apply=True, now=now)
assert applied[0].action == "destroyed"
assert manager.get("gone5678").state == SandboxState.DESTROYED
assert manager.get("gone5678").state == SandboxState.DESTROYED