coulomb/sand-boxer
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
76 commits 1 branch 0 tags 694 KiB
Commit graph

76 commits

This branch
This branch
All branches
Author SHA1 Message Date
tegwick
3e49a98a0e chore(records): index the completed protected runtime installation
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
Assistant: codex
Assistant-Model: gpt-5.6-luna
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
 2026-09-08 22:03:32 +02:00
custodian-sync
d2d1542f07 chore(consistency): sync task status from DB [auto]
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
Updated by fix-consistency on 2026-09-08:
  - update .custodian-brief.md for sand-boxer

Assistant: codex
Assistant-Model: gpt-5.6-luna
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
 2026-09-08 21:59:32 +02:00
tegwick
df5e941814 feat(runtime): install pinned artifacts in a private owner store
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details 
Assistant: codex
Assistant-Model: gpt-5.6-luna
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
 2026-09-08 21:08:18 +02:00
tegwick
174dba17b6 Package pinned native Claude and prove isolated startup
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb
 2026-09-06 23:51:50 +02:00
custodian-sync
cfc79d51af chore(consistency): sync task status from DB [auto]
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
Updated by fix-consistency on 2026-09-06:
  - update .custodian-brief.md for sand-boxer

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb
 2026-09-06 23:47:49 +02:00
tegwick
23d0c2b34d feat: return combined bwrap runtime candidate to Glas
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
Answer the GLAS-WP-0015 handoff for SAND-WP-0015-T04 without activating any
production path.

Add candidate profile profile.claude-agent-dev-proof v1.1.0 (ext.bwrap,
localhost-only, default: deny, declared api.anthropic.com:443) for GLAS-WP-0012
review. The committed profile grants no egress by itself — ext.bwrap refuses it
unless owner extension config independently allowlists the destination — and a
regression test asserts that fail-closed default.

Reconcile the differing project examples in favour of the acceptance runner's
actor agt / project glas-local-proof, keeping the documented credential route
bound to that single project rather than broadening it.

Record the return contract (profile revision, host scope, consumer tuple,
runtime digest and mount paths, declared egress, value-free denial/cleanup
receipts) in docs/bwrap-runtime.md.

T04 stays wait: Claude credential lane, owner machine authentication, pinned
Claude executable and real-model acceptance remain operator gated.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HjyScPKb8MV8y2VZHGFSSV

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 716401@bnt-lap001
Assistant-Session: 0d02392b-d4a8-4fed-98e3-32333f768169
 2026-09-06 20:34:51 +02:00
tegwick
17d4160b6e feat: deliver owner-bound credentials into bwrap commands
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb
 2026-09-06 00:25:07 +02:00
tegwick
0196f083c4 fix: align WP-0013 task references with restored Hub records
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb
 2026-09-05 22:21:57 +02:00
tegwick
3e8f20c897 fix: align WP-0013 reference with its canonical Hub identity
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb
 2026-09-05 22:19:18 +02:00
tegwick
332edf4883 fix: declare WP-0013 as an indexable workplan
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb
 2026-09-05 22:18:02 +02:00
tegwick
e45e3e6401 fix: reject multicast and reserved egress addresses
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb
 2026-09-05 22:10:59 +02:00
tegwick
d477c3b5d9 feat: enforce owner allowlisted bwrap HTTPS egress
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb
 2026-09-05 22:08:18 +02:00
tegwick
d69827aaa2 feat: pin bwrap rein runtimes and isolate private state 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb
 2026-09-05 20:36:11 +02:00
custodian-sync
c2886b2f77 chore(consistency): sync task status from DB [auto]
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details 
Updated by fix-consistency on 2026-09-05:
  - update .custodian-brief.md for sand-boxer

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb
 2026-09-05 20:33:27 +02:00
tegwick
b6655d8859 Add bounded stdin to owner execution
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a06def-6490-7033-8448-2eab2d12ed44
 2026-09-04 22:30:11 +02:00
tegwick
fd9297810c Verify bwrap execution across owner API requests 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a06def-6490-7033-8448-2eab2d12ed44
 2026-09-04 22:25:05 +02:00
tegwick
d79e3fe358 Add owner-mediated bwrap execution boundary 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a06def-6490-7033-8448-2eab2d12ed44
 2026-09-04 22:12:19 +02:00
custodian-sync
877676d1f1 chore(consistency): sync task status from DB [auto]
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
Updated by fix-consistency on 2026-09-04:
  - update .custodian-brief.md for sand-boxer

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a06def-6490-7033-8448-2eab2d12ed44
 2026-09-04 22:00:27 +02:00
codex
5c76010026 docs(agents): repoint remote State Hub URL to the in-cluster address
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
The remote row pointed at 127.0.0.1:18000, a reverse tunnel back to the
workstation. On railiance01 the State Hub runs in the cluster on that same
machine, so the request left the box and came back to reach a local service.

Refs CUST-WP-0067-T07

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
 2026-08-25 00:22:02 +02:00
tegwick
20258de61e Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
Maintainer decision, 2026-07-29: adopts TRSL V1C1 as this repo's
preliminary governing license, per target-revenue's
workplans/TREV-WP-0008-governance-and-pilot-rollout.md T05. Full
specialist legal review is deferred until out of beta (target-revenue
SCOPE.md §1). No Phase is yet declared for this repo.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-07-30 01:04:00 +02:00
tegwick
aa772ecea6 Regenerate WORK-RECORDS.md
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-07-27 02:04:13 +02:00
tegwick
ebb200e82f Mark SAND-WP-0013 finished
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-07-27 01:59:47 +02:00
tegwick
c8951fbdd3 Regenerate WORK-RECORDS.md
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 6s
Details 
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-07-26 13:49:01 +02:00
tegwick
cf490220f4 Add local reachability descriptor for same-host extensions (SAND-WP-0013-T04)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details 
Reachability gains pid/workspace_dir, populated by enrich_reachability
whenever a backend's wait_ready() returns a pid: endpoint (currently
just ext.bwrap). build_reachability_report() now also returns a
local_exec_hint (nsenter into the pid's namespaces) alongside the
existing ssh_one_liner, so glas-harness can branch on which is
populated instead of assuming every sandbox is SSH-reachable.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-07-26 12:58:32 +02:00
tegwick
76c38e758c Implement ext.bwrap: local bubblewrap namespace extension (SAND-WP-0013)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details 
Adds the first local, same-host, kernel-namespace-only sandbox
extension: no SSH hop, no container runtime. Extends IsolationSpec.level
with "process", implements BwrapExtension (provision/wait_ready/
teardown) spawning bwrap with unshared user/mount/pid/ipc/uts/net
namespaces, registers ext.bwrap + profile.bwrap-local, and extends
manager._handle_from_status to carry pid/workspace_dir. Verified with a
live bwrap smoke run in addition to the mocked test suite.

T04 (reachability vs. the SSH-based glas-harness consumer contract)
deliberately left open pending glas-harness's harness contract.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-07-26 12:37:56 +02:00
tegwick
d2186e8ac8 Add SAND-WP-0013: bubblewrap local-exec extension
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details 
First local, same-host, kernel-namespace-only sandbox extension --
every current self-hosted extension requires an SSH hop plus a
container runtime or VM. Also the first extension able to actually
enforce the network.default: deny every profile already declares.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-07-26 12:29:04 +02:00
tegwick
bc1f5f8238 docs: workplan-first agent guidance prose (CUST-WP-0055 T04)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
2026-07-08 16:35:49 +02:00
tegwick
7f978f7274 Regenerate agent instructions from state-hub templates (CUST-WP-0055 T01)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details 
Sync AGENTS.md, CLAUDE.md, and .claude/rules from updated project_rules
templates: workplan-first session protocol, legacy terminology footnote,
and GET /workplans/ examples.
 2026-07-08 14:50:36 +02:00
tegwick
7447d38642 chore(CORE-WP-0007): retire haskell-build VM profile
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
2026-07-08 12:48:04 +02:00
tegwick
fb195b8978 Add Forgejo CI smoke workflow (enablement template)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
2026-07-08 12:37:53 +02:00
tegwick
2d0669c2f8 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-24:
  - update .custodian-brief.md for sand-boxer
 2026-06-24 12:57:32 +02:00
tegwick
774bc5ae0a feat: Packer build orchestration (SAND-WP-0012) 
Add vm-packer build mode, profile.vm-packer-build, State Hub progress
notes during long provision, docs/runbook, and build mode tests.
 2026-06-24 12:56:32 +02:00
tegwick
92eaf8bae5 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-24:
  - update .custodian-brief.md for sand-boxer
 2026-06-24 12:54:51 +02:00
tegwick
1f87be4c6b feat: reachability and consumer profiles (SAND-WP-0011) 
Add reachability enrichment (tunnel metadata, ops-bridge pointer),
secret_refs boundary resolution, profile.agent-dev and profile.build,
CLI reachability show, API endpoint, consumer smoke scripts, and tests.
 2026-06-24 12:54:27 +02:00
tegwick
7cabf77fb6 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-24:
  - update .custodian-brief.md for sand-boxer
 2026-06-24 12:50:47 +02:00
tegwick
15f031fd65 feat: cloud adapters E2B/Modal and billing export (SAND-WP-0010) 
Add credentialed E2B and Modal extensions, burst routing fallback,
fin-hub meter export hook, BYOK docs, and 77 tests.
 2026-06-24 12:50:19 +02:00
tegwick
6d0a1a8b1e chore: sync SAND-WP-0010–0012 State Hub IDs 2026-06-24 12:48:07 +02:00
tegwick
878aa6a451 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-24:
  - update .custodian-brief.md for sand-boxer
 2026-06-24 12:47:55 +02:00
tegwick
5466330cf4 docs: add workplans SAND-WP-0010–0012 for remaining gaps 
Cloud adapters (E2B/Modal/BYOK/fin-hub), reachability and consumer
profiles, Packer orchestration; update gap analysis and SCOPE.
 2026-06-24 12:47:08 +02:00
tegwick
151fc41299 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-24:
  - update .custodian-brief.md for sand-boxer
 2026-06-24 12:44:30 +02:00
tegwick
df658e7ef9 feat: TTL enforcement and operational hardening (SAND-WP-0009) 
Add TTL parser, expires_at on create, extend_ttl and expire/reap APIs,
activity-core integration doc, repo classification, registry refresh,
HTTP parity, and 69 tests.
 2026-06-24 12:44:04 +02:00
tegwick
b58191b23e chore: sync SAND-WP-0009 State Hub IDs 2026-06-24 12:38:40 +02:00
tegwick
0fb799fa4e chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-24:
  - update .custodian-brief.md for sand-boxer
 2026-06-24 12:38:26 +02:00
tegwick
ee304f313d docs: post-WP-0007 gap analysis and SAND-WP-0009 workplan 
Assess remaining INTENT gaps after snapshots; propose TTL enforcement,
platform hygiene, and HTTP parity as the next implementation track.
 2026-06-24 12:36:56 +02:00
tegwick
cd746cff77 docs: refresh SCOPE.md for v0 post SAND-WP-0007 
Reflect finished workplans 0001–0008, full profile/extension catalog,
routing/payments/snapshots surface, 54 tests, and current gaps.
 2026-06-24 08:01:18 +02:00
tegwick
67f1a3a565 chore: sync SAND-WP-0007 State Hub IDs 2026-06-24 07:58:00 +02:00
tegwick
952cebf2e9 feat: snapshot/restore checkpoints (SAND-WP-0007) 
Add workspace checkpoint API with SnapshotStore, extension hooks on
compose-ssh and saas-stub, manager orchestration, CLI/HTTP surface,
profile.compose-checkpoint, and docs/tests.
 2026-06-24 07:57:40 +02:00
tegwick
2760ef2373 Sync State Hub workstream IDs for SAND-WP-0006 2026-06-24 07:52:45 +02:00
tegwick
1415e17230 Implement SAND-WP-0006: SaaS payments, routing, and ext.saas-stub 
Add credits store, metering on create/destroy, extension routing resolver,
metered SaaS stub extension, burst/saas profiles, credits CLI, docs, and tests.
 2026-06-24 07:52:20 +02:00
tegwick
eee336149e Sync State Hub workstream IDs for SAND-WP-0005 2026-06-24 01:47:50 +02:00