coulomb/sand-boxer
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Commit graph

  • c7c310266a docs(identity): point current metered gate at issued HARNESS task main tegwick 2026-10-17 13:01:53 +02:00
  • 53f800c4f7 SAND-WP-0015-T04: record 818b1b7c rebuild and startup proof tegwick 2026-10-15 00:24:11 +02:00
  • 7ddf92070f docs(reuse): establish reviewed NetKingdom security capabilities tegwick 2026-10-14 06:45:20 +02:00
  • b06d94f02b SAND-WP-0015-T04: blocker now tracks REINAH-WP-0008-T07 and memo infd-20261014-b01 tegwick 2026-10-14 02:15:41 +02:00
  • 67d8b90292 SAND-WP-0015-T04: record 2026-10-14 rein-aharness status check tegwick 2026-10-14 02:02:09 +02:00
  • 45ce9ac5c0 Close SAND-WP-0003-T09 (remote smoke passed) and SAND-WP-0005-T06 (delivered via SAND-WP-0012) tegwick 2026-10-13 23:09:41 +02:00
  • 042a22cb3c SCOPE: add bwrap-fi-research profile, refresh test count; refresh brief tegwick 2026-10-13 22:58:24 +02:00
  • 4bea56211f Record 2026-10-13 owner returns on SAND-WP-0015-T04; narrow blockers tegwick 2026-10-13 22:54:53 +02:00
  • 4cffd7ded2 Add profile.bwrap-fi-research for the FI research brief (GLAS-WP-0016-T02) tegwick 2026-10-13 21:55:46 +02:00
  • 8bdedf4c6f chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-04 11:20:44 +02:00
  • 53f6ea2603 Advance dependency roots with guarded source implementations tegwick 2026-10-04 11:01:47 +02:00
  • 3c1b135c27 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-04 01:05:29 +02:00
  • 6db42f4f35 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-29 00:28:55 +02:00
  • 878090364f chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-28 23:35:27 +02:00
  • 6fca6ded7c Qualify wait tasks per Task Wait Qualifiers v0.1 (CUST-WP-0074-T05, gate root R2 credential provisioning) tegwick 2026-09-28 23:31:23 +02:00
  • 22c95a9c3b chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-27 23:22:30 +02:00
  • 81b5fcff8e fix: relocate long-path runtime console launchers tegwick 2026-09-27 23:07:44 +02:00
  • 505e82db74 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-24 10:05:25 +02:00
  • 55398d7aa1 Name snuggles-inventor as the code-generation owner. tegwick 2026-09-24 09:56:40 +02:00
  • 221126cb77 Read the whole bwrap info object before parsing the child pid tegwick 2026-09-22 02:34:08 +02:00
  • 444611586c Drop non-canonical execution capability tag (C-24) tegwick 2026-09-21 15:45:26 +02:00
  • 993cf686a9 Use canonical capability tags in repo classification (C-24) tegwick 2026-09-21 15:44:36 +02:00
  • 0af57979c8 chore(records): index SAND-WP-0014 blocked status tegwick 2026-09-21 14:40:14 +02:00
  • 9fa5fdae80 Mark SAND-WP-0014 blocked: only T05 remains, gated with SAND-WP-0015-T04 tegwick 2026-09-21 14:38:18 +02:00
  • fc4b8c2de0 Classify open workplans with flavor (CUST-WP-0072). tegwick 2026-09-14 15:50:49 +02:00
  • 7a61383e59 Refuse stale installed owner packages despite matching version metadata tegwick 2026-09-09 23:02:29 +02:00
  • be42de7caf Package sandbox definitions and build a pinned owner runtime tegwick 2026-09-09 22:54:39 +02:00
  • bfe0e4c4c8 Confine metered runs to an ephemeral owner Messages route tegwick 2026-09-09 22:20:56 +02:00
  • 3e49a98a0e chore(records): index the completed protected runtime installation tegwick 2026-09-08 22:03:32 +02:00
  • d2d1542f07 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-08 21:59:32 +02:00
  • df5e941814 feat(runtime): install pinned artifacts in a private owner store tegwick 2026-09-08 21:08:18 +02:00
  • 174dba17b6 Package pinned native Claude and prove isolated startup tegwick 2026-09-06 23:51:50 +02:00
  • cfc79d51af chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-06 23:47:49 +02:00
  • 23d0c2b34d feat: return combined bwrap runtime candidate to Glas tegwick 2026-09-06 20:34:51 +02:00
  • 17d4160b6e feat: deliver owner-bound credentials into bwrap commands tegwick 2026-09-06 00:25:07 +02:00
  • 0196f083c4 fix: align WP-0013 task references with restored Hub records tegwick 2026-09-05 22:21:57 +02:00
  • 3e8f20c897 fix: align WP-0013 reference with its canonical Hub identity tegwick 2026-09-05 22:19:18 +02:00
  • 332edf4883 fix: declare WP-0013 as an indexable workplan tegwick 2026-09-05 22:18:02 +02:00
  • e45e3e6401 fix: reject multicast and reserved egress addresses tegwick 2026-09-05 22:10:59 +02:00
  • d477c3b5d9 feat: enforce owner allowlisted bwrap HTTPS egress tegwick 2026-09-05 22:08:18 +02:00
  • d69827aaa2 feat: pin bwrap rein runtimes and isolate private state tegwick 2026-09-05 20:36:11 +02:00
  • c2886b2f77 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-05 20:33:27 +02:00
  • b6655d8859 Add bounded stdin to owner execution tegwick 2026-09-04 22:30:11 +02:00
  • fd9297810c Verify bwrap execution across owner API requests tegwick 2026-09-04 22:25:05 +02:00
  • d79e3fe358 Add owner-mediated bwrap execution boundary tegwick 2026-09-04 22:12:19 +02:00
  • 877676d1f1 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-04 22:00:27 +02:00
  • 5c76010026 docs(agents): repoint remote State Hub URL to the in-cluster address codex 2026-08-25 00:22:02 +02:00
  • 20258de61e Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout) tegwick 2026-07-30 01:04:00 +02:00
  • aa772ecea6 Regenerate WORK-RECORDS.md tegwick 2026-07-27 02:04:13 +02:00
  • ebb200e82f Mark SAND-WP-0013 finished tegwick 2026-07-27 01:59:47 +02:00
  • c8951fbdd3 Regenerate WORK-RECORDS.md tegwick 2026-07-26 13:49:01 +02:00
  • cf490220f4 Add local reachability descriptor for same-host extensions (SAND-WP-0013-T04) tegwick 2026-07-26 12:58:32 +02:00
  • 76c38e758c Implement ext.bwrap: local bubblewrap namespace extension (SAND-WP-0013) tegwick 2026-07-26 12:37:56 +02:00
  • d2186e8ac8 Add SAND-WP-0013: bubblewrap local-exec extension tegwick 2026-07-26 12:29:04 +02:00
  • bc1f5f8238 docs: workplan-first agent guidance prose (CUST-WP-0055 T04) tegwick 2026-07-08 16:35:49 +02:00
  • 7f978f7274 Regenerate agent instructions from state-hub templates (CUST-WP-0055 T01) tegwick 2026-07-08 14:50:36 +02:00
  • 7447d38642 chore(CORE-WP-0007): retire haskell-build VM profile tegwick 2026-07-08 12:48:04 +02:00
  • fb195b8978 Add Forgejo CI smoke workflow (enablement template) tegwick 2026-07-08 12:37:53 +02:00
  • 2d0669c2f8 chore(consistency): sync task status from DB [auto] tegwick 2026-06-24 12:57:32 +02:00
  • 774bc5ae0a feat: Packer build orchestration (SAND-WP-0012) tegwick 2026-06-24 12:56:32 +02:00
  • 92eaf8bae5 chore(consistency): sync task status from DB [auto] tegwick 2026-06-24 12:54:51 +02:00
  • 1f87be4c6b feat: reachability and consumer profiles (SAND-WP-0011) tegwick 2026-06-24 12:54:27 +02:00
  • 7cabf77fb6 chore(consistency): sync task status from DB [auto] tegwick 2026-06-24 12:50:47 +02:00
  • 15f031fd65 feat: cloud adapters E2B/Modal and billing export (SAND-WP-0010) tegwick 2026-06-24 12:50:19 +02:00
  • 6d0a1a8b1e chore: sync SAND-WP-0010–0012 State Hub IDs tegwick 2026-06-24 12:48:07 +02:00
  • 878aa6a451 chore(consistency): sync task status from DB [auto] tegwick 2026-06-24 12:47:55 +02:00
  • 5466330cf4 docs: add workplans SAND-WP-0010–0012 for remaining gaps tegwick 2026-06-24 12:47:08 +02:00
  • 151fc41299 chore(consistency): sync task status from DB [auto] tegwick 2026-06-24 12:44:30 +02:00
  • df658e7ef9 feat: TTL enforcement and operational hardening (SAND-WP-0009) tegwick 2026-06-24 12:44:04 +02:00
  • b58191b23e chore: sync SAND-WP-0009 State Hub IDs tegwick 2026-06-24 12:38:40 +02:00
  • 0fb799fa4e chore(consistency): sync task status from DB [auto] tegwick 2026-06-24 12:38:26 +02:00
  • ee304f313d docs: post-WP-0007 gap analysis and SAND-WP-0009 workplan tegwick 2026-06-24 12:36:56 +02:00
  • cd746cff77 docs: refresh SCOPE.md for v0 post SAND-WP-0007 tegwick 2026-06-24 08:01:18 +02:00
  • 67f1a3a565 chore: sync SAND-WP-0007 State Hub IDs tegwick 2026-06-24 07:58:00 +02:00
  • 952cebf2e9 feat: snapshot/restore checkpoints (SAND-WP-0007) tegwick 2026-06-24 07:57:40 +02:00
  • 2760ef2373 Sync State Hub workstream IDs for SAND-WP-0006 tegwick 2026-06-24 07:52:45 +02:00
  • 1415e17230 Implement SAND-WP-0006: SaaS payments, routing, and ext.saas-stub tegwick 2026-06-24 07:52:20 +02:00
  • eee336149e Sync State Hub workstream IDs for SAND-WP-0005 tegwick 2026-06-24 01:47:50 +02:00
  • cec0fc6348 Implement SAND-WP-0005: extension SDK and ext.vm-packer tegwick 2026-06-24 01:47:07 +02:00
  • c8126672ee chore(consistency): sync task status from DB [auto] tegwick 2026-06-23 21:44:27 +02:00
  • 1594bceec1 Finish SAND-WP-0004: mark e2e-framework migration arc complete tegwick 2026-06-23 21:43:53 +02:00
  • d6afe0e27b Sync State Hub workstream IDs for SAND-WP-0003 and SAND-WP-0004 tegwick 2026-06-23 21:41:24 +02:00
  • 9757ce0c7d chore(consistency): sync task status from DB [auto] tegwick 2026-06-23 21:41:14 +02:00
  • 6473fa78d7 Update SCOPE, gap analysis, and propose SAND-WP-0004 tegwick 2026-06-23 21:40:43 +02:00
  • e7d31b7f55 Finish SAND-WP-0003: wise-validator extraction workplan tegwick 2026-06-23 21:37:08 +02:00
  • 9054d33e46 Clarify INTENT.md: sand-boxer self-sufficiency and sibling boundaries tegwick 2026-06-23 21:23:39 +02:00
  • 45029ec66f chore(consistency): sync task status from DB [auto] tegwick 2026-06-23 19:54:02 +02:00
  • c0a9261cdc Implement SAND-WP-0008: host telemetry and self-canary tegwick 2026-06-23 19:53:51 +02:00
  • 582c1dd3c6 chore(consistency): sync task status from DB [auto] tegwick 2026-06-23 16:52:40 +02:00
  • 8e0465865a Finish SAND-WP-0002: remote smoke, podman-compose, HTTP stub tegwick 2026-06-23 16:52:29 +02:00
  • 380034c911 chore(consistency): sync task status from DB [auto] tegwick 2026-06-23 14:25:23 +02:00
  • 20e25726d7 Add SAND-WP-0008: host telemetry and self-canary introspection tegwick 2026-06-23 14:25:05 +02:00
  • 939c4e1aff Fix SSH auth: respect ~/.ssh/config instead of defaulting to root tegwick 2026-06-23 14:16:16 +02:00
  • 8a39eaba34 Add make install for global sandboxer CLI tegwick 2026-06-23 13:55:38 +02:00
  • 06cc6f9466 chore(consistency): sync task status from DB [auto] tegwick 2026-06-22 23:27:50 +02:00
  • d6d3155792 Implement SAND-WP-0002 meta-framework foundation (T01–T09) tegwick 2026-06-22 23:27:31 +02:00
  • b0a57cf9d3 Complete SAND-WP-0001: bootstrap Python dev workflow tegwick 2026-06-22 23:25:42 +02:00
  • 1ec00d52b8 chore(consistency): sync task status from DB [auto] tegwick 2026-06-22 23:24:06 +02:00
  • d12ff9a7f4 chore: write State Hub workstream and task IDs from fix-consistency tegwick 2026-06-22 21:32:58 +02:00
  • cdc0e505a9 chore(consistency): sync task status from DB [auto] tegwick 2026-06-22 21:32:44 +02:00