coulomb/sand-boxer
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
sand-boxer/WORK-RECORDS.md
tegwick 76c38e758c
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
Implement ext.bwrap: local bubblewrap namespace extension (SAND-WP-0013) 
Adds the first local, same-host, kernel-namespace-only sandbox
extension: no SSH hop, no container runtime. Extends IsolationSpec.level
with "process", implements BwrapExtension (provision/wait_ready/
teardown) spawning bwrap with unshared user/mount/pid/ipc/uts/net
namespaces, registers ext.bwrap + profile.bwrap-local, and extends
manager._handle_from_status to carry pid/workspace_dir. Verified with a
live bwrap smoke run in addition to the mocked test suite.

T04 (reachability vs. the SSH-based glas-harness consumer contract)
deliberately left open pending glas-harness's harness contract.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-26 12:37:56 +02:00

10 KiB
Raw Blame History

Work Records — sand-boxer

Generated by statehub fix-consistency (CUST-WP-0061-T04, work-record stage 3). Do not edit by hand — edit the source file/block listed for each record and re-run fix-consistency to refresh this index. Archived workplans are omitted; closed decisions/intakes/engagements stay listed so recently-resolved work is still visible. [auto]

Kind ID Status Lane Source
workplan SAND-WP-0001 finished — workplans/SAND-WP-0001-statehub-bootstrap.md
workplan SAND-WP-0002 finished — workplans/SAND-WP-0002-meta-framework-foundation.md
workplan SAND-WP-0003 finished — workplans/SAND-WP-0003-wise-validator-extraction.md
workplan SAND-WP-0004 finished — workplans/SAND-WP-0004-the-custodian-e2e-shim.md
workplan SAND-WP-0005 finished — workplans/SAND-WP-0005-extension-sdk-and-vm-packer.md
workplan SAND-WP-0006 finished — workplans/SAND-WP-0006-saas-extensions-and-payments.md
workplan SAND-WP-0007 finished — workplans/SAND-WP-0007-snapshot-restore.md
workplan SAND-WP-0008 finished — workplans/SAND-WP-0008-host-telemetry-and-self-canary.md
workplan SAND-WP-0009 finished — workplans/SAND-WP-0009-ttl-and-operational-hardening.md
workplan SAND-WP-0010 finished — workplans/SAND-WP-0010-cloud-adapters-and-billing.md
workplan SAND-WP-0011 finished — workplans/SAND-WP-0011-reachability-and-consumer-profiles.md
workplan SAND-WP-0012 finished — workplans/SAND-WP-0012-packer-orchestration.md
workplan SAND-WP-0013 proposed — workplans/SAND-WP-0013-bwrap-extension.md
task SAND-WP-0001-T01 done — workplans/SAND-WP-0001-statehub-bootstrap.md
task SAND-WP-0001-T02 done — workplans/SAND-WP-0001-statehub-bootstrap.md
task SAND-WP-0001-T03 done — workplans/SAND-WP-0001-statehub-bootstrap.md
task SAND-WP-0002-T01 done — workplans/SAND-WP-0002-meta-framework-foundation.md
task SAND-WP-0002-T02 done — workplans/SAND-WP-0002-meta-framework-foundation.md
task SAND-WP-0002-T03 done — workplans/SAND-WP-0002-meta-framework-foundation.md
task SAND-WP-0002-T04 done — workplans/SAND-WP-0002-meta-framework-foundation.md
task SAND-WP-0002-T05 done — workplans/SAND-WP-0002-meta-framework-foundation.md
task SAND-WP-0002-T06 done — workplans/SAND-WP-0002-meta-framework-foundation.md
task SAND-WP-0002-T07 done — workplans/SAND-WP-0002-meta-framework-foundation.md
task SAND-WP-0002-T08 done — workplans/SAND-WP-0002-meta-framework-foundation.md
task SAND-WP-0002-T09 done — workplans/SAND-WP-0002-meta-framework-foundation.md
task SAND-WP-0002-T10 done — workplans/SAND-WP-0002-meta-framework-foundation.md
task SAND-WP-0003-T01 done — workplans/SAND-WP-0003-wise-validator-extraction.md
task SAND-WP-0003-T02 done — workplans/SAND-WP-0003-wise-validator-extraction.md
task SAND-WP-0003-T03 done — workplans/SAND-WP-0003-wise-validator-extraction.md
task SAND-WP-0003-T04 done — workplans/SAND-WP-0003-wise-validator-extraction.md
task SAND-WP-0003-T05 done — workplans/SAND-WP-0003-wise-validator-extraction.md
task SAND-WP-0003-T06 done — workplans/SAND-WP-0003-wise-validator-extraction.md
task SAND-WP-0003-T07 done — workplans/SAND-WP-0003-wise-validator-extraction.md
task SAND-WP-0003-T08 done — workplans/SAND-WP-0003-wise-validator-extraction.md
task SAND-WP-0003-T09 wait — workplans/SAND-WP-0003-wise-validator-extraction.md
task SAND-WP-0004-T01 done — workplans/SAND-WP-0004-the-custodian-e2e-shim.md
task SAND-WP-0004-T02 done — workplans/SAND-WP-0004-the-custodian-e2e-shim.md
task SAND-WP-0004-T03 done — workplans/SAND-WP-0004-the-custodian-e2e-shim.md
task SAND-WP-0004-T04 done — workplans/SAND-WP-0004-the-custodian-e2e-shim.md
task SAND-WP-0004-T05 done — workplans/SAND-WP-0004-the-custodian-e2e-shim.md
task SAND-WP-0005-T01 done — workplans/SAND-WP-0005-extension-sdk-and-vm-packer.md
task SAND-WP-0005-T02 done — workplans/SAND-WP-0005-extension-sdk-and-vm-packer.md
task SAND-WP-0005-T03 done — workplans/SAND-WP-0005-extension-sdk-and-vm-packer.md
task SAND-WP-0005-T04 done — workplans/SAND-WP-0005-extension-sdk-and-vm-packer.md
task SAND-WP-0005-T05 done — workplans/SAND-WP-0005-extension-sdk-and-vm-packer.md
task SAND-WP-0005-T06 wait — workplans/SAND-WP-0005-extension-sdk-and-vm-packer.md
task SAND-WP-0006-T01 done — workplans/SAND-WP-0006-saas-extensions-and-payments.md
task SAND-WP-0006-T02 done — workplans/SAND-WP-0006-saas-extensions-and-payments.md
task SAND-WP-0006-T03 done — workplans/SAND-WP-0006-saas-extensions-and-payments.md
task SAND-WP-0006-T04 done — workplans/SAND-WP-0006-saas-extensions-and-payments.md
task SAND-WP-0006-T05 done — workplans/SAND-WP-0006-saas-extensions-and-payments.md
task SAND-WP-0006-T06 cancel — workplans/SAND-WP-0006-saas-extensions-and-payments.md
task SAND-WP-0007-T01 done — workplans/SAND-WP-0007-snapshot-restore.md
task SAND-WP-0007-T02 done — workplans/SAND-WP-0007-snapshot-restore.md
task SAND-WP-0007-T03 done — workplans/SAND-WP-0007-snapshot-restore.md
task SAND-WP-0007-T04 done — workplans/SAND-WP-0007-snapshot-restore.md
task SAND-WP-0007-T05 done — workplans/SAND-WP-0007-snapshot-restore.md
task SAND-WP-0007-T06 done — workplans/SAND-WP-0007-snapshot-restore.md
task SAND-WP-0008-T01 done — workplans/SAND-WP-0008-host-telemetry-and-self-canary.md
task SAND-WP-0008-T02 done — workplans/SAND-WP-0008-host-telemetry-and-self-canary.md
task SAND-WP-0008-T03 done — workplans/SAND-WP-0008-host-telemetry-and-self-canary.md
task SAND-WP-0008-T04 done — workplans/SAND-WP-0008-host-telemetry-and-self-canary.md
task SAND-WP-0008-T05 done — workplans/SAND-WP-0008-host-telemetry-and-self-canary.md
task SAND-WP-0008-T06 done — workplans/SAND-WP-0008-host-telemetry-and-self-canary.md
task SAND-WP-0008-T07 done — workplans/SAND-WP-0008-host-telemetry-and-self-canary.md
task SAND-WP-0008-T08 done — workplans/SAND-WP-0008-host-telemetry-and-self-canary.md
task SAND-WP-0008-T09 done — workplans/SAND-WP-0008-host-telemetry-and-self-canary.md
task SAND-WP-0008-T10 done — workplans/SAND-WP-0008-host-telemetry-and-self-canary.md
task SAND-WP-0009-T01 done — workplans/SAND-WP-0009-ttl-and-operational-hardening.md
task SAND-WP-0009-T02 done — workplans/SAND-WP-0009-ttl-and-operational-hardening.md
task SAND-WP-0009-T03 done — workplans/SAND-WP-0009-ttl-and-operational-hardening.md
task SAND-WP-0009-T04 done — workplans/SAND-WP-0009-ttl-and-operational-hardening.md
task SAND-WP-0009-T05 done — workplans/SAND-WP-0009-ttl-and-operational-hardening.md
task SAND-WP-0009-T06 done — workplans/SAND-WP-0009-ttl-and-operational-hardening.md
task SAND-WP-0009-T07 done — workplans/SAND-WP-0009-ttl-and-operational-hardening.md
task SAND-WP-0009-T08 done — workplans/SAND-WP-0009-ttl-and-operational-hardening.md
task SAND-WP-0009-T09 done — workplans/SAND-WP-0009-ttl-and-operational-hardening.md
task SAND-WP-0010-T01 done — workplans/SAND-WP-0010-cloud-adapters-and-billing.md
task SAND-WP-0010-T02 done — workplans/SAND-WP-0010-cloud-adapters-and-billing.md
task SAND-WP-0010-T03 done — workplans/SAND-WP-0010-cloud-adapters-and-billing.md
task SAND-WP-0010-T04 done — workplans/SAND-WP-0010-cloud-adapters-and-billing.md
task SAND-WP-0010-T05 done — workplans/SAND-WP-0010-cloud-adapters-and-billing.md
task SAND-WP-0010-T06 done — workplans/SAND-WP-0010-cloud-adapters-and-billing.md
task SAND-WP-0010-T07 done — workplans/SAND-WP-0010-cloud-adapters-and-billing.md
task SAND-WP-0011-T01 done — workplans/SAND-WP-0011-reachability-and-consumer-profiles.md
task SAND-WP-0011-T02 done — workplans/SAND-WP-0011-reachability-and-consumer-profiles.md
task SAND-WP-0011-T03 done — workplans/SAND-WP-0011-reachability-and-consumer-profiles.md
task SAND-WP-0011-T04 done — workplans/SAND-WP-0011-reachability-and-consumer-profiles.md
task SAND-WP-0011-T05 done — workplans/SAND-WP-0011-reachability-and-consumer-profiles.md
task SAND-WP-0011-T06 done — workplans/SAND-WP-0011-reachability-and-consumer-profiles.md
task SAND-WP-0011-T07 done — workplans/SAND-WP-0011-reachability-and-consumer-profiles.md
task SAND-WP-0012-T01 done — workplans/SAND-WP-0012-packer-orchestration.md
task SAND-WP-0012-T02 done — workplans/SAND-WP-0012-packer-orchestration.md
task SAND-WP-0012-T03 done — workplans/SAND-WP-0012-packer-orchestration.md
task SAND-WP-0012-T04 done — workplans/SAND-WP-0012-packer-orchestration.md
task SAND-WP-0012-T05 done — workplans/SAND-WP-0012-packer-orchestration.md
task SAND-WP-0012-T06 done — workplans/SAND-WP-0012-packer-orchestration.md
task SAND-WP-0013-T01 todo — workplans/SAND-WP-0013-bwrap-extension.md
task SAND-WP-0013-T02 todo — workplans/SAND-WP-0013-bwrap-extension.md
task SAND-WP-0013-T03 todo — workplans/SAND-WP-0013-bwrap-extension.md
task SAND-WP-0013-T04 todo — workplans/SAND-WP-0013-bwrap-extension.md
task SAND-WP-0013-T05 todo — workplans/SAND-WP-0013-bwrap-extension.md
task SAND-WP-0013-T06 todo — workplans/SAND-WP-0013-bwrap-extension.md