Commit Graph
24 Commits
Author SHA1 Message Date
Drew Newberry d3d92a7ccc refactor(isolation): use backend and runtime terminology
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-12 14:07:09 -07:00
Drew Newberry 56a7f2a91d feat(isolation): authenticate the Sandbox Protocol
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:16 -07:00
Drew Newberry d69352fb53 feat(isolation): add terminal boundary operation
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry 1f20080b15 fix(isolation): harden runtime boundary controls
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry 9d0038f979 refactor(isolation): separate sandbox backend protocol
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry c72daa94c7 feat(isolation): add transport-neutral session authentication
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry ff45e457fd refactor(isolation): generalize loopback protocol
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry 48659ee92d fix(isolation): bound mediation attach without nested retries
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry 5c854272d8 test(isolation): import owned agent specification explicitly
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry 95833cae5f fix(isolation): validate wire state and propagate snapshot failures
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry 49ac1be495 fix(isolation): validate remote confirmation through public contract
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry d741dcc698 fix(isolation): harden signals and separate process status from transport
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry 64ee429ae2 feat(isolation): add boundary protocol and Linux primitives
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry cc95700d51 feat(isolation): bind launches to sandbox sessions
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry 406200dccc refactor(isolation): unify typed network mediation
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry 61235726de refactor(isolation): generalize loopback connector
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry 8e485acb0a fix(isolation): clarify mediated DNS identity
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry de5aff292b fix(isolation): validate confirmation for external backend implementations
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry b24b847f64 fix(isolation): seal confirmed boundary state
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry f72ec9efc5 feat(isolation): define capability-free launch contract
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry 175dc82a29 fix(isolation): tighten interface error and digest contracts
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry 10deeccf42 feat(isolation): add mediated DNS transport
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry 38dc5f9f1d feat(isolation): expose trusted host gateway
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry f8173e9747 refactor(isolation): name the interface crate explicitly
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00