Drew Newberry
|
d3d92a7ccc
|
refactor(isolation): use backend and runtime terminology
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-12 14:07:09 -07:00 |
|
Drew Newberry
|
56a7f2a91d
|
feat(isolation): authenticate the Sandbox Protocol
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-11 15:12:16 -07:00 |
|
Drew Newberry
|
d69352fb53
|
feat(isolation): add terminal boundary operation
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-11 15:12:15 -07:00 |
|
Drew Newberry
|
1f20080b15
|
fix(isolation): harden runtime boundary controls
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-11 15:12:15 -07:00 |
|
Drew Newberry
|
9d0038f979
|
refactor(isolation): separate sandbox backend protocol
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-11 15:12:15 -07:00 |
|
Drew Newberry
|
c72daa94c7
|
feat(isolation): add transport-neutral session authentication
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-11 15:12:15 -07:00 |
|
Drew Newberry
|
ff45e457fd
|
refactor(isolation): generalize loopback protocol
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-11 15:12:15 -07:00 |
|
Drew Newberry
|
48659ee92d
|
fix(isolation): bound mediation attach without nested retries
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-11 15:12:15 -07:00 |
|
Drew Newberry
|
5c854272d8
|
test(isolation): import owned agent specification explicitly
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-11 15:12:15 -07:00 |
|
Drew Newberry
|
95833cae5f
|
fix(isolation): validate wire state and propagate snapshot failures
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-11 15:12:15 -07:00 |
|
Drew Newberry
|
49ac1be495
|
fix(isolation): validate remote confirmation through public contract
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-11 15:12:15 -07:00 |
|
Drew Newberry
|
d741dcc698
|
fix(isolation): harden signals and separate process status from transport
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-11 15:12:15 -07:00 |
|
Drew Newberry
|
64ee429ae2
|
feat(isolation): add boundary protocol and Linux primitives
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-11 15:12:15 -07:00 |
|
Drew Newberry
|
cc95700d51
|
feat(isolation): bind launches to sandbox sessions
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-11 15:12:15 -07:00 |
|
Drew Newberry
|
406200dccc
|
refactor(isolation): unify typed network mediation
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-11 15:12:15 -07:00 |
|
Drew Newberry
|
61235726de
|
refactor(isolation): generalize loopback connector
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-11 15:12:15 -07:00 |
|
Drew Newberry
|
8e485acb0a
|
fix(isolation): clarify mediated DNS identity
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-11 15:12:15 -07:00 |
|
Drew Newberry
|
de5aff292b
|
fix(isolation): validate confirmation for external backend implementations
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-11 15:12:15 -07:00 |
|
Drew Newberry
|
b24b847f64
|
fix(isolation): seal confirmed boundary state
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-11 15:12:15 -07:00 |
|
Drew Newberry
|
f72ec9efc5
|
feat(isolation): define capability-free launch contract
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-11 15:12:15 -07:00 |
|
Drew Newberry
|
175dc82a29
|
fix(isolation): tighten interface error and digest contracts
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-11 15:12:15 -07:00 |
|
Drew Newberry
|
10deeccf42
|
feat(isolation): add mediated DNS transport
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-11 15:12:15 -07:00 |
|
Drew Newberry
|
38dc5f9f1d
|
feat(isolation): expose trusted host gateway
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-11 15:12:15 -07:00 |
|
Drew Newberry
|
f8173e9747
|
refactor(isolation): name the interface crate explicitly
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-09-11 15:12:15 -07:00 |
|