Commit Graph
17 Commits
Author SHA1 Message Date
Drew Newberry ff45e457fd refactor(isolation): generalize loopback protocol
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry 48659ee92d fix(isolation): bound mediation attach without nested retries
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry 95833cae5f fix(isolation): validate wire state and propagate snapshot failures
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry 49ac1be495 fix(isolation): validate remote confirmation through public contract
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry d741dcc698 fix(isolation): harden signals and separate process status from transport
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry 64ee429ae2 feat(isolation): add boundary protocol and Linux primitives
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry cc95700d51 feat(isolation): bind launches to sandbox sessions
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry 406200dccc refactor(isolation): unify typed network mediation
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry 61235726de refactor(isolation): generalize loopback connector
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry 8e485acb0a fix(isolation): clarify mediated DNS identity
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry de5aff292b fix(isolation): validate confirmation for external backend implementations
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry b24b847f64 fix(isolation): seal confirmed boundary state
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry f72ec9efc5 feat(isolation): define capability-free launch contract
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry 175dc82a29 fix(isolation): tighten interface error and digest contracts
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry 10deeccf42 feat(isolation): add mediated DNS transport
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry 38dc5f9f1d feat(isolation): expose trusted host gateway
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00
Drew Newberry f8173e9747 refactor(isolation): name the interface crate explicitly
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
2026-09-11 15:12:15 -07:00