 Drew Newberry
|
77929d9c14
|
feat(sandbox): publish and activate sandbox backend protocol (#3898)
* feat(isolation): publish backend protocol contracts independently of runtime
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* feat(isolation): expose trusted launch and registry data contracts
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* refactor(isolation): name the required capability sandbox
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* refactor(sandbox): align protocol and compute capability names
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* refactor(sandbox): finalize public protocol contract names
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* feat(isolation)!: activate backend contracts in sandbox runtime and driver selection
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* refactor(sandbox): simplify runtime and fix backend example
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* refactor(examples): organize WASI backend in Rust
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* refactor(sandbox): defer protocol conformance fixtures
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* feat(examples): add supervised V8 backend demo
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* fix(examples): stream V8 guest output with default policy
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* fix(examples): handle V8 rejections and roll back failed launches
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* fix(examples): align V8 crypto dependencies with CI AWS-LC
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* feat(sandbox): represent Sandbox Protocol operations in protobuf
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* refactor(isolation): replace backend traits with RPC clients
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* refactor(proto): remove legacy isolation protocol reservations
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* refactor(proto): clarify Sandbox Protocol names
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* docs(isolation): clarify authentication bootstrap and supervisor APIs
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* refactor(isolation): simplify policy enforcement confirmation
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* fix(sandbox): rotate launch generations and stabilize retry sessions
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* refactor(sandbox): remove redundant backend adapters and TCP flags
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* fix(sandbox): repair Docker restarts and macOS lint
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* refactor(isolation): simplify RPC contracts and backend registration
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
* fix(sandbox): deliver TCP denials before closing the RPC
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
---------
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
2026-10-16 19:18:44 +00:00 |
|