Evan Lezar d11fc8deb7 refactor(sandbox): manage boundary exec child ownership ...

Route RFC 0012 boundary exec children through ManagedChild so spawn registration, waiting, cleanup, and lost-child diagnostics remain structurally coupled.

Closes #3154

Signed-off-by: Evan Lezar <elezar@nvidia.com>

2026-09-18 10:03:17 +02:00

..

openshell-binary-identity

feat(isolation): implement the RFC 0012 sandbox architecture (#2942)

2026-09-16 00:49:14 +00:00

openshell-bootstrap

fix(bootstrap): emit RFC 5280 extensions on generated gateway PKI (#3286)

2026-09-14 16:49:44 +00:00

openshell-cli

feat(sandbox): validate configuration before workload activation (#3259)

2026-09-18 00:16:18 +00:00

openshell-conformance

test(conformance): cover sandbox lifecycle in archives (#3375)

2026-09-17 16:10:31 +00:00

openshell-conformance-cli

test(conformance): remove plan-driven continuity tests (#3342)

2026-09-15 14:57:07 +00:00

openshell-core

feat(sandbox): validate configuration before workload activation (#3259)

2026-09-18 00:16:18 +00:00

openshell-driver-db-credstore

refactor(proto)!: use well-known time types (#3113)

2026-09-16 19:51:45 +00:00

openshell-driver-docker

feat(sandbox): validate configuration before workload activation (#3259)

2026-09-18 00:16:18 +00:00

openshell-driver-kubernetes

fix(kubernetes): stop supervisor before workload (#3424)

2026-09-18 00:13:06 +00:00

openshell-driver-kubernetes-secrets

refactor(proto)!: use well-known time types (#3113)

2026-09-16 19:51:45 +00:00

openshell-driver-mxc

refactor(proto)!: use well-known time types (#3113)

2026-09-16 19:51:45 +00:00

openshell-driver-podman

feat(sandbox): validate configuration before workload activation (#3259)

2026-09-18 00:16:18 +00:00

openshell-driver-vault

refactor(proto)!: use well-known time types (#3113)

2026-09-16 19:51:45 +00:00

openshell-driver-vm

refactor(proto)!: use well-known time types (#3113)

2026-09-16 19:51:45 +00:00

openshell-extension-core

chore(deps): replace ring with AWS-LC (#3243)

2026-09-09 17:57:42 +00:00

openshell-gateway

refactor(config): normalize and enforce gateway schema v2 (#2814)

2026-09-11 05:00:24 +00:00

openshell-gateway-interceptors

feat(api): add durable workspace mutation admission and replay (#3321)

2026-09-17 14:51:56 +00:00

openshell-isolation-interface

feat(providers): report applied sandbox provider changes (#3391)

2026-09-17 19:10:43 +00:00

openshell-ocsf

fix(ocsf): correct HTTP activity context (#3316)

2026-09-15 18:47:55 +00:00

openshell-otel

refactor(otel): unify compute driver tracing (#2995)

2026-09-03 15:26:14 +00:00

openshell-otel-test-support

refactor(otel): unify compute driver tracing (#2995)

2026-09-03 15:26:14 +00:00

openshell-policy

fix(policy)!: require explicit L7 append targets and scope (#3380)

2026-09-17 22:53:07 +00:00

openshell-policy-schema

feat(policy): establish one canonical authored policy representation (#3334)

2026-09-16 17:36:31 +00:00

openshell-prover

feat(prover): add standalone policy boundary checker (#3289)

2026-09-17 17:30:03 +00:00

openshell-prover-cli

feat(prover): add standalone policy boundary checker (#3289)

2026-09-17 17:30:03 +00:00

openshell-providers

refactor(providers)!: make provider profiles import-only (#3383)

2026-09-17 22:59:27 +00:00

openshell-sandbox

refactor(sandbox): manage boundary exec child ownership

2026-09-18 10:03:17 +02:00

openshell-sandbox-backend

feat(sandbox): validate configuration before workload activation (#3259)

2026-09-18 00:16:18 +00:00

openshell-sdk

feat(sandbox): validate configuration before workload activation (#3259)

2026-09-18 00:16:18 +00:00

openshell-server

feat(sandbox): validate configuration before workload activation (#3259)

2026-09-18 00:16:18 +00:00

openshell-server-macros

refactor(inference): remove managed inference routes (#3195)

2026-09-09 18:47:22 +00:00

openshell-supervisor

fix(supervisor): allow withheld credentials at startup (#3438)

2026-09-17 20:46:57 -07:00

openshell-supervisor-middleware

feat(middleware): add a hook to inspect HTTP responses (#3074)

2026-09-17 18:54:38 +00:00

openshell-supervisor-middleware-builtins

refactor(proto)!: use well-known time types (#3113)

2026-09-16 19:51:45 +00:00

openshell-supervisor-network

feat(sandbox): validate configuration before workload activation (#3259)

2026-09-18 00:16:18 +00:00

openshell-supervisor-process

feat(providers): report applied sandbox provider changes (#3391)

2026-09-17 19:10:43 +00:00

openshell-tui

feat(sandbox): validate configuration before workload activation (#3259)

2026-09-18 00:16:18 +00:00

openshell-vfio

chore: remove Bazel build support (#2840)

2026-08-20 15:08:09 +00:00