Drew Newberry 8719fc9f37 fix(sandbox): restrict provider file mode (#4093) ...

* fix(sandbox): restrict provider file mode (fixes #4091)

Signed-off-by: Drew Newberry <anewberry@nvidia.com>

* refactor(sandbox): set provider file mode with safe API

Signed-off-by: Drew Newberry <anewberry@nvidia.com>

---------

Signed-off-by: Drew Newberry <anewberry@nvidia.com>

2026-10-02 06:35:15 +00:00

..

configs/gateway

test(e2e): remove schema parity campaign (#3864)

2026-10-01 13:17:20 +00:00

docker

fix(kubernetes): remove NetworkPolicy acknowledgement (#3677)

2026-09-24 22:41:45 +00:00

gpu

refactor(runtime): retire Community image dependencies (#3386)

2026-09-22 14:43:51 +02:00

helm-plugins/openshell-external-compute-driver

feat(isolation): implement the RFC 0012 sandbox architecture (#2942)

2026-09-16 00:49:14 +00:00

kubernetes

chore(license): align repository compliance text (#3467)

2026-09-18 17:05:18 +00:00

mcp-conformance

feat(mcp): inspect requests with Tower-selected protocol profiles (#3335)

2026-09-28 20:48:50 +00:00

policy-advisor

fix(policy): propose rules for unknown DNS hosts (#3707)

2026-09-25 08:28:41 +00:00

python

test(python): synchronize interactive exec TTY readiness (#4076)

2026-10-01 21:47:40 +00:00

rust

fix(sandbox): restrict provider file mode (#4093)

2026-10-02 06:35:15 +00:00

support

test(e2e): remove schema parity campaign (#3864)

2026-10-01 13:17:20 +00:00

mcp-conformance.sh

feat(policy): preserve exact MCP revision allowlists (#3027)

2026-09-05 04:24:49 +00:00

no-compute-driver-gateway.sh

refactor(compute): decouple gateway driver composition (#2823)

2026-09-01 21:13:45 +00:00

run.sh

chore(build): remove bundled Z3 support (#3275)

2026-10-01 12:08:33 +00:00

with-docker-gateway.sh

refactor(auth): separate sandbox identity from TLS (#3110)

2026-10-01 04:33:25 +00:00

with-keycloak.sh

fix(auth): harden OIDC trust root retrieval (#3332)

2026-09-15 17:00:45 +00:00

with-kube-gateway.sh

chore(build): remove bundled Z3 support (#3275)

2026-10-01 12:08:33 +00:00

with-podman-gateway.sh

test(e2e): remove schema parity campaign (#3864)

2026-10-01 13:17:20 +00:00