Shiju bf02d59107 fix(vm): enforce the configured workload identity ...

Reject conflicting policy users and groups before VM image preparation
and before guest attach or process startup changes state. Validate
supervisor policy updates against the protected VM workload identity.

Preserve the gateway CA transport and capability-free sandbox launcher.

Signed-off-by: Shiju <shiju@nvidia.com>

2026-10-01 14:48:37 +05:30

..

_components

docs: add 0.1.0 upgrade guide outline (#3540)

2026-09-23 20:26:25 +00:00

about

refactor(auth): separate sandbox identity from TLS (#3110)

2026-10-01 04:33:25 +00:00

brand/assets

docs(readme): add theme-aware banner (#2619)

2026-08-05 19:01:50 +00:00

extensibility

docs: refresh architecture and extensibility pages (#3741)

2026-09-27 02:18:29 +00:00

how-it-works

fix(vm): enforce the configured workload identity

2026-10-01 14:48:37 +05:30

images

docs: refresh architecture and extensibility pages (#3741)

2026-09-27 02:18:29 +00:00

kubernetes

refactor(auth): separate sandbox identity from TLS (#3110)

2026-10-01 04:33:25 +00:00

observability

feat(server): write gateway OCSF events to JSONL (#3264)

2026-09-29 16:19:53 +00:00

resources

docs(fern): move published docs into docs tree (#796)

2026-04-09 15:02:27 -07:00

sdk

docs: keep page URLs aligned with file paths (#3713)

2026-09-28 02:08:54 +00:00

security

refactor(auth): separate sandbox identity from TLS (#3110)

2026-10-01 04:33:25 +00:00

tutorials

docs: keep page URLs aligned with file paths (#3713)

2026-09-28 02:08:54 +00:00

upgrade

docs: refresh architecture and agent guides (#3705)

2026-09-25 02:38:00 -07:00

.markdownlint-cli2.jsonc

fix(docs): scope fenced code language linting (#965)

2026-04-24 14:23:31 -07:00

CONTRIBUTING.mdx

docs: keep page URLs aligned with file paths (#3713)

2026-09-28 02:08:54 +00:00

index.mdx

docs: describe 0.1 series in release callouts (#3732)

2026-09-26 03:06:48 +00:00

index.yml

docs: keep page URLs aligned with file paths (#3713)

2026-09-28 02:08:54 +00:00