John T. Myers 1ad45b4af0 fix(policy): enforce run_as_user/run_as_group must be 'sandbox' (#230) ...

Replace the clear_process_identity + maybe_infer_sandbox_user workaround
with strict enforcement: run_as_user and run_as_group must always be
'sandbox'. If omitted from YAML, they are defaulted server-side via
ensure_sandbox_process_identity(). Any other value is rejected.

This fixes 'policy set' failing with 'process policy cannot be changed
on a live sandbox' for custom-image sandboxes, where the CLI was
clearing identity fields but the YAML had 'sandbox' explicitly set.

- Remove clear_process_identity() from CLI and TUI
- Add ensure_sandbox_process_identity() to default missing fields
- Rename RootProcessIdentity -> InvalidProcessIdentity
- Replace maybe_infer_sandbox_user with validate_sandbox_user (fail-fast)
- Update OPA test policies to use run_as_user: sandbox

2026-03-11 12:46:59 -07:00

..

navigator-bootstrap

fix(cluster): skip DNS probe for IP-literal registry hosts (#229)

2026-03-11 09:20:56 -07:00

navigator-cli

fix(policy): enforce run_as_user/run_as_group must be 'sandbox' (#230)

2026-03-11 12:46:59 -07:00

navigator-core

chore: rename project from NemoClaw to OpenShell (#198)

2026-03-10 11:49:09 -07:00

navigator-policy

fix(policy): enforce run_as_user/run_as_group must be 'sandbox' (#230)

2026-03-11 12:46:59 -07:00

navigator-providers

chore: rename project from NemoClaw to OpenShell (#198)

2026-03-10 11:49:09 -07:00

navigator-router

feat(inference): add sandbox-system inference route for platform-level inference (#209)

2026-03-10 15:30:07 -07:00

navigator-sandbox

fix(policy): enforce run_as_user/run_as_group must be 'sandbox' (#230)

2026-03-11 12:46:59 -07:00

navigator-server

fix(policy): enforce run_as_user/run_as_group must be 'sandbox' (#230)

2026-03-11 12:46:59 -07:00

navigator-tui

fix(policy): enforce run_as_user/run_as_group must be 'sandbox' (#230)

2026-03-11 12:46:59 -07:00