Jordan Ganoff ac3cd28864 feat(isolation): implement RFC 0012 isolation backend ...

Implement the Isolation Backend interface defined by RFC 0012 and migrate
the in-pod logic that was coupled to the supervisor behind an in-pod backend.

Squashed from the RFC 0012 implementation series (POC + subsequent RFC
alignment revisions).

Signed-off-by: Jordan Ganoff <jordan.ganoff@docker.com>

2026-08-23 15:10:34 -07:00

..

proto

build(bazel): establish RFC 0012 Rust reference graph (#2414)

2026-08-03 09:05:40 +00:00

activity.rs

refactor(openshell-sandbox): Split sandbox into process and network subcrates. (#1650)

2026-06-15 15:16:23 -04:00

auth.rs

feat(auth): per-sandbox authentication to gateway (#1404)

2026-05-21 17:58:55 -07:00

config.rs

refactor(network): consolidate proxy egress pipeline (#2373)

2026-07-31 20:59:00 +00:00

denial.rs

refactor(openshell-sandbox): Split sandbox into process and network subcrates. (#1650)

2026-06-15 15:16:23 -04:00

driver_mounts.rs

feat(kubernetes): support PVC subPath driver config (#2034)

2026-07-10 20:17:37 +00:00

driver_utils.rs

feat(sandbox,gateway): route sandbox egress through corporate HTTP proxy (#2245)

2026-07-24 16:51:52 +00:00

error.rs

feat(gpu): move device selection to driver config (#1815)

2026-06-11 12:53:06 +02:00

forward.rs

fix(cli): bracket IPv6 bind literals in SSH forwards (#2552)

2026-07-29 23:12:11 +00:00

google_cloud.rs

feat(sandbox): add GCE metadata emulator for Google Cloud (#1763)

2026-06-23 15:05:07 -05:00

gpu.rs

feat(cli): add GPU count requests (#1812)

2026-06-23 21:49:02 -07:00

grpc_client.rs

refactor(network): consolidate proxy egress pipeline (#2373)

2026-07-31 20:59:00 +00:00

host_pattern.rs

feat(supervisor-middleware): add network egress middleware (#2027)

2026-07-16 17:47:49 -07:00

image.rs

refactor: deduplicate shared driver and provider constants (#1474)

2026-05-20 09:24:57 -07:00

inference.rs

feat(sandbox,providers): add aws-bedrock as a recognized inference provider (#1704)

2026-06-23 13:10:37 -07:00

jwt.rs

feat(sdk): add openshell-sdk crate (#1862)

2026-07-14 22:35:46 -07:00

lib.rs

refactor(network): consolidate proxy egress pipeline (#2373)

2026-07-31 20:59:00 +00:00

metadata.rs

feat(workspace): add workspace resource model with scoping, membershi… (#2243)

2026-07-21 00:59:18 +00:00

middleware.rs

feat(supervisor-middleware): add network egress middleware (#2027)

2026-07-16 17:47:49 -07:00

net.rs

fix(policy): keep internal allowed IP proposals pending (#2416)

2026-07-23 12:17:21 +00:00

paths.rs

refactor(openshell-sandbox): Split sandbox into process and network subcrates. (#1650)

2026-06-15 15:16:23 -04:00

policy.rs

refactor(openshell-sandbox): Split sandbox into process and network subcrates. (#1650)

2026-06-15 15:16:23 -04:00

progress.rs

refactor: deduplicate shared utilities across driver crates (#1660)

2026-06-01 15:38:15 -07:00

proposals.rs

refactor(supervisor): pass agent proposal state explicitly (#2421)

2026-07-24 09:19:01 +00:00

proto_struct.rs

feat(supervisor-middleware): add network egress middleware (#2027)

2026-07-16 17:47:49 -07:00

provider_credentials.rs

fix: assorted arithmetic and indexing robustness fixes (#2451)

2026-07-27 14:39:40 +00:00

sandbox_env.rs

feat(isolation): implement RFC 0012 isolation backend

2026-08-23 15:10:34 -07:00

secrets.rs

fix(network): fail closed when credential placeholders cannot be rewritten (#2162)

2026-07-11 09:40:36 -07:00

settings.rs

test(e2e): stop using custom e2e binary builds (#2000)

2026-06-25 13:08:04 +00:00

telemetry.rs

feat(providers): add DeepInfra as a built-in inference provider (#1902)

2026-06-16 16:39:03 -07:00

time.rs

refactor(core): eliminate duplicate utilities across crates (#1381)

2026-05-14 09:25:35 -05:00

transport_errors.rs

fix(podman): tolerate shutdown transport closes (#2498)

2026-07-28 08:00:37 +00:00