Carlos Villela 7e7a8d5610 fix(sandbox): pass declared environment to the initial process (#3392) ...

Apply the workload environment before stripping supervisor-only values and injecting provider placeholders in both canonical launch paths. The RFC 0012 bootstrap carries these values separately from inherited supervisor environment.

Add child-process coverage for declared values, explicit HOME, stripped identity material, and provider precedence. Add a Docker-backed lifecycle regression for initial and exec environments in TTY and non-TTY modes.

Validation: the child-process test fails without env application; the Docker regression fails with the pinned unpatched runtime and passes with the rebuilt runtime. Sandbox library tests: 201 passed, one ignored on Rust 1.95.0. mise run pre-commit passed. Full mise run ci is blocked by the host linker missing libz3. Fixes #3377.

Signed-off-by: Carlos Villela <cvillela@nvidia.com>

2026-09-17 05:46:06 +00:00

..

inference-routing.mdx

refactor(inference): remove managed inference routes (#3195)

2026-09-09 18:47:22 +00:00

manage-gateways.mdx

refactor(inference): remove managed inference routes (#3195)

2026-09-09 18:47:22 +00:00

manage-providers.mdx

refactor(persistence): adopt continuation-token pagination (#3249)

2026-09-11 00:02:07 +00:00

manage-sandboxes.mdx

fix(sandbox): pass declared environment to the initial process (#3392)

2026-09-17 05:46:06 +00:00

manage-workspaces.mdx

feat(sdk): add lazy pagination pagers (#3256)

2026-09-11 00:02:08 +00:00

policies.mdx

feat(isolation): implement the RFC 0012 sandbox architecture (#2942)

2026-09-16 00:49:14 +00:00

policy-advisor.mdx

fix(policy): harden advisor transport proposals (#3136)

2026-09-04 19:38:00 +00:00