mirror of https://github.com/NVIDIA/OpenShell.git synced 2026-10-21 06:11:31 +08:00

Files

T

Drew Newberry eeba0e7954 refactor(runtime): confine and reduce unsafe code (#4130 )

* refactor(runtime): confine and reduce unsafe code

Signed-off-by: Drew Newberry <anewberry@nvidia.com>

* fix(ci): make signal probe portable and gate Linux initialization

Signed-off-by: Drew Newberry <anewberry@nvidia.com>

* fix(cli): handle platform-specific SSH cancellation lints

Signed-off-by: Drew Newberry <anewberry@nvidia.com>

---------

Signed-off-by: Drew Newberry <anewberry@nvidia.com>

2026-10-10 01:12:03 +00:00

src

refactor(runtime): confine and reduce unsafe code (#4130 )

2026-10-10 01:12:03 +00:00

tests

fix(sandbox): deliver complete exec output before success (#3688 )

2026-09-25 04:03:49 +00:00

Cargo.toml

refactor(runtime): confine and reduce unsafe code (#4130 )

2026-10-10 01:12:03 +00:00

README.md

refactor(runtime): confine and reduce unsafe code (#4130 )

2026-10-10 01:12:03 +00:00

README.md

Isolation backend interface

This crate defines the supervisor-facing IsolationBackend contract, lifecycle states, and shared types. It forbids unsafe code, including in its tests.

Linux enforcement mechanisms belong to openshell-sandbox::linux. Backends implement this crate's safe contract without importing Linux mechanisms through the interface crate.