feat(isolation): implement the RFC 0012 sandbox architecture - #2942

Open

drew wants to merge 57 commits into

mainfrom

codex/1737-rfc12-supervisor-primitives

Commits on Sep 11, 2026

feat(isolation): add RFC 0012 backend contract
drew
committed
27fe09e
refactor(isolation): name the interface crate explicitly
drew
committed
f8173e9
feat(isolation): expose trusted host gateway
drew
committed
38dc5f9
docs(agents): inventory the MXC driver
drew
committed
f098913
feat(isolation): add mediated DNS transport
drew
committed
10deecc
fix(isolation): tighten interface error and digest contracts
drew
committed
175dc82
docs(isolation): remove unrelated driver inventory
drew
committed
06a3a8a
feat(isolation): define capability-free launch contract
drew
committed
f72ec9e
fix(isolation): seal confirmed boundary state
drew
committed
b24b847
fix(isolation): validate confirmation for external backend implementations
drew
committed
de5aff2
fix(isolation): clarify mediated DNS identity
drew
committed
8e485ac
refactor(isolation): generalize loopback connector
drew
committed
6123572
refactor(isolation): unify typed network mediation
drew
committed
406200d
feat(isolation): bind launches to sandbox sessions
drew
committed
cc95700
fix(mxc): initialize extended sandbox status
drew
committed
14c0249
feat(isolation): add boundary protocol and Linux primitives
drew
committed
64ee429
fix(isolation): harden signals and separate process status from transport
drew
committed
d741dcc
fix(isolation): validate remote confirmation through public contract
drew
committed
49ac1be
fix(isolation): validate wire state and propagate snapshot failures
drew
committed
95833ca
test(isolation): import owned agent specification explicitly
drew
committed
5c85427
docs(isolation): describe mediated DNS channel
drew
committed
5c5057f
fix(isolation): bound mediation attach without nested retries
drew
committed
48659ee
refactor(isolation): generalize loopback protocol
drew
committed
ff45e45
feat(isolation): add transport-neutral session authentication
drew
committed
c72daa9
refactor(isolation): separate sandbox backend protocol
drew
committed
9d0038f
fix(isolation): harden runtime boundary controls
drew
committed
1f20080
feat(isolation): add terminal boundary operation
drew
committed
d69352f
feat(isolation): split supervisor and sandbox runtimes
drew
committed
807f813
fix(sandbox): harden boundary isolation and lifecycle ownership
drew
committed
d597aa1
fix(sandbox): reject private root redirects and adopt typed errors
drew
committed
31f5a73
fix(sandbox): preserve accept thread ownership on musl
drew
committed
d3b921e
test(sandbox): isolate credential probes from filtered threads
drew
committed
2b26edc
fix(sandbox): return retained exec exit status to independent waiters
drew
committed
fe6aad8
fix(sandbox): bound network mediation and preserve socket authorization
drew
committed
7ec8eff
fix(sandbox): bound control admission and retire stale mediation
drew
committed
f59d403
ci(e2e): select migrated drivers per stack layer
drew
committed
e184f37
refactor(sandbox): implement loopback connector
drew
committed
c4a0eff
feat(isolation): authenticate the Sandbox Protocol
drew
committed
56a7f2a
feat(supervisor): rotate launch-scoped authentication
drew
committed
6a3d4a3
refactor(sandbox): consume dedicated backend crate
drew
committed
280cdef
test(sandbox): align topology session fixture
drew
committed
bf42b59
fix(sandbox): align projected bootstrap bundle
drew
committed
46fc310
fix(auth): validate refreshed credentials before rotation
drew
committed
31141e0
fix(sandbox): fail closed across supervisor disconnects
drew
committed
8189cf4
fix(isolation): repair rebased sandbox CI
drew
committed
2e25ae8
build(runtime): publish separate sandbox and supervisor images
drew
committed
97f26ac
feat(config): configure the sandbox runtime image
drew
committed
9b00cb6
fix(ci): validate sandbox binary linkage
drew
committed
0744154

Commits on Sep 12, 2026

refactor(isolation): use backend and runtime terminology
drew
committed
d3d92a7
refactor(sandbox): use a scratch runtime image
drew
committed
bda6fff
fix(ci): refresh schema and dependency policy
drew
committed
48f1083

Commits on Sep 13, 2026

fix(sandbox): bind reconnects to supervisor process
drew
committed
de2b42c

Commits on Sep 14, 2026

docs: align runtime split operational guidance
drew
committed
0835f69
chore(security): document Kubernetes runtime RBAC
drew
committed
d081b45
fix(isolation): enforce runtime lifecycle invariants
drew
committed
ccf31c5
feat(compute): identify sandbox start generations
drew
committed
707cf06
fix(server): restore sandbox launch sessions
drew
committed
e882ac0