Kronecker 057c02f39d test(sandbox): verify complete native and compiler task workflows

2026-10-08 07:12:11 +08:00

..

fixtures

test(sandbox): verify complete native and compiler task workflows

2026-10-08 07:12:11 +08:00

support

feat(sandbox): build private read-only roots with pivot_root

2026-10-07 10:02:21 +08:00

artifacts_vm.rs

feat(sandbox): snapshot artifacts through bounded file capabilities

2026-10-07 16:19:05 +08:00

blocked_vm.rs

feat(sandbox): initialize isolated namespaces through gated helpers

2026-10-07 04:16:11 +08:00

execution_vm.rs

feat(sandbox): supervise bounded root execution and final teardown

2026-10-08 04:38:08 +08:00

identity_vm.rs

feat(sandbox): lease task identities and drop initialization privileges

2026-10-07 18:22:58 +08:00

inputs_vm.rs

feat(sandbox): bind readonly inputs through authenticated capabilities

2026-10-07 17:57:10 +08:00

launcher_control.rs

test(sandbox): allow launcher checks in independent VMs

2026-10-07 01:09:50 +08:00

launcher_lifecycle.rs

feat(sandbox): enforce launcher lifecycle ordering

2026-10-06 11:02:55 +08:00

namespace_vm.rs

feat(sandbox): initialize isolated namespaces through gated helpers

2026-10-07 04:16:11 +08:00

normal_vm.rs

test(sandbox): verify complete native and compiler task workflows

2026-10-08 07:12:11 +08:00

outcome_contract.rs

feat(sandbox): supervise bounded root execution and final teardown

2026-10-08 04:38:08 +08:00

proc_dev_vm.rs

feat(sandbox): restrict proc and devices in private roots

2026-10-07 13:21:37 +08:00

refuse_execution.rs

chore(workspace): bootstrap platform, judge and frontend

2026-10-04 15:46:49 +08:00

resources_vm.rs

feat(sandbox): supervise aggregate CPU and monotonic wall budgets

2026-10-08 01:24:56 +08:00

rlimits_vm.rs

feat(sandbox): apply finite inherited resource limits before identity

2026-10-08 01:37:06 +08:00

rollback_vm.rs

fix(sandbox): unwind every prepared owner before releasing resources

2026-10-08 04:49:02 +08:00

root_vm.rs

feat(sandbox): build private read-only roots with pivot_root

2026-10-07 10:02:21 +08:00

runtime_cli.rs

feat(sandbox): define runtime policy and preflight refusals

2026-10-06 03:58:19 +08:00

runtime_policy.rs

feat(sandbox): lease task identities and drop initialization privileges

2026-10-07 18:22:58 +08:00

seccomp_capabilities_vm.rs

feat(sandbox): restrict dangerous syscalls and verify GNU language profiles

2026-10-07 19:31:24 +08:00

seccomp_vm.rs

feat(sandbox): install profile seccomp with ABI and inheritance checks

2026-10-07 19:16:20 +08:00

spec_validation.rs

feat(sandbox): restrict dangerous syscalls and verify GNU language profiles

2026-10-07 19:31:24 +08:00

stdio_vm.rs

feat(sandbox): transport bounded stdio and close inherited user descriptors

2026-10-07 22:49:25 +08:00

tree_vm.rs

feat(sandbox): reap namespace descendants and cancel via init lifecycle

2026-10-07 22:28:13 +08:00

validate_cli.rs

feat(sandbox): validate bounded local execution specifications

2026-10-05 22:04:59 +08:00