Kronecker 0f68eb5fb0 feat(sandbox): build private read-only roots with pivot_root

2026-10-07 10:02:21 +08:00

..

isolation

feat(sandbox): build private read-only roots with pivot_root

2026-10-07 10:02:21 +08:00

launcher

feat(sandbox): build private read-only roots with pivot_root

2026-10-07 10:02:21 +08:00

cgroup.rs

feat(sandbox): build private read-only roots with pivot_root

2026-10-07 10:02:21 +08:00

lib.rs

feat(sandbox): initialize isolated namespaces through gated helpers

2026-10-07 04:16:11 +08:00

main.rs

feat(sandbox): build private read-only roots with pivot_root

2026-10-07 10:02:21 +08:00

outcome.rs

feat(sandbox): model execution outcomes and limit attribution

2026-10-06 01:00:04 +08:00

probe.rs

feat(sandbox): define runtime policy and preflight refusals

2026-10-06 03:58:19 +08:00

runtime.rs

feat(sandbox): define runtime policy and preflight refusals

2026-10-06 03:58:19 +08:00

spec.rs

feat(sandbox): validate bounded local execution specifications

2026-10-05 22:04:59 +08:00