KF-OnlineJudge

fixtures

feat(worker): inject engine port for authenticated sandbox execution

2026-10-08 17:28:26 +08:00

support

feat(sandbox): build private read-only roots with pivot_root

2026-10-07 10:02:21 +08:00

artifacts_vm.rs

feat(sandbox): snapshot artifacts through bounded file capabilities

2026-10-07 16:19:05 +08:00

blocked_vm.rs

feat(sandbox): initialize isolated namespaces through gated helpers

2026-10-07 04:16:11 +08:00

execution_vm.rs

feat(sandbox): supervise bounded root execution and final teardown

2026-10-08 04:38:08 +08:00

identity_vm.rs

test(sandbox): verify repeated restart and failed capture lifecycle

2026-10-08 13:52:01 +08:00

inputs_vm.rs

feat(sandbox): bind readonly inputs through authenticated capabilities

2026-10-07 17:57:10 +08:00

isolation_files_vm.rs

test(sandbox): verify complete user filesystem and descriptor boundaries

2026-10-08 10:12:49 +08:00

isolation_matrix_vm.rs

test(sandbox): validate full isolation against live peer tasks

2026-10-08 10:27:32 +08:00

launcher_control.rs

test(sandbox): allow launcher checks in independent VMs

2026-10-07 01:09:50 +08:00

launcher_lifecycle.rs

feat(sandbox): enforce launcher lifecycle ordering

2026-10-06 11:02:55 +08:00

managed_cpu_vm.rs

feat(sandbox): bind managed requests to pinned runtime identities

2026-10-09 17:49:30 +08:00

managed_profiles.rs

feat(sandbox): route pinned runtimes through one bounded factory

2026-10-09 18:50:10 +08:00

managed_registry_vm.rs

feat(sandbox): route pinned runtimes through one bounded factory

2026-10-09 18:50:10 +08:00

managed_runtime_vm.rs

test(sandbox): verify managed file quotas and live wall deadlines

2026-10-09 18:12:37 +08:00

namespace_vm.rs

feat(sandbox): initialize isolated namespaces through gated helpers

2026-10-07 04:16:11 +08:00

normal_vm.rs

test(sandbox): verify complete native and compiler task workflows

2026-10-08 07:12:11 +08:00

outcome_contract.rs

feat(sandbox): supervise bounded root execution and final teardown

2026-10-08 04:38:08 +08:00

pipeline_vm.rs

feat(worker): consume durable jobs with fenced execution and recovery

2026-10-09 08:38:20 +08:00

proc_dev_vm.rs

feat(sandbox): restrict proc and devices in private roots

2026-10-07 13:21:37 +08:00

production_vm.rs

feat(sandbox): enable verified ordinary execution entry

2026-10-08 17:00:13 +08:00

refuse_execution.rs

feat(sandbox): enable verified ordinary execution entry

2026-10-08 17:00:13 +08:00

resource_execution_vm.rs

feat(sandbox): enforce trusted process event budgets and verify resource limits

2026-10-08 07:19:01 +08:00

resources_vm.rs

feat(sandbox): supervise aggregate CPU and monotonic wall budgets

2026-10-08 01:24:56 +08:00

restart_vm.rs

test(sandbox): verify repeated restart and failed capture lifecycle

2026-10-08 13:52:01 +08:00

rlimits_vm.rs

feat(sandbox): apply finite inherited resource limits before identity

2026-10-08 01:37:06 +08:00

rollback_vm.rs

fix(sandbox): unwind every prepared owner before releasing resources

2026-10-08 04:49:02 +08:00

root_vm.rs

feat(sandbox): build private read-only roots with pivot_root

2026-10-07 10:02:21 +08:00

runtime_cli.rs

feat(sandbox): enable verified ordinary execution entry

2026-10-08 17:00:13 +08:00

runtime_policy.rs

feat(sandbox): enable verified ordinary execution entry

2026-10-08 17:00:13 +08:00

seccomp_capabilities_vm.rs

feat(sandbox): restrict dangerous syscalls and verify GNU language profiles

2026-10-07 19:31:24 +08:00

seccomp_vm.rs

feat(sandbox): install profile seccomp with ABI and inheritance checks

2026-10-07 19:16:20 +08:00

spec_validation.rs

feat(sandbox): restrict dangerous syscalls and verify GNU language profiles

2026-10-07 19:31:24 +08:00

stdio_vm.rs

feat(sandbox): transport bounded stdio and close inherited user descriptors

2026-10-07 22:49:25 +08:00

tree_vm.rs

feat(sandbox): reap namespace descendants and cancel via init lifecycle

2026-10-07 22:28:13 +08:00

validate_cli.rs

feat(sandbox): validate bounded local execution specifications

2026-10-05 22:04:59 +08:00

worker_vm.rs

feat(worker): inject engine port for authenticated sandbox execution

2026-10-08 17:28:26 +08:00