Kronecker 9a2b1c071f feat(sandbox): snapshot artifacts through bounded file capabilities

2026-10-07 16:19:05 +08:00

..

fixtures

feat(sandbox): snapshot artifacts through bounded file capabilities

2026-10-07 16:19:05 +08:00

support

feat(sandbox): build private read-only roots with pivot_root

2026-10-07 10:02:21 +08:00

artifacts_vm.rs

feat(sandbox): snapshot artifacts through bounded file capabilities

2026-10-07 16:19:05 +08:00

blocked_vm.rs

feat(sandbox): initialize isolated namespaces through gated helpers

2026-10-07 04:16:11 +08:00

launcher_control.rs

test(sandbox): allow launcher checks in independent VMs

2026-10-07 01:09:50 +08:00

launcher_lifecycle.rs

feat(sandbox): enforce launcher lifecycle ordering

2026-10-06 11:02:55 +08:00

namespace_vm.rs

feat(sandbox): initialize isolated namespaces through gated helpers

2026-10-07 04:16:11 +08:00

outcome_contract.rs

feat(sandbox): model execution outcomes and limit attribution

2026-10-06 01:00:04 +08:00

proc_dev_vm.rs

feat(sandbox): restrict proc and devices in private roots

2026-10-07 13:21:37 +08:00

refuse_execution.rs

chore(workspace): bootstrap platform, judge and frontend

2026-10-04 15:46:49 +08:00

root_vm.rs

feat(sandbox): build private read-only roots with pivot_root

2026-10-07 10:02:21 +08:00

runtime_cli.rs

feat(sandbox): define runtime policy and preflight refusals

2026-10-06 03:58:19 +08:00

runtime_policy.rs

feat(sandbox): define runtime policy and preflight refusals

2026-10-06 03:58:19 +08:00

spec_validation.rs

feat(sandbox): validate bounded local execution specifications

2026-10-05 22:04:59 +08:00

validate_cli.rs

feat(sandbox): validate bounded local execution specifications

2026-10-05 22:04:59 +08:00