Kronecker 9bb27f2e02 feat(sandbox): install profile seccomp with ABI and inheritance checks

2026-10-07 19:16:20 +08:00

..

artifact_mount_probe.c

feat(sandbox): snapshot artifacts through bounded file capabilities

2026-10-07 16:19:05 +08:00

cgroup_limits.c

feat(sandbox): gate target startup with verified task cgroups

2026-10-07 01:40:32 +08:00

identity_deny.c

feat(sandbox): lease task identities and drop initialization privileges

2026-10-07 18:22:58 +08:00

identity_inherit_probe.c

feat(sandbox): lease task identities and drop initialization privileges

2026-10-07 18:22:58 +08:00

input_bind_probe.c

feat(sandbox): bind readonly inputs through authenticated capabilities

2026-10-07 17:57:10 +08:00

namespace_probe.c

feat(sandbox): initialize isolated namespaces through gated helpers

2026-10-07 04:16:11 +08:00

outcome.exited.json

feat(sandbox): model execution outcomes and limit attribution

2026-10-06 01:00:04 +08:00

proc_dev_deny.c

feat(sandbox): restrict proc and devices in private roots

2026-10-07 13:21:37 +08:00

proc_dev_probe.c

feat(sandbox): restrict proc and devices in private roots

2026-10-07 13:21:37 +08:00

root_probe.c

feat(sandbox): build private read-only roots with pivot_root

2026-10-07 10:02:21 +08:00

seccomp_deny.c

feat(sandbox): install profile seccomp with ABI and inheritance checks

2026-10-07 19:16:20 +08:00

seccomp_inherit_probe.c

feat(sandbox): install profile seccomp with ABI and inheritance checks

2026-10-07 19:16:20 +08:00

spec.valid.json

feat(sandbox): validate bounded local execution specifications

2026-10-05 22:04:59 +08:00