Michael Bolin
|
85b3f50e37
|
merge commit for archive created by Sapling
|
2026-03-06 13:07:04 -08:00 |
|
Michael Bolin
|
1a12cb5f3e
|
config: add v3 filesystem permission profiles
|
2026-03-06 13:06:57 -08:00 |
|
Michael Bolin
|
964fa6465a
|
merge commit for archive created by Sapling
|
2026-03-06 13:03:59 -08:00 |
|
Michael Bolin
|
05e4d082da
|
linux-sandbox: honor split filesystem policies in bwrap
|
2026-03-06 13:03:45 -08:00 |
|
Michael Bolin
|
b3a21ce009
|
protocol: keep root carveouts sandboxed
|
2026-03-06 13:03:45 -08:00 |
|
Michael Bolin
|
a9702e8e65
|
sandboxing: preserve denied paths when widening permissions
|
2026-03-06 13:03:45 -08:00 |
|
Michael Bolin
|
7c42582572
|
linux-sandbox: plumb split sandbox policies through helper
|
2026-03-06 13:03:45 -08:00 |
|
Michael Bolin
|
8451b4754d
|
seatbelt: honor split filesystem sandbox policies
|
2026-03-06 13:03:45 -08:00 |
|
Michael Bolin
|
b1aa31b0ff
|
safety: honor filesystem policy carveouts in apply_patch
|
2026-03-06 13:03:45 -08:00 |
|
Michael Bolin
|
36eee0e95b
|
protocol: derive effective file access from filesystem policies
|
2026-03-06 13:03:45 -08:00 |
|
Michael Bolin
|
b4e9baaaff
|
sandboxing: plumb split sandbox policies through runtime
|
2026-03-06 13:03:45 -08:00 |
|
Michael Bolin
|
929eeaf2c9
|
config: add v3 filesystem permission profiles
|
2026-03-06 13:03:45 -08:00 |
|
Michael Bolin
|
f3af2e32b0
|
Merge bfc71971a8 into sapling-pr-archive-bolinfest
|
2026-03-06 12:27:06 -08:00 |
|
Michael Bolin
|
bfc71971a8
|
linux-sandbox: honor split filesystem policies in bwrap
|
2026-03-06 12:26:59 -08:00 |
|
Michael Bolin
|
a8119dae5f
|
protocol: keep root carveouts sandboxed
|
2026-03-06 12:26:59 -08:00 |
|
Michael Bolin
|
7c35d14add
|
sandboxing: preserve denied paths when widening permissions
|
2026-03-06 12:26:59 -08:00 |
|
Michael Bolin
|
082fff3668
|
linux-sandbox: plumb split sandbox policies through helper
|
2026-03-06 12:26:59 -08:00 |
|
Michael Bolin
|
f0f11deed7
|
seatbelt: honor split filesystem sandbox policies
|
2026-03-06 12:26:59 -08:00 |
|
Michael Bolin
|
e919dbaa59
|
safety: honor filesystem policy carveouts in apply_patch
|
2026-03-06 12:26:59 -08:00 |
|
Michael Bolin
|
ebe6f772ea
|
protocol: derive effective file access from filesystem policies
|
2026-03-06 12:26:59 -08:00 |
|
Michael Bolin
|
0e7b5f0102
|
sandboxing: plumb split sandbox policies through runtime
|
2026-03-06 12:26:59 -08:00 |
|
Michael Bolin
|
1fc282c77b
|
merge commit for archive created by Sapling
|
2026-03-06 12:19:12 -08:00 |
|
Michael Bolin
|
b91f578647
|
linux-sandbox: honor split filesystem policies in bwrap
|
2026-03-06 12:18:41 -08:00 |
|
Michael Bolin
|
92f5956964
|
protocol: keep root carveouts sandboxed
|
2026-03-06 12:18:41 -08:00 |
|
Michael Bolin
|
b54d693aac
|
sandboxing: preserve denied paths when widening permissions
|
2026-03-06 12:18:41 -08:00 |
|
Michael Bolin
|
e08629c93f
|
linux-sandbox: plumb split sandbox policies through helper
|
2026-03-06 12:18:40 -08:00 |
|
Michael Bolin
|
4a8859f768
|
seatbelt: honor split filesystem sandbox policies
|
2026-03-06 12:18:40 -08:00 |
|
Michael Bolin
|
da1d510cb9
|
safety: honor filesystem policy carveouts in apply_patch
|
2026-03-06 12:18:40 -08:00 |
|
Michael Bolin
|
e915ef6011
|
protocol: derive effective file access from filesystem policies
|
2026-03-06 12:18:40 -08:00 |
|
Michael Bolin
|
38dad30b3e
|
sandboxing: plumb split sandbox policies through runtime
|
2026-03-06 12:18:40 -08:00 |
|
Michael Bolin
|
3eb810e045
|
config: add v3 filesystem permission profiles
|
2026-03-06 12:12:48 -08:00 |
|
Michael Bolin
|
7a5aff4972
|
fix bazel build (#13787)
I believe this broke in https://github.com/openai/codex/pull/13772.
|
2026-03-06 12:12:20 -08:00 |
|
Michael Bolin
|
eb3ffb3408
|
merge commit for archive created by Sapling
|
2026-03-06 12:03:03 -08:00 |
|
Michael Bolin
|
e1a0e6a0f9
|
linux-sandbox: honor split filesystem policies in bwrap
|
2026-03-06 11:58:25 -08:00 |
|
Michael Bolin
|
33c497357e
|
protocol: keep root carveouts sandboxed
|
2026-03-06 11:58:25 -08:00 |
|
Michael Bolin
|
89679ab7d9
|
sandboxing: preserve denied paths when widening permissions
|
2026-03-06 11:58:25 -08:00 |
|
Michael Bolin
|
6539a36b0e
|
linux-sandbox: plumb split sandbox policies through helper
|
2026-03-06 11:58:25 -08:00 |
|
Michael Bolin
|
9f2ff9fc4f
|
seatbelt: honor split filesystem sandbox policies
|
2026-03-06 11:58:25 -08:00 |
|
Michael Bolin
|
b9614d65cb
|
safety: honor filesystem policy carveouts in apply_patch
|
2026-03-06 11:58:25 -08:00 |
|
Michael Bolin
|
051a925654
|
protocol: derive effective file access from filesystem policies
|
2026-03-06 11:58:25 -08:00 |
|
Michael Bolin
|
609036a872
|
sandboxing: plumb split sandbox policies through runtime
|
2026-03-06 11:58:25 -08:00 |
|
Michael Bolin
|
974327befd
|
config: add v3 filesystem permission profiles
|
2026-03-06 11:58:25 -08:00 |
|
Michael Bolin
|
275e62fcc7
|
Merge 4151578f30 into sapling-pr-archive-bolinfest
|
2026-03-06 11:58:22 -08:00 |
|
Michael Bolin
|
4151578f30
|
fix bazel build
|
2026-03-06 11:58:15 -08:00 |
|
Michael Bolin
|
488875f24d
|
fix: move unit tests in codex-rs/core/src/codex.rs into their own file (#13783)
This is analogous to https://github.com/openai/codex/pull/13780.
|
2026-03-06 11:56:49 -08:00 |
|
Michael Bolin
|
28ac254700
|
merge commit for archive created by Sapling
|
2026-03-06 11:51:37 -08:00 |
|
Michael Bolin
|
5cd0fd920a
|
config: add v3 filesystem permission profiles
|
2026-03-06 11:51:31 -08:00 |
|
Michael Bolin
|
e0cd259424
|
merge commit for archive created by Sapling
|
2026-03-06 11:35:27 -08:00 |
|
Michael Bolin
|
656480dbd9
|
Merge 177d7b09d9 into sapling-pr-archive-bolinfest
|
2026-03-06 11:28:29 -08:00 |
|
Michael Bolin
|
177d7b09d9
|
fix: move unit tests in codex-rs/core/src/codex.rs into their own file
|
2026-03-06 11:28:18 -08:00 |
|