Commit Graph

8882 Commits

Author SHA1 Message Date
Michael Bolin
d327d4e7f2 Merge 0fbe89feee into sapling-pr-archive-bolinfest 2026-03-04 01:58:23 -08:00
Michael Bolin
0fbe89feee linux-sandbox: honor split filesystem policies in bwrap 2026-03-04 01:58:13 -08:00
Michael Bolin
304b726043 protocol: keep root carveouts sandboxed 2026-03-04 01:56:05 -08:00
Michael Bolin
dd05b14d5b merge commit for archive created by Sapling 2026-03-04 01:47:06 -08:00
Michael Bolin
cfa19e21f5 sandboxing: preserve denied paths when widening permissions 2026-03-04 01:46:54 -08:00
Michael Bolin
6790e7fa4a linux-sandbox: plumb split sandbox policies through helper 2026-03-04 01:44:48 -08:00
Michael Bolin
ed7a864c46 seatbelt: honor split filesystem sandbox policies 2026-03-04 01:44:48 -08:00
Michael Bolin
1434bba73c safety: honor filesystem policy carveouts in apply_patch 2026-03-04 01:44:48 -08:00
Michael Bolin
fab10a6b54 artifacts: honor filesystem policy carveouts in path checks 2026-03-04 01:44:48 -08:00
Michael Bolin
2adc12ed7c protocol: derive effective file access from filesystem policies 2026-03-04 01:44:48 -08:00
Michael Bolin
6c47eda8a4 sandboxing: plumb split sandbox policies through runtime 2026-03-04 01:44:48 -08:00
Michael Bolin
b7befa4329 Merge ae14f980c4 into sapling-pr-archive-bolinfest 2026-03-04 01:38:24 -08:00
Michael Bolin
ae14f980c4 linux-sandbox: plumb split sandbox policies through helper 2026-03-04 01:38:11 -08:00
Michael Bolin
a05294ed6a Merge c3b03c7861 into sapling-pr-archive-bolinfest 2026-03-04 01:24:31 -08:00
Michael Bolin
c3b03c7861 seatbelt: honor split filesystem sandbox policies 2026-03-04 01:24:22 -08:00
Michael Bolin
9fef0efae0 merge commit for archive created by Sapling 2026-03-04 01:10:24 -08:00
Michael Bolin
7abd70178a config: add v3 filesystem permission profiles 2026-03-04 01:10:16 -08:00
Michael Bolin
3244ffd774 safety: honor filesystem policy carveouts in apply_patch 2026-03-04 01:10:16 -08:00
Michael Bolin
65344a607a artifacts: honor filesystem policy carveouts in path checks 2026-03-04 01:10:16 -08:00
Michael Bolin
03b0581a3a protocol: derive effective file access from filesystem policies 2026-03-04 01:10:16 -08:00
Michael Bolin
6e5325c2d3 sandboxing: plumb split sandbox policies through runtime 2026-03-04 01:10:16 -08:00
Michael Bolin
60394eddc8 merge commit for archive created by Sapling 2026-03-04 01:08:18 -08:00
Michael Bolin
a06222f74c safety: honor filesystem policy carveouts in apply_patch 2026-03-04 01:07:23 -08:00
Michael Bolin
9634623df2 artifacts: honor filesystem policy carveouts in path checks 2026-03-04 01:07:23 -08:00
Michael Bolin
32620a9bdd protocol: derive effective file access from filesystem policies 2026-03-04 01:07:23 -08:00
Michael Bolin
582451849f sandboxing: plumb split sandbox policies through runtime 2026-03-04 01:07:23 -08:00
Michael Bolin
15b518e8ec config: add v3 filesystem permission profiles 2026-03-04 01:07:23 -08:00
Michael Bolin
090e1f1517 Merge d7e45d6e8c into sapling-pr-archive-bolinfest 2026-03-04 00:57:10 -08:00
Michael Bolin
d7e45d6e8c safety: honor filesystem policy carveouts in apply_patch 2026-03-04 00:57:01 -08:00
Michael Bolin
9a0a3bbcf8 merge commit for archive created by Sapling 2026-03-04 00:51:14 -08:00
Michael Bolin
6c55884b93 artifacts: honor filesystem policy carveouts in path checks 2026-03-04 00:50:57 -08:00
Michael Bolin
36d7f4656a protocol: derive effective file access from filesystem policies 2026-03-04 00:50:57 -08:00
Michael Bolin
b34529d0c5 sandboxing: plumb split sandbox policies through runtime 2026-03-04 00:50:57 -08:00
Michael Bolin
236acdbe64 Merge 3767b44330 into sapling-pr-archive-bolinfest 2026-03-04 00:38:45 -08:00
Michael Bolin
3767b44330 protocol: derive effective file access from filesystem policies 2026-03-04 00:38:38 -08:00
Michael Bolin
eb8967ef36 Merge 3d8f475bce into sapling-pr-archive-bolinfest 2026-03-04 00:32:52 -08:00
Michael Bolin
3d8f475bce sandboxing: plumb split sandbox policies through runtime 2026-03-04 00:32:38 -08:00
Michael Bolin
d8e69a59fe Merge eff339a53f into sapling-pr-archive-bolinfest 2026-03-04 00:02:53 -08:00
Michael Bolin
eff339a53f config: add v3 filesystem permission profiles 2026-03-04 00:02:42 -08:00
Michael Bolin
0e9611d21f merge commit for archive created by Sapling 2026-03-03 23:13:25 -08:00
Michael Bolin
65be9c09bf refactor: route zsh-fork through unified exec 2026-03-03 23:13:16 -08:00
Michael Bolin
75c8e89175 Merge 4b7d0681bd into sapling-pr-archive-bolinfest 2026-03-03 23:12:21 -08:00
Michael Bolin
4b7d0681bd codex: address PR review feedback (#13434) 2026-03-03 23:12:17 -08:00
Michael Bolin
dff8820645 Merge 57adb8739f into sapling-pr-archive-bolinfest 2026-03-03 22:55:00 -08:00
Michael Bolin
57adb8739f config: add v3 filesystem permission profiles 2026-03-03 22:54:50 -08:00
Michael Bolin
ebd7099a07 merge commit for archive created by Sapling 2026-03-03 22:42:22 -08:00
Michael Bolin
77278fc5bd refactor: route zsh-fork through unified exec 2026-03-03 22:41:58 -08:00
Michael Bolin
b66bb7e845 refactor: prepare unified exec for zsh-fork backend 2026-03-03 22:24:38 -08:00
Michael Bolin
6a4bbf2824 Merge 6c8b28d344 into sapling-pr-archive-bolinfest 2026-03-03 21:16:05 -08:00
Michael Bolin
6c8b28d344 core: box thread spawn wrappers to reduce stack pressure 2026-03-03 21:15:48 -08:00