Michael Bolin
|
d327d4e7f2
|
Merge 0fbe89feee into sapling-pr-archive-bolinfest
|
2026-03-04 01:58:23 -08:00 |
|
Michael Bolin
|
0fbe89feee
|
linux-sandbox: honor split filesystem policies in bwrap
|
2026-03-04 01:58:13 -08:00 |
|
Michael Bolin
|
304b726043
|
protocol: keep root carveouts sandboxed
|
2026-03-04 01:56:05 -08:00 |
|
Michael Bolin
|
dd05b14d5b
|
merge commit for archive created by Sapling
|
2026-03-04 01:47:06 -08:00 |
|
Michael Bolin
|
cfa19e21f5
|
sandboxing: preserve denied paths when widening permissions
|
2026-03-04 01:46:54 -08:00 |
|
Michael Bolin
|
6790e7fa4a
|
linux-sandbox: plumb split sandbox policies through helper
|
2026-03-04 01:44:48 -08:00 |
|
Michael Bolin
|
ed7a864c46
|
seatbelt: honor split filesystem sandbox policies
|
2026-03-04 01:44:48 -08:00 |
|
Michael Bolin
|
1434bba73c
|
safety: honor filesystem policy carveouts in apply_patch
|
2026-03-04 01:44:48 -08:00 |
|
Michael Bolin
|
fab10a6b54
|
artifacts: honor filesystem policy carveouts in path checks
|
2026-03-04 01:44:48 -08:00 |
|
Michael Bolin
|
2adc12ed7c
|
protocol: derive effective file access from filesystem policies
|
2026-03-04 01:44:48 -08:00 |
|
Michael Bolin
|
6c47eda8a4
|
sandboxing: plumb split sandbox policies through runtime
|
2026-03-04 01:44:48 -08:00 |
|
Michael Bolin
|
b7befa4329
|
Merge ae14f980c4 into sapling-pr-archive-bolinfest
|
2026-03-04 01:38:24 -08:00 |
|
Michael Bolin
|
ae14f980c4
|
linux-sandbox: plumb split sandbox policies through helper
|
2026-03-04 01:38:11 -08:00 |
|
Michael Bolin
|
a05294ed6a
|
Merge c3b03c7861 into sapling-pr-archive-bolinfest
|
2026-03-04 01:24:31 -08:00 |
|
Michael Bolin
|
c3b03c7861
|
seatbelt: honor split filesystem sandbox policies
|
2026-03-04 01:24:22 -08:00 |
|
Michael Bolin
|
9fef0efae0
|
merge commit for archive created by Sapling
|
2026-03-04 01:10:24 -08:00 |
|
Michael Bolin
|
7abd70178a
|
config: add v3 filesystem permission profiles
|
2026-03-04 01:10:16 -08:00 |
|
Michael Bolin
|
3244ffd774
|
safety: honor filesystem policy carveouts in apply_patch
|
2026-03-04 01:10:16 -08:00 |
|
Michael Bolin
|
65344a607a
|
artifacts: honor filesystem policy carveouts in path checks
|
2026-03-04 01:10:16 -08:00 |
|
Michael Bolin
|
03b0581a3a
|
protocol: derive effective file access from filesystem policies
|
2026-03-04 01:10:16 -08:00 |
|
Michael Bolin
|
6e5325c2d3
|
sandboxing: plumb split sandbox policies through runtime
|
2026-03-04 01:10:16 -08:00 |
|
Michael Bolin
|
60394eddc8
|
merge commit for archive created by Sapling
|
2026-03-04 01:08:18 -08:00 |
|
Michael Bolin
|
a06222f74c
|
safety: honor filesystem policy carveouts in apply_patch
|
2026-03-04 01:07:23 -08:00 |
|
Michael Bolin
|
9634623df2
|
artifacts: honor filesystem policy carveouts in path checks
|
2026-03-04 01:07:23 -08:00 |
|
Michael Bolin
|
32620a9bdd
|
protocol: derive effective file access from filesystem policies
|
2026-03-04 01:07:23 -08:00 |
|
Michael Bolin
|
582451849f
|
sandboxing: plumb split sandbox policies through runtime
|
2026-03-04 01:07:23 -08:00 |
|
Michael Bolin
|
15b518e8ec
|
config: add v3 filesystem permission profiles
|
2026-03-04 01:07:23 -08:00 |
|
Michael Bolin
|
090e1f1517
|
Merge d7e45d6e8c into sapling-pr-archive-bolinfest
|
2026-03-04 00:57:10 -08:00 |
|
Michael Bolin
|
d7e45d6e8c
|
safety: honor filesystem policy carveouts in apply_patch
|
2026-03-04 00:57:01 -08:00 |
|
Michael Bolin
|
9a0a3bbcf8
|
merge commit for archive created by Sapling
|
2026-03-04 00:51:14 -08:00 |
|
Michael Bolin
|
6c55884b93
|
artifacts: honor filesystem policy carveouts in path checks
|
2026-03-04 00:50:57 -08:00 |
|
Michael Bolin
|
36d7f4656a
|
protocol: derive effective file access from filesystem policies
|
2026-03-04 00:50:57 -08:00 |
|
Michael Bolin
|
b34529d0c5
|
sandboxing: plumb split sandbox policies through runtime
|
2026-03-04 00:50:57 -08:00 |
|
Michael Bolin
|
236acdbe64
|
Merge 3767b44330 into sapling-pr-archive-bolinfest
|
2026-03-04 00:38:45 -08:00 |
|
Michael Bolin
|
3767b44330
|
protocol: derive effective file access from filesystem policies
|
2026-03-04 00:38:38 -08:00 |
|
Michael Bolin
|
eb8967ef36
|
Merge 3d8f475bce into sapling-pr-archive-bolinfest
|
2026-03-04 00:32:52 -08:00 |
|
Michael Bolin
|
3d8f475bce
|
sandboxing: plumb split sandbox policies through runtime
|
2026-03-04 00:32:38 -08:00 |
|
Michael Bolin
|
d8e69a59fe
|
Merge eff339a53f into sapling-pr-archive-bolinfest
|
2026-03-04 00:02:53 -08:00 |
|
Michael Bolin
|
eff339a53f
|
config: add v3 filesystem permission profiles
|
2026-03-04 00:02:42 -08:00 |
|
Michael Bolin
|
0e9611d21f
|
merge commit for archive created by Sapling
|
2026-03-03 23:13:25 -08:00 |
|
Michael Bolin
|
65be9c09bf
|
refactor: route zsh-fork through unified exec
|
2026-03-03 23:13:16 -08:00 |
|
Michael Bolin
|
75c8e89175
|
Merge 4b7d0681bd into sapling-pr-archive-bolinfest
|
2026-03-03 23:12:21 -08:00 |
|
Michael Bolin
|
4b7d0681bd
|
codex: address PR review feedback (#13434)
|
2026-03-03 23:12:17 -08:00 |
|
Michael Bolin
|
dff8820645
|
Merge 57adb8739f into sapling-pr-archive-bolinfest
|
2026-03-03 22:55:00 -08:00 |
|
Michael Bolin
|
57adb8739f
|
config: add v3 filesystem permission profiles
|
2026-03-03 22:54:50 -08:00 |
|
Michael Bolin
|
ebd7099a07
|
merge commit for archive created by Sapling
|
2026-03-03 22:42:22 -08:00 |
|
Michael Bolin
|
77278fc5bd
|
refactor: route zsh-fork through unified exec
|
2026-03-03 22:41:58 -08:00 |
|
Michael Bolin
|
b66bb7e845
|
refactor: prepare unified exec for zsh-fork backend
|
2026-03-03 22:24:38 -08:00 |
|
Michael Bolin
|
6a4bbf2824
|
Merge 6c8b28d344 into sapling-pr-archive-bolinfest
|
2026-03-03 21:16:05 -08:00 |
|
Michael Bolin
|
6c8b28d344
|
core: box thread spawn wrappers to reduce stack pressure
|
2026-03-03 21:15:48 -08:00 |
|