viyatb-oai c5eb33aed1 Harden managed proxy setup for sandboxed executions (#34641) ...

## What changed

- Make the generated Linux proxy socket directory readable inside restricted
  `bubblewrap` sandboxes so the proxy bridge can connect.
- Route `WS_PROXY` and `WSS_PROXY` through the Linux managed proxy bridge.
- Remove inherited proxy attribution tokens from unscoped executions while
  continuing to replace them with the current token for scoped executions.

## Testing

- Exercise `WSS_PROXY` routing with a minimal filesystem policy.
- Cover attribution-token removal and replacement during environment setup.

GitOrigin-RevId: 2f14ddb26baab0147a786bc354d93eb5aad059f3

2026-07-22 00:31:30 +00:00

..

credential_broker

feat(network-proxy): experimental local credential broker (#28034)

2026-06-24 13:21:16 -07:00

proxy

Launch managed network proxies on remote executors (#33906)

2026-07-17 21:20:14 +00:00

attribution_tests.rs

Remove the network proxy config wrapper (#31767)

2026-07-09 17:33:37 +01:00

attribution.rs

fix: attribut network requests to the exact exec on linux (#29697)

2026-07-06 14:51:34 -07:00

certs.rs

Honor CARGO_HTTP_CAINFO in managed proxy environments (#34478)

2026-07-21 07:12:28 +00:00

config.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

connect_policy.rs

Allow explicitly permitted loopback proxy targets (#34603)

2026-07-21 19:50:11 +00:00

credential_broker_tests.rs

feat(network-proxy): experimental local credential broker (#28034)

2026-06-24 13:21:16 -07:00

credential_broker.rs

feat(network-proxy): experimental local credential broker (#28034)

2026-06-24 13:21:16 -07:00

http_proxy.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

lib.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

mitm_hook.rs

Remove the network proxy config wrapper (#31767)

2026-07-09 17:33:37 +01:00

mitm_tests.rs

Remove the network proxy config wrapper (#31767)

2026-07-09 17:33:37 +01:00

mitm.rs

Allow explicitly permitted loopback proxy targets (#34603)

2026-07-21 19:50:11 +00:00

native_certs.rs

Honor startup custom CA bundles with managed MITM (#29014)

2026-06-22 14:16:48 -07:00

network_policy.rs

Remove the network proxy config wrapper (#31767)

2026-07-09 17:33:37 +01:00

policy.rs

fix(network-proxy): normalize network proxy host matching (#19995)

2026-04-28 15:50:00 -07:00

proxy.rs

Harden managed proxy setup for sandboxed executions (#34641)

2026-07-22 00:31:30 +00:00

reasons.rs

Wire MITM hooks into runtime enforcement (#20659)

2026-05-20 14:08:14 -07:00

remote_config_tests.rs

Add exec-server network policy callback types (#34620)

2026-07-21 21:54:31 +00:00

remote_config.rs

Add exec-server network policy callback types (#34620)

2026-07-21 21:54:31 +00:00

responses.rs

Wire MITM hooks into runtime enforcement (#20659)

2026-05-20 14:08:14 -07:00

runtime.rs

Launch managed network proxies on remote executors (#33906)

2026-07-17 21:20:14 +00:00

socks5.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

state.rs

Allow explicitly permitted loopback proxy targets (#34603)

2026-07-21 19:50:11 +00:00

upstream_tests.rs

Allow explicitly permitted loopback proxy targets (#34603)

2026-07-21 19:50:11 +00:00

upstream.rs

Allow explicitly permitted loopback proxy targets (#34603)

2026-07-21 19:50:11 +00:00

windows_proxy_ingress_tests.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

windows_proxy_ingress.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

windows_tcp_attribution_tests.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

windows_tcp_attribution.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00