4 commits

Author	SHA1	Message	Date
0xkite	3f3e219cf8	feat(linux): broker audited agent egress ... Keep agents in a route-less network namespace and pass only private-loopback connections over an inherited Unix descriptor channel. The host relay targets the per-run authenticated proxy, preserving exact allowlists and audit evidence without exposing host networking.	2026-07-29 17:33:13 -04:00
0xkite	d09032b30e	feat(supervisor): enforce native harness sessions ... Bind runtime homes, mounts, and receipts to verified adapter context.\nReject malformed launch encodings before execution.	2026-07-28 11:00:17 -04:00
0xkite	1bbe530fd5	test(linux): use runner-owned exec fixture	2026-07-20 21:08:57 -04:00
0xkite	0dafbed1e8	Initial Glove sandbox baseline	2026-07-19 21:06:11 -04:00