2 commits

Author	SHA1	Message	Date
trvon	22e7c2de50	fix(onboarding): harden setup plan ... Derive runtime templates before setup validation so reruns preserve existing policy. Redact policy JSON by default to avoid exposing owner-local details.	2026-08-03 09:19:50 -04:00
0xkite	497e703e70	feat(runtime): manage sandboxed agent sessions ... Keep credentials and network access behind authenticated, audited brokers while binding launch adapters, immutable closures, recovery identities, receipts, and cleanup to the approved plan. Add Apple Container and Linux release lanes without weakening the outer sandbox.	2026-07-30 08:49:42 -04:00