5 commits

Author	SHA1	Message	Date
0xkite	b96bc76a53	fix(runtime): harden managed host launches ... Run the Linux service in a delegated user and mount namespace and preserve precise owner-local launch diagnostics while keeping remote denials generic. Accept validated v2 session plans without bypassing direct-write consent, and bind explicit native runtimes through the same managed launch and receipt boundary.	2026-07-29 12:47:23 -04:00
0xkite	6081eb8884	test(fuzz): cover untrusted parser boundaries	2026-07-21 22:23:45 -04:00
0xkite	8fecc3f142	fix(mcp): reject mismatched JSON-RPC IDs	2026-07-21 22:23:19 -04:00
0xkite	ab65827506	ci: exercise privileged Linux containment	2026-07-20 19:57:18 -04:00
0xkite	0dafbed1e8	Initial Glove sandbox baseline	2026-07-19 21:06:11 -04:00