0xkite
b96bc76a53
fix(runtime): harden managed host launches
...
Run the Linux service in a delegated user and mount namespace and preserve precise owner-local launch diagnostics while keeping remote denials generic.
Accept validated v2 session plans without bypassing direct-write consent, and bind explicit native runtimes through the same managed launch and receipt boundary.
2026-07-29 12:47:23 -04:00
0xkite
d09032b30e
feat(supervisor): enforce native harness sessions
...
Bind runtime homes, mounts, and receipts to verified adapter context.\nReject malformed launch encodings before execution.
2026-07-28 11:00:17 -04:00
0xkite
82236d9501
feat(supervisor): generalize native harness launch
2026-07-28 00:16:04 -04:00
0xkite
67f0acf716
fix(control): implement authenticated health RPC
2026-07-22 13:26:48 -04:00
0xkite
3e9cd0680c
test(journal): inject append failures
...
Exercise partial-write plus disk-full and sync failures to prove rollback, retry, and replay behavior.
2026-07-21 22:25:05 -04:00
0xkite
6081eb8884
test(fuzz): cover untrusted parser boundaries
2026-07-21 22:23:45 -04:00
0xkite
8fecc3f142
fix(mcp): reject mismatched JSON-RPC IDs
2026-07-21 22:23:19 -04:00
0xkite
1bbe530fd5
test(linux): use runner-owned exec fixture
2026-07-20 21:08:57 -04:00
0xkite
ab65827506
ci: exercise privileged Linux containment
2026-07-20 19:57:18 -04:00
0xkite
55b0dc0725
ci: align macOS build with AppleClang
2026-07-20 19:06:08 -04:00
0xkite
8f50e47816
feat(host): manage the gloved user service
2026-07-20 16:50:26 -04:00
0xkite
11d603a1cf
Add host setup and project enrollment workflow
2026-07-20 10:30:29 -04:00
0xkite
0fe581b028
Add bounded path exposure and retained apply controls
2026-07-20 08:59:38 -04:00
0xkite
176d032723
feat: expose managed session readiness boundary
2026-07-19 22:01:13 -04:00
0xkite
0dafbed1e8
Initial Glove sandbox baseline
2026-07-19 21:06:11 -04:00
