0xkite
440e14658e
build: select compatible C++ runtime
2026-07-29 17:32:40 -04:00
0xkite
bf53ba4a48
feat(host): guide managed harness setup
...
Detect and bind operator-installed harnesses through explicit, digest-bound runtime policy. Keep macOS and Linux shipping lanes capability-aware and fail closed when isolation evidence is absent.
2026-07-29 16:15:04 -04:00
0xkite
b96bc76a53
fix(runtime): harden managed host launches
...
Run the Linux service in a delegated user and mount namespace and preserve precise owner-local launch diagnostics while keeping remote denials generic.
Accept validated v2 session plans without bypassing direct-write consent, and bind explicit native runtimes through the same managed launch and receipt boundary.
2026-07-29 12:47:23 -04:00
0xkite
d09032b30e
feat(supervisor): enforce native harness sessions
...
Bind runtime homes, mounts, and receipts to verified adapter context.\nReject malformed launch encodings before execution.
2026-07-28 11:00:17 -04:00
0xkite
82236d9501
feat(supervisor): generalize native harness launch
2026-07-28 00:16:04 -04:00
0xkite
67f0acf716
fix(control): implement authenticated health RPC
2026-07-22 13:26:48 -04:00
0xkite
e3e642f44a
docs: map validation evidence
2026-07-21 22:26:17 -04:00
0xkite
3e9cd0680c
test(journal): inject append failures
...
Exercise partial-write plus disk-full and sync failures to prove rollback, retry, and replay behavior.
2026-07-21 22:25:05 -04:00
0xkite
b4cede8830
perf(mcp): add validation benchmark
2026-07-21 22:24:49 -04:00
0xkite
6081eb8884
test(fuzz): cover untrusted parser boundaries
2026-07-21 22:23:45 -04:00
0xkite
8fecc3f142
fix(mcp): reject mismatched JSON-RPC IDs
2026-07-21 22:23:19 -04:00
0xkite
1bbe530fd5
test(linux): use runner-owned exec fixture
2026-07-20 21:08:57 -04:00
0xkite
07e5ac6e20
ci: prepare Ubuntu user namespaces
2026-07-20 20:33:16 -04:00
0xkite
ab65827506
ci: exercise privileged Linux containment
2026-07-20 19:57:18 -04:00
0xkite
55b0dc0725
ci: align macOS build with AppleClang
2026-07-20 19:06:08 -04:00
0xkite
c675c68935
ci: parallelize clang-tidy preflight
2026-07-20 18:50:45 -04:00
0xkite
12fbc3b222
fix(host): initialize CLI aggregate fields
2026-07-20 18:17:46 -04:00
0xkite
996c4273e4
ci: use libc++ for Linux C++23 builds
2026-07-20 18:00:44 -04:00
0xkite
c506da8906
ci: stabilize cross-platform preflight
2026-07-20 17:42:26 -04:00
0xkite
8f50e47816
feat(host): manage the gloved user service
2026-07-20 16:50:26 -04:00
0xkite
11d603a1cf
Add host setup and project enrollment workflow
2026-07-20 10:30:29 -04:00
0xkite
0fe581b028
Add bounded path exposure and retained apply controls
2026-07-20 08:59:38 -04:00
0xkite
176d032723
feat: expose managed session readiness boundary
2026-07-19 22:01:13 -04:00
0xkite
b1622dc566
Add Codex engineering workflow
2026-07-19 21:09:24 -04:00
0xkite
0dafbed1e8
Initial Glove sandbox baseline
2026-07-19 21:06:11 -04:00
