Commit graph

  • 7b09022114
    Merge pull request #30 from 0xkite/fix/wf227-cgroup-startup main 0xkite 2026-09-01 18:05:53 -04:00
  • 56e3cbd638
    fix(linux): support delegated systemd subgroup fix/wf227-cgroup-startup 0xkite 2026-09-01 15:33:03 -06:00
  • 1235847fd5
    Merge pull request #29 from 0xkite/fix/inherited-guest-channel 0xkite 2026-09-01 14:48:05 -04:00
  • 6e47c25fdc
    fix(container): admit inherited socket probes 0xkite 2026-09-01 11:37:52 -06:00
  • 126d99d366
    feat(container): inherit local service streams 0xkite 2026-09-01 09:58:40 -06:00
  • ab49b78d56
    Merge pull request #28 from 0xkite/maintainer/wf218-proxy-mount-fix 0xkite 2026-08-31 19:48:38 -04:00
  • 161b30616d
    fix(control): stop runtime-root subdirectory staging from failing local-service identity maintainer/wf218-proxy-mount-fix 0xkite 2026-08-31 17:46:28 -06:00
  • 803651a423
    fix(control): hand bind_session_mount a detached open_tree mount for local-services 0xkite 2026-08-31 17:20:18 -06:00
  • 4900bda468
    Merge pull request #27 from 0xkite/maintainer/wf218-e2e-fixes 0xkite 2026-08-31 09:37:30 -06:00
  • 5c48e5fd8a
    fix(control): report start replay disposition, hard-cap jsonl audit journal, deterministic control tests maintainer/wf218-e2e-fixes 0xkite 2026-08-31 09:34:45 -06:00
  • 4c49af1660
    fix(control): bind degradation to authenticated outcomes and bound the control audit journal 0xkite 2026-08-31 08:09:41 -06:00
  • dd7d3f3891
    fix(control): survive broken control-pipe writes and g++ -Wchanges-meaning 0xkite 2026-08-31 07:33:59 -06:00
  • e62dc0e201
    Merge pull request #26 from 0xkite/maintainer/workflow218-glove-reconcile 0xkite 2026-08-30 23:30:54 -06:00
  • 53e56b6984
    docs: session policy, threat model, and architecture for the channel layer maintainer/workflow218-glove-reconcile trvon 2026-08-30 20:28:41 -06:00
  • a8137db76b
    feat(control): neutral guest channels, quarantine recovery, capability sealing, local-service proxy trvon 2026-08-30 20:28:41 -06:00
  • 638650892c
    refactor(control): remove synthetic wallet status stack trvon 2026-08-30 20:28:37 -06:00
  • 09d34002a6
    Merge PR #25 (guest channel layer) into PR #24 (wallet stack + Apple repairs) integration/pr24-pr25-20260829 0xkite 2026-08-29 16:23:23 -06:00
  • 00d7c47338
    refactor(control): sol audit remediations — fail-closed recovery test, cut dead seam hooks, consolidate identifier grammar maintainer/guest-channel-layer 0xkite 2026-08-29 16:15:17 -06:00
  • 4a487dafdb
    feat(control): generalize the guest specialized-channel layer 0xkite 2026-08-29 16:04:27 -06:00
  • 18e75af876
    refactor(control): make the wallet status projection channel harness-neutral maintainer/wallet-status-and-apple-repairs 0xkite 2026-08-29 14:18:35 -06:00
  • d8b628e066 Document the Sage guest proposal boundary velinussage 2026-08-29 13:40:27 -04:00
  • 61762c1ce0 Add a closed SXXX proposal envelope velinussage 2026-08-29 13:37:15 -04:00
  • a96ab1e1a1
    fix(control): give the Apple finalizer catch-all a well-formed terminal state 0xkite 2026-08-29 11:08:27 -06:00
  • c473a0e102
    fix(control): bind Pi wallet status content to connected state and harden wallet fuzz clock 0xkite 2026-08-29 10:49:09 -06:00
  • 7f9b703a90
    feat(control): add private Pi wallet status adapter and argument-order repair 0xkite 2026-08-29 09:48:17 -06:00
  • 95617c966b
    feat(control): add wallet status managed session owner 0xkite 2026-08-29 09:48:03 -06:00
  • e55889afa7
    feat(control): add Glove wallet status bridge core 0xkite 2026-08-29 09:47:49 -06:00
  • 6971f61f00
    Merge current PR #23 head 4097a21 with validated Apple repairs 0xkite 2026-08-29 09:41:16 -06:00
  • 2bba117d2a
    fix(supervisor): harden bundle projection admission fix/codex-known-kind-allowlist 0xkite 2026-08-29 09:02:55 -06:00
  • 05c3571b33 Expose expired observation intents for reconciliation velinussage 2026-08-29 01:48:49 -04:00
  • 0746fc3fcb Make observation disposition replay durable velinussage 2026-08-29 01:36:55 -04:00
  • 2fa18a2e97 Connect Sage guest observations to managed sessions velinussage 2026-08-29 01:32:19 -04:00
  • 4385e1b5ee Add per-session guest observation socket velinussage 2026-08-29 01:04:55 -04:00
  • 483400f887 Expose observation intents through host control RPC velinussage 2026-08-29 00:51:37 -04:00
  • 5c2d11a82e Add durable Sage observation intent queue velinussage 2026-08-29 00:34:21 -04:00
  • 4097a21adb Make Apple resource sampling lifecycle safe velinussage 2026-08-28 23:17:57 -04:00
  • ca8600a739 Complete Apple managed resource receipts velinussage 2026-08-28 22:52:09 -04:00
  • 583608c31b fix: close Apple lifecycle review gaps velinussage 2026-08-28 21:53:35 -04:00
  • 7f2118c325 phase-3 Add read-only Sage guest projection velinussage 2026-08-28 20:53:11 -04:00
  • a9e659c7a5 phase-2 Fix macOS managed session lifecycle velinussage 2026-08-28 19:43:02 -04:00
  • 4fe180a38f Accept known non-skill Sage bundle kinds and place Codex exec flags after exec. velinussage 2026-08-26 23:40:27 -04:00
  • 9ac024866f
    Merge pull request #21 from 0xkite/fix/adoption-digest-order 0xkite 2026-08-23 21:45:22 -06:00
  • 3ba6ce46a1
    fix(adoption): align snapshot digest ordering fix/adoption-digest-order 0xkite 2026-08-23 21:19:23 -06:00
  • 4ad346eb8d
    Merge pull request #20 from 0xkite/test/managed-client-matrix 0xkite 2026-08-23 10:12:00 -06:00
  • d2884cdef9
    test: add managed client adoption matrix 0xkite 2026-08-23 08:31:22 -06:00
  • 188ceb481a
    Merge pull request #19 from 0xkite/fix/asan-contained-yams-lsan 0xkite 2026-08-23 09:18:35 -06:00
  • e3efe3bffc
    fix(test): isolate contained leak sanitizer 0xkite 2026-08-22 10:02:11 -06:00
  • 37078b0057
    Merge pull request #18 from 0xkite/refactor/receipt-audit-handlers 0xkite 2026-08-15 06:42:23 -06:00
  • 41aba6af8f
    refactor(control): extract receipt handlers refactor/receipt-audit-handlers 0xkite 2026-08-15 05:39:18 -06:00
  • ef1929a2f2
    Merge pull request #17 from 0xkite/refactor/receipt-audit-wire 0xkite 2026-08-15 05:32:42 -06:00
  • 3743c64a78
    refactor(control): extract receipt wire refactor/receipt-audit-wire 0xkite 2026-08-15 04:35:12 -06:00
  • d39c7edd5a
    Merge pull request #16 from 0xkite/refactor/cli-policy-wire 0xkite 2026-08-15 04:32:24 -06:00
  • 119c5e98c3
    refactor(host): extract policy wire refactor/cli-policy-wire 0xkite 2026-08-15 03:30:48 -06:00
  • ae6d11ffbc
    Merge pull request #15 from 0xkite/refactor/cli-doctor-wire 0xkite 2026-08-15 03:28:00 -06:00
  • a4f6bcd38b
    refactor(host): extract doctor wire refactor/cli-doctor-wire 0xkite 2026-08-15 02:29:54 -06:00
  • 6c0e1c5d90
    Merge pull request #13 from 0xkite/refactor/runtime-snapshot-engine 0xkite 2026-08-15 02:25:51 -06:00
  • dd13e928c7
    merge: update runtime snapshot branch refactor/runtime-snapshot-engine 0xkite 2026-08-15 01:23:24 -06:00
  • 80548d58a9
    Merge pull request #14 from 0xkite/fix/ci-actionlint-version 0xkite 2026-08-15 01:20:21 -06:00
  • 06d6ebb37a
    fix(linux): join bridge before closing fix/ci-actionlint-version 0xkite 2026-08-15 00:21:07 -06:00
  • f1d6a0897e
    fix(fuzz): use portable session path 0xkite 2026-08-14 23:41:43 -06:00
  • 43cc02de49
    fix(fuzz): resolve runtime ABI library 0xkite 2026-08-14 22:48:36 -06:00
  • 766ad205f4
    fix(fuzz): order packaged runtime linkage 0xkite 2026-08-14 22:07:04 -06:00
  • ac59e58be8
    fix(fuzz): retain runtime ABI library 0xkite 2026-08-14 21:07:38 -06:00
  • 0c827bdebc
    fix(fuzz): bridge Ubuntu runtime ABI 0xkite 2026-08-14 20:13:48 -06:00
  • 3c538d0fcd
    fix(ci): align Linux fuzzer C++ ABI 0xkite 2026-08-14 19:33:55 -06:00
  • ef7413232c
    fix(test): scope leak tracing to parent 0xkite 2026-08-14 18:40:38 -06:00
  • e0faa4e6bc
    fix(ci): isolate namespace test leak tracing 0xkite 2026-08-14 17:50:56 -06:00
  • fda02033a0
    fix(ci): pin compatible macOS fuzzer LLVM 0xkite 2026-08-14 17:03:08 -06:00
  • a74f814f4f
    fix(ci): validate complete fuzzer policies 0xkite 2026-08-14 16:10:42 -06:00
  • ad02703151
    fix(ci): require complete designated initializers 0xkite 2026-08-14 15:27:14 -06:00
  • 22b60726c2
    fix(control): initialize validation session state 0xkite 2026-08-14 14:45:39 -06:00
  • 7a141c55a8
    ci: deduplicate pull request preflight 0xkite 2026-08-14 14:17:17 -06:00
  • 434d86d9c2
    fix(host): seal snapshots after publication 0xkite 2026-08-14 14:16:33 -06:00
  • 79d04f5e9b
    fix(control): restore hosted CI portability 0xkite 2026-08-14 13:26:03 -06:00
  • afa46f901a
    style: apply pinned clang-format baseline 0xkite 2026-08-14 13:20:48 -06:00
  • 44e69dbf1a
    fix(ci): normalize actionlint version prefix 0xkite 2026-08-14 13:18:19 -06:00
  • 0178744bb6
    refactor(host): extract runtime snapshot engine 0xkite 2026-08-14 13:16:37 -06:00
  • c0049a7719
    Merge pull request #11 from 0xkite/refactor/runtime-policy-wire 0xkite 2026-08-14 12:31:03 -06:00
  • 41dc8b616a
    refactor(host): extract runtime_policy_wire structs into header 0xkite 2026-08-14 12:30:47 -06:00
  • 8829e652d0
    Merge pull request #10 from 0xkite/refactor/session-registry-replay-module 0xkite 2026-08-14 12:28:08 -06:00
  • 0d4e6f2bf5
    refactor(control): extract session registry replay lookups into module 0xkite 2026-08-14 12:27:52 -06:00
  • f13ebbaa00
    Merge pull request #9 from 0xkite/refactor/session-registry-recovery-module 0xkite 2026-08-14 12:24:46 -06:00
  • c92dafe380
    refactor(control): extract session registry recovery state machine 0xkite 2026-08-14 12:24:29 -06:00
  • 5c160a02e7
    Merge pull request #8 from 0xkite/refactor/session-registry-io-helpers 0xkite 2026-08-14 12:21:20 -06:00
  • 6e5e150a08
    refactor(control): move session registry io + conversion helpers into impl header 0xkite 2026-08-14 12:20:37 -06:00
  • a20bcaede9
    Merge pull request #7 from 0xkite/refactor/session-registry-impl-header 0xkite 2026-08-14 12:14:39 -06:00
  • 8d639d5348
    refactor(control): extract session registry internal state into impl header 0xkite 2026-08-14 12:14:22 -06:00
  • bce4553f40
    Merge pull request #6 from 0xkite/refactor/session-registry-recovery-structs 0xkite 2026-08-14 12:08:41 -06:00
  • 91299dacf2
    style(control): fix include ordering in session_registry_wire.hpp 0xkite 2026-08-14 12:08:22 -06:00
  • 28224ccf1b
    refactor(control): extract session registry replay lookup structs 0xkite 2026-08-14 12:07:54 -06:00
  • 4adf3ea97a
    Merge pull request #5 from 0xkite/refactor/session-registry-codec 0xkite 2026-08-14 12:03:56 -06:00
  • 95cad99c48
    refactor(control): extract session registry JSON codec into wire module 0xkite 2026-08-14 12:03:38 -06:00
  • c4c3919540
    Merge pull request #4 from 0xkite/refactor/session-registry-hashing 0xkite 2026-08-14 10:04:00 -06:00
  • 82a1b40017
    refactor(control): extract session registry hashing into wire module 0xkite 2026-08-14 10:03:42 -06:00
  • e63646c0ce
    Merge pull request #3 from 0xkite/refactor/session-registry-wire 0xkite 2026-08-14 10:00:19 -06:00
  • ff0033dc86
    refactor(control): extract session registry wire codec primitives 0xkite 2026-08-14 10:00:02 -06:00
  • 3d995d01c8
    Merge pull request #2 from 0xkite/fix/glove-ctest 0xkite 2026-08-13 07:01:55 -06:00
  • 60be71c908
    chore(hooks): sync glove hook with sage refinements fix/glove-ctest 0xkite 2026-08-13 07:01:38 -06:00
  • 127fe80052
    test(glove): register workerd supply-chain test in CTest 0xkite 2026-08-13 07:01:38 -06:00
  • 00005fcbb2
    Merge pull request #1 from 0xkite/chore/monolith-slop-hooks 0xkite 2026-08-13 06:18:33 -06:00