Repository navigation

Bound the microVM guest by containment, and refuse at the signed Firecracker boundary - #10021

Merged

gunbai-bot[bot] merged 17 commits into

mainfrom

session/smart-crane-230

Sep 3, 2026

Commits on Sep 2, 2026
- Reconcile runner_microvm with FCI-1's bounded cell envelope, and dissolve the coproduct predicates review 57217 named
  
  Brian Searls
  and
  claude
  committed
  e2a3ea9
- Merge main into the FCI-1 microVM envelope branch
  
  Brian Searls
  and
  claude
  committed
  0641429
- The witness fixture's unresolved arm recursed instead of refusing, and the coverage hole gets its second cited instance
  
  Brian Searls
  and
  claude
  committed
  afcf739
- Regenerate std_measure.rs: the mirror of the two Mebi conversions this branch added
  
  Brian Searls
  and
  claude
  committed
  0677577
- Merge main into the FCI-1 microVM envelope branch: #10023 has landed
  
  Brian Searls
  and
  claude
  committed
  c77ac6b
- Merge main into the FCI-1 microVM branch: #10037 owns the compiler-tests mirror
  
  Brian Searls
  and
  claude
  committed
  0e82193
- The guest was sized at the WHOLE cell ceiling, so the slice would OOM its own VM
  
  Brian Searls
  and
  claude
  committed
  c69289e
- Widen the microVM sizing stall: the CPU axis is unfounded too, and the cell is not what enforces it
  
  Brian Searls
  and
  claude
  committed
  9d45cc3
- Merge main into the FCI-1 microVM branch: keep both new stall rows
  
  Brian Searls
  and
  claude
  committed
  e4b1990
- Delete the vacuous microVM witness rather than repair it
  
  Brian Searls
  and
  claude
  committed
  cc2cd79
- Re-attach the deleted-witness annotation to a declaration: it was stranded at EOF
  
  Brian Searls
  and
  claude
  committed
  fd86a35
- Merge main
  Brian Searls
  committed
  c870b89
- Separate the three memory quantities and judge FIT, not equality
  
  Brian Searls
  and
  claude
  committed
  13ad744
- Close the fail-open at the signed Firecracker boundary; re-census the stall population
  
  Brian Searls
  and
  claude
  committed
  95b9466
- Merge remote-tracking branch 'origin/main' into session/smart-crane-230
  Brian Searls
  committed
  9ee1163
Commits on Sep 3, 2026
- Move the subtraction rationale to module-item grain, and control the split it depends on
  
  Brian Searls
  and
  claude
  committed
  92e1e8d
- Merge remote-tracking branch 'origin/main' into session/smart-crane-230
  Brian Searls
  committed
  810e3f6

Navigation Menu

Repository navigation

Bound the microVM guest by containment, and refuse at the signed Firecracker boundary - #10021

Bound the microVM guest by containment, and refuse at the signed Firecracker boundary#10021
gunbai-bot[bot] merged 17 commits into
mainfrom
session/smart-crane-230

Commits on Sep 2, 2026

Reconcile runner_microvm with FCI-1's bounded cell envelope, and dissolve the coproduct predicates review 57217 named

Merge main into the FCI-1 microVM envelope branch

The witness fixture's unresolved arm recursed instead of refusing, and the coverage hole gets its second cited instance

Regenerate std_measure.rs: the mirror of the two Mebi conversions this branch added

Merge main into the FCI-1 microVM envelope branch: #10023 has landed

Merge main into the FCI-1 microVM branch: #10037 owns the compiler-tests mirror

The guest was sized at the WHOLE cell ceiling, so the slice would OOM its own VM

Widen the microVM sizing stall: the CPU axis is unfounded too, and the cell is not what enforces it

Merge main into the FCI-1 microVM branch: keep both new stall rows

Delete the vacuous microVM witness rather than repair it

Re-attach the deleted-witness annotation to a declaration: it was stranded at EOF

Merge main

Separate the three memory quantities and judge FIT, not equality

Close the fail-open at the signed Firecracker boundary; re-census the stall population

Merge remote-tracking branch 'origin/main' into session/smart-crane-230

Commits on Sep 3, 2026

Move the subtraction rationale to module-item grain, and control the split it depends on

Merge remote-tracking branch 'origin/main' into session/smart-crane-230