Repository navigation

microVM: host-side JIT mint via GitHub App + attempt-owned jail device staging - #11677

Merged

briansrls merged 26 commits into

mainfrom

session/keen-bear-791

Sep 20, 2026

Commits on Sep 19, 2026
- microVM JIT mint on the host and attempt-owned jail staging
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  7658ab7
- Address review 68117: ByteSize carrier, one JWT claim/header authority, HostMintAdmission checker
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  3341ce9
- Address review 68156: EpochSecs for the JWT clock, delete planned_jit_devices alias
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  0e26b37
- extdeps.tools.openssl: import Unit from std.types (floor AmbiguousBareNameRead)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  afcc701
- runner_attempt_launch: derive the jit device's install mode and readback mode from one row (review 68264)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  be8da16
- App JWT carried as extdeps.auth.jwt JwtCompactSerialization, not a bare Secret (review 68283)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  4830553
- github_effect_perform: hoist the brand-shedding note out of the function body (parse: annotation at module-item grain only)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  2fc768a
- Reconcile the RS256 'cannot sign' rows with the signer this PR lands; keep clock notes attached (review 68318)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  e20ac1c
- Merge origin/main (#11674 registration labels) into #11677; drop drive_destination from the resolved arms
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  bb09595
- Merge origin/main (#11547 generic App-token prelude) into #11677; the prelude consumes jws/claims authorities
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  da1f422
- Model the signer over a key reference (extdeps.auth.jws JwsSigningKeyRef/JwsSignOutcome); openssl is one handler in gunbc.jws_signer_realize (CRYPTO-0/PRIMITIVE-EGRESS-0 shape condition)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  9580ef2
- Merge origin/main (#11671); stage exactly runner_microvm jit_drive_content on the jail device
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  43da036
- Refuse a mint whose App is not the one the controller key belongs to (review 68653 note)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  8185db2
- Measure the credential in bytes, and delete the dangling endpoint_path fork (reviews 68668, 68670)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  f875cd1
Commits on Sep 20, 2026
- Merge origin/main (#11671 guest bootstrap, #11675 guest network + workspace staging) into #11677
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  f8fe885
- Merge branches 'main' and 'session/keen-bear-791' of https://github.com/gunb-ai/gunbc into session/keen-bear-791
  gunbc-ci-auto-heal
  committed
  ea738ca
- Staging admits the jailer only from BOTH stagings, through a sealed receipt
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  e6cef61
- Merge origin/main (#11672 microVM shape, #11675 workspace staging, gh enrolment) into #11677
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  0da0882
- stat.dag: restore the brace my keep-both merge resolution cut (floor: unterminated function body)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  46a9c33
- Take main's generated workflow projections; my copies were stale generations carried through merges
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  7a9a379
- chore: regenerate drifted generated artifacts (ci auto-heal)
  gunbai-bot[bot]
  authored
  a6ed2fd
- Merge main into the #11677 base for the wet lifecycle controller lane
  gunbc-ci-auto-heal
  committed
  12c0ffc
- microVM: carry the staged credential device path on InFlightAttempt, so #11677's jail-interior device does not leave #11670's teardown join importing a deleted symbol
  gunbc-ci-auto-heal
  committed
  8891230
- Merge origin/main (#11791 fleet witness lane + drift gate) into #11677
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  ec2973a
- Merge origin/main into #11677 (recomposition before taking witness evidence)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  217f5af
- Merge origin/main (#11839 Optional-where-required repair, #11823 failure-mode rows) into #11677
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  51e5d71

Navigation Menu

Repository navigation

microVM: host-side JIT mint via GitHub App + attempt-owned jail device staging - #11677

microVM: host-side JIT mint via GitHub App + attempt-owned jail device staging#11677
briansrls merged 26 commits into
mainfrom
session/keen-bear-791

Commits on Sep 19, 2026

microVM JIT mint on the host and attempt-owned jail staging

Address review 68117: ByteSize carrier, one JWT claim/header authority, HostMintAdmission checker

Address review 68156: EpochSecs for the JWT clock, delete planned_jit_devices alias

extdeps.tools.openssl: import Unit from std.types (floor AmbiguousBareNameRead)

runner_attempt_launch: derive the jit device's install mode and readback mode from one row (review 68264)

App JWT carried as extdeps.auth.jwt JwtCompactSerialization, not a bare Secret (review 68283)

github_effect_perform: hoist the brand-shedding note out of the function body (parse: annotation at module-item grain only)

Reconcile the RS256 'cannot sign' rows with the signer this PR lands; keep clock notes attached (review 68318)

Merge origin/main (#11674 registration labels) into #11677; drop drive_destination from the resolved arms

Merge origin/main (#11547 generic App-token prelude) into #11677; the prelude consumes jws/claims authorities

Model the signer over a key reference (extdeps.auth.jws JwsSigningKeyRef/JwsSignOutcome); openssl is one handler in gunbc.jws_signer_realize (CRYPTO-0/PRIMITIVE-EGRESS-0 shape condition)

Merge origin/main (#11671); stage exactly runner_microvm jit_drive_content on the jail device

Refuse a mint whose App is not the one the controller key belongs to (review 68653 note)

Measure the credential in bytes, and delete the dangling endpoint_path fork (reviews 68668, 68670)

Commits on Sep 20, 2026

Merge origin/main (#11671 guest bootstrap, #11675 guest network + workspace staging) into #11677

Merge branches 'main' and 'session/keen-bear-791' of https://github.com/gunb-ai/gunbc into session/keen-bear-791

Staging admits the jailer only from BOTH stagings, through a sealed receipt

Merge origin/main (#11672 microVM shape, #11675 workspace staging, gh enrolment) into #11677

stat.dag: restore the brace my keep-both merge resolution cut (floor: unterminated function body)

Take main's generated workflow projections; my copies were stale generations carried through merges

chore: regenerate drifted generated artifacts (ci auto-heal)

Merge main into the #11677 base for the wet lifecycle controller lane

microVM: carry the staged credential device path on InFlightAttempt, so #11677's jail-interior device does not leave #11670's teardown join importing a deleted symbol

Merge origin/main (#11791 fleet witness lane + drift gate) into #11677

Merge origin/main into #11677 (recomposition before taking witness evidence)

Merge origin/main (#11839 Optional-where-required repair, #11823 failure-mode rows) into #11677