feat(sandbox): persistent per-user sandbox container (V1 Phase A) - #6584

Closed

henrypark133 wants to merge 15 commits into

mainfrom

sandbox/v1-phase-a

Commits on Jul 23, 2026

wip(sandbox): persistent-sandbox program wave 3b snapshot (pre-rebase onto f7da7dd7b)

henrypark133
and
claude
committed
c7d907d
feat(sandbox): add coarse {tenant,user} container identity key

henrypark133
and
claude
committed
2f49a42
style(host_runtime): cargo fmt line-wrapping in shell/port/limits

henrypark133
and
claude
committed
e679cd6
feat(sandbox): add labels-as-identity registry and push-based activity map

henrypark133
and
claude
committed
8fb26bb
test(architecture): sync composition pub-use ratchet baseline for tenant_sandbox_process_binding

henrypark133
and
claude
committed
82a0d04
feat(sandbox): replace ephemeral container exec with persistent docker-exec transport

henrypark133
and
claude
committed
6815ed4
refactor(sandbox): introduce SandboxRuntimeBindings as the single sandboxed-profile composition seam

henrypark133
and
claude
committed
8331330
style(composition): cargo fmt normalization in sandbox_boot/sandbox_quota

henrypark133
and
claude
committed
39cb8e2
feat(sandbox): add background:true detached execution with live-process footer

henrypark133
and
claude
committed
249d617
refactor(sandbox): flip reaper from invocation-liveness reaping to two-stage idle/retention lifecycle

henrypark133
and
claude
committed
20c6eef
refactor(sandbox): move concurrency ceiling from ResourceAccount::tenant to ResourceAccount::user

henrypark133
and
claude
committed
5dd4952
feat(sandbox): extend process-sandbox image with git/node/python/rust/gh/tmux and workspace-persistent HOME

henrypark133
and
claude
committed
36a1991
fix(sandbox): rewrite sandbox_reaper_docker integration test for two-stage reaper API

henrypark133
and
claude
committed
83b382c
feat(sandbox): mount per-user sandbox workspace at /workspace abstract-FS root

henrypark133
and
claude
committed
b7d77b2
test(sandbox): Docker-real shell<->abstract-FS /workspace byte parity

henrypark133
and
claude
committed
a988b69

Navigation Menu

feat(sandbox): persistent per-user sandbox container (V1 Phase A) - #6584

feat(sandbox): persistent per-user sandbox container (V1 Phase A)#6584
henrypark133 wants to merge 15 commits into
mainfrom
sandbox/v1-phase-a

Commits on Jul 23, 2026

wip(sandbox): persistent-sandbox program wave 3b snapshot (pre-rebase onto f7da7dd7b)

feat(sandbox): add coarse {tenant,user} container identity key

style(host_runtime): cargo fmt line-wrapping in shell/port/limits

feat(sandbox): add labels-as-identity registry and push-based activity map

test(architecture): sync composition pub-use ratchet baseline for tenant_sandbox_process_binding

feat(sandbox): replace ephemeral container exec with persistent docker-exec transport

refactor(sandbox): introduce SandboxRuntimeBindings as the single sandboxed-profile composition seam

style(composition): cargo fmt normalization in sandbox_boot/sandbox_quota

feat(sandbox): add background:true detached execution with live-process footer

refactor(sandbox): flip reaper from invocation-liveness reaping to two-stage idle/retention lifecycle

refactor(sandbox): move concurrency ceiling from ResourceAccount::tenant to ResourceAccount::user

feat(sandbox): extend process-sandbox image with git/node/python/rust/gh/tmux and workspace-persistent HOME

fix(sandbox): rewrite sandbox_reaper_docker integration test for two-stage reaper API

feat(sandbox): mount per-user sandbox workspace at /workspace abstract-FS root

test(sandbox): Docker-real shell<->abstract-FS /workspace byte parity