Repository navigation

feat(sandbox): leaf-scoped mount containment + per-user sandbox identity primitives - #6695

Merged

henrypark133 merged 11 commits into

mainfrom

sandbox/pr3-leaf-scoped-containment

Jul 28, 2026

Commits on Jul 27, 2026

feat(sandbox): leaf-scoped mount containment + per-user sandbox identity primitives

henrypark133
and
claude
committed
f316dd2
fix(sandbox): attribution real-docker test reuses connect_docker() fallback

henrypark133
and
claude
committed
433c97a
fix(sandbox): address PR review — leaf-creation bug, attribution hygiene, docker CI gate

henrypark133
and
claude
committed
d17e92a
fix(sandbox): O(1) drop_dead pruning + coverage for empty-alive-pids and concurrent attribution resolve

henrypark133
and
claude
committed
dc28fa5
fix(sandbox): force real cache-miss overlap in attribution concurrency test

henrypark133
and
claude
committed
1100b06
fix(sandbox): address new PR #6695 review round (CI-hang test, silent-ok docs, IPv6 attribution, typed mount resolution, key codec dedup

henrypark133
and
claude
committed
022ca2a
refactor(sandbox): split attribution.rs test module into its own file

henrypark133
and
claude
committed
a264409
fix(sandbox): address round-6 review findings on #6695
henrypark133
committed
7259abf
fix(filesystem): reject dangling final symlink in resolve_for_write

henrypark133
and
claude
committed
f00f1fe
docs(filesystem): document TOCTOU residual on create_dir_all/delete

henrypark133
and
claude
committed
b8650a4
Merge remote-tracking branch 'origin/main' into sandbox/pr3-leaf-scoped-containment
henrypark133
committed
cd10cd5