Commits

Branch selector

 main

User selector

All users

All time

Commit History

Commits on May 8, 2026

• Merge pull request #42 from multikernel/policy-schema

  Show description for bb820fe
  congwang-mk

  authored
  bb820fe

  Copy full SHA for bb820fe

• examples: port Python examples to merged Sandbox API

  Show description for 072a482
  congwang-mk

  committed
  072a482

  Copy full SHA for 072a482

• docs: update API examples for sandbox schema

  Show description for d4ea97e
  congwang-mk

  committed
  d4ea97e

  Copy full SHA for d4ea97e

Commits on May 7, 2026

• profile: enforce time_start and no-supervisor validation

  Show description for 5e26ee1
  congwang-mk

  committed
  5e26ee1

  Copy full SHA for 5e26ee1

• sandbox(python): rebuild native config on every lifecycle call

  Show description for 9ae3982
  congwang-mk

  committed
  9ae3982

  Copy full SHA for 9ae3982

• profile(python): port loader to the sectioned schema

  Show description for 6f0cac2
  congwang-mk

  committed
  6f0cac2

  Copy full SHA for 6f0cac2

• cli/ffi: transfer all profile fields and sync C header

  Show description for 71359c7
  congwang-mk

  committed
  71359c7

  Copy full SHA for 71359c7

• error: rename SandboxProcessError to SandboxRuntimeError

  Show description for 847161e
  congwang-mk

  committed
  847161e

  Copy full SHA for 847161e

• sandbox: rename Policy → Sandbox, merge SandboxProcess into Sandbox

  Show description for 637a1de
  congwang-mk

  committed
  637a1de

  Copy full SHA for 637a1de

• policy: align CLI, API, and bindings with sectioned-schema vocabulary

  Show description for 10b1508
  congwang-mk

  committed
  10b1508

  Copy full SHA for 10b1508

• profile: replace flat-keyed format with sectioned policy schema

  Show description for ab4b0c3
  congwang-mk

  committed
  ab4b0c3

  Copy full SHA for ab4b0c3

Commits on May 6, 2026

• Merge pull request #41 from multikernel/net-allow-protocols

  Show description for c2e4630
  congwang-mk

  authored
  c2e4630

  Copy full SHA for c2e4630

• netlink: deny socket families outside a small allowlist

  Show description for 1e51216
  congwang-mk

  committed
  1e51216

  Copy full SHA for 1e51216

• docs: rewrite Network Model for scheme-prefixed net_allow

  Show description for ef096e4
  congwang-mk

  committed
  ef096e4

  Copy full SHA for ef096e4

• net_allow: cover sendmmsg in the on-behalf path

  Show description for 549bab9
  congwang-mk

  committed
  549bab9

  Copy full SHA for 549bab9

• net_allow: route on-behalf destination checks per-protocol

  Show description for de1e55b
  congwang-mk

  committed
  de1e55b

  Copy full SHA for de1e55b

• net_allow: unify protocol gating into scheme-prefixed rules

  Show description for 042472b
  congwang-mk

  committed
  042472b

  Copy full SHA for 042472b

• test: switch /etc probe from /etc/os-release to /etc/group

  Show description for 86b7927
  congwang-mk

  committed
  86b7927

  Copy full SHA for 86b7927

• test: stop leaking host /etc/passwd in cargo test output

  Show description for 4f9b2eb
  congwang-mk

  committed
  4f9b2eb

  Copy full SHA for 4f9b2eb

• Merge pull request #38 from multikernel/pending-fixes

  Show description for 1b6d6d5
  congwang-mk

  authored
  1b6d6d5

  Copy full SHA for 1b6d6d5

• Simplify syscall blocklist policy

  Show description for 6987c73
  congwang-mk

  committed
  6987c73

  Copy full SHA for 6987c73

• Rename syscall deny policy to blocklist

  congwang-mk

  committed
  540aebe

  Copy full SHA for 540aebe

• Remove unimplemented syscall allowlist

  Show description for 783350a
  congwang-mk

  committed
  783350a

  Copy full SHA for 783350a

• Make syscall policy explicit

  Show description for a5bc946
  congwang-mk

  committed
  a5bc946

  Copy full SHA for a5bc946

• Rename Rust confine() API

  Show description for 643097d
  congwang-mk

  committed
  643097d

  Copy full SHA for 643097d

• chore(handlers): post-merge cleanup of PR #36

  Show description for 302d106
  congwang-mk

  committed
  302d106

  Copy full SHA for 302d106

• Merge pull request #36 from dzerik/feature/extra-handler-trait-reshape

  Show description for 36cda37
  congwang-mk

  authored
  36cda37

  Copy full SHA for 36cda37

Commits on May 5, 2026

• refactor(seccomp): drop SupervisorCtx from public Handler API

  Show description for 55db24d
  dzerik

  committed
  55db24d

  Copy full SHA for 55db24d

• refactor(seccomp): drop async-trait macro dep

  Show description for 6cb1bcd
  dzerik

  committed
  6cb1bcd

  Copy full SHA for 6cb1bcd

• feat(seccomp): Handler impls for Box<dyn Handler> and Arc<dyn Handler>

  Show description for c9197e7
  dzerik

  committed
  c9197e7

  Copy full SHA for c9197e7

• chore: drop Arc<dyn Handler> blanket and clean up stale doc-refs

  Show description for ba6b657
  dzerik

  committed
  ba6b657

  Copy full SHA for ba6b657

• docs: rewrite extension-handlers.md for the Handler trait API

  Show description for 16a8156
  dzerik

  committed
  16a8156

  Copy full SHA for 16a8156

• chore: re-export Handler types at crate root

  Show description for 1daac9b
  dzerik

  committed
  1daac9b

  Copy full SHA for 1daac9b

• feat(seccomp): expose read_child_cstr as public API

  Show description for 46b7477
  dzerik

  committed
  46b7477

  Copy full SHA for 46b7477

• feat(seccomp): Handler trait + IntoIterator-shaped run_with_extra_handlers

  Show description for 989daf1
  dzerik

  committed
  989daf1

  Copy full SHA for 989daf1