unkin/agent-sandbox
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Commit Graph

  • 7abf91b93e Merge pull request 'ci: authenticate artifactapi rpm upload with a vault token' (#5) from benvin/artifactapi-upload-token into main main benvin 2026-10-25 22:59:03 +11:00
  • 11a0aad6f4 ci: authenticate artifactapi rpm upload with a vault token unkin-agent 2026-10-25 20:36:20 +11:00
  • 757e1c069c Merge pull request 'Test uncovered launch-dir refusals' (#4) from benvin/launch-dir-tests into main benvin 2026-10-25 01:08:03 +11:00
  • 588ef2f8c2 Test launch-dir refusals not covered elsewhere unkin-agent 2026-10-24 20:43:16 +11:00
  • e866d5d1b4 Merge pull request 'Allow launches only under configured roots' (#3) from benvin/launch-dir-allowlist into main v0.1.0 benvin 2026-10-24 20:40:16 +11:00
  • 06e86ffd37 Merge pull request 'Port the launcher to Go' (#2) from benvin/go-launcher into main benvin 2026-10-24 18:43:22 +11:00
  • 9958b5557e Refuse launch dirs overlapping sensitive dirs under every root unkin-agent 2026-10-24 17:56:54 +11:00
  • 80c90769fd Refuse roots and launch dirs overlapping forbidden system dirs unkin-agent 2026-10-24 17:49:13 +11:00
  • f60caa7e98 Refuse launch dirs holding $PATH entries and mount the checked path unkin-agent 2026-10-24 17:43:06 +11:00
  • bbc439fb09 Merge remote-tracking branch 'origin/benvin/go-launcher' into benvin/launch-dir-allowlist unkin-agent 2026-10-24 17:38:48 +11:00
  • 2e3dafb28a Drop shell completions from the RPM unkin-agent 2026-10-24 17:38:05 +11:00
  • a2a4eb31ca Merge remote-tracking branch 'origin/benvin/go-launcher' into benvin/launch-dir-allowlist unkin-agent 2026-10-24 17:37:57 +11:00
  • ea4ed4af9d Pass all arguments through to claude or --exec unkin-agent 2026-10-24 17:37:16 +11:00
  • 3f1cc9644d Merge benvin/go-launcher unkin-agent 2026-10-24 17:33:03 +11:00
  • 818ec3f59c Refuse launch dirs containing the API socket and stop the service with the launcher unkin-agent 2026-10-24 17:29:08 +11:00
  • 90c7412194 Trust listed roots under dot-dirs, reject sensitive ones unkin-agent 2026-10-24 17:11:33 +11:00
  • 3ec134147a Allow launches only under configured roots unkin-agent 2026-10-24 17:05:33 +11:00
  • af55d83de6 Port the launcher to Go on the podman API bindings unkin-agent 2026-10-24 16:49:43 +11:00
  • 1e250f1113 Merge pull request 'Add agent-sandbox launcher, images and CI' (#1) from benvin/scaffold into main benvin 2026-10-24 16:19:57 +11:00
  • 07d93b0fe1 Refuse launch dirs containing the allowlist's resolved location unkin-agent 2026-10-23 22:51:11 +11:00
  • 71c1999e27 Abort on invalid allowlist lines; refuse launch dirs exposing $HOME or the allowlist unkin-agent 2026-10-23 22:46:24 +11:00
  • edbe3faeb0 Skip exact hosts covered by a .domain in nginx maps; confine router with SELinux unkin-agent 2026-10-23 22:37:51 +11:00
  • 4ee52cb615 Add README unkin-agent 2026-10-23 22:29:01 +11:00
  • 7a6cb93fdb Add pre-commit and Woodpecker pipelines unkin-agent 2026-10-23 22:29:01 +11:00
  • 0144546973 Add Makefile and RPM packaging unkin-agent 2026-10-23 22:29:01 +11:00
  • c3b7a32bd1 Add launcher and default allowlist unkin-agent 2026-10-23 22:29:01 +11:00
  • 3d0563a12c Add sandbox image with nested podman unkin-agent 2026-10-23 22:29:01 +11:00
  • 4122e3592b Add router image for allowlisted egress unkin-agent 2026-10-23 22:29:01 +11:00
  • 20c9c9ff26 Initial commit gitadmin 2026-10-23 22:19:17 +11:00