v0.1.0
ci/woodpecker/tag/release Pipeline was successful
Stable
unkinben
released this
2026-10-24 20:40:16 +11:00
| 4 commits to main since this release
- Merge pull request 'Allow launches only under configured roots' (#3) from benvin/launch-dir-allowlist into main
- Merge pull request 'Port the launcher to Go' (#2) from benvin/go-launcher into main
- Refuse launch dirs overlapping sensitive dirs under every root
- Refuse roots and launch dirs overlapping forbidden system dirs
- Refuse launch dirs holding $PATH entries and mount the checked path
- Merge remote-tracking branch 'origin/benvin/go-launcher' into benvin/launch-dir-allowlist
- Drop shell completions from the RPM
- Merge remote-tracking branch 'origin/benvin/go-launcher' into benvin/launch-dir-allowlist
- Pass all arguments through to claude or --exec
- Merge benvin/go-launcher
- Refuse launch dirs containing the API socket and stop the service with the launcher
- Trust listed roots under dot-dirs, reject sensitive ones
- Allow launches only under configured roots
- Port the launcher to Go on the podman API bindings
- Merge pull request 'Add agent-sandbox launcher, images and CI' (#1) from benvin/scaffold into main
- Refuse launch dirs containing the allowlist's resolved location
- Abort on invalid allowlist lines; refuse launch dirs exposing $HOME or the allowlist
- Skip exact hosts covered by a .domain in nginx maps; confine router with SELinux
- Add README
- Add pre-commit and Woodpecker pipelines
- Add Makefile and RPM packaging
- Add launcher and default allowlist
- Add sandbox image with nested podman
- Add router image for allowlisted egress
- Initial commit
Downloads