sandbox: contain the interface the packets actually leave by, and put it in the launch path - #996

Merged

pmilic021 merged 58 commits into

MakePrisms:mainfrom

maxy-player:w-gvisor-interface-impl2

Sep 18, 2026

Commits on Sep 14, 2026

sandbox: translate the containment policy onto the veth the packets actually leave by
w-gvisor-interface-impl
committed
4a88a47
sandbox: put the interface filters in the launch path, not beside it
w-gvisor-interface-impl2
committed
5c38b8f
sandbox: make the runsc gate measure what it claims, on a real kernel
w-gvisor-interface-impl2
committed
ff2dc5f
sandbox: round-2 revise WIP — strict tc readback, cancellation custody, owned fixtures, integrated launch matrix
w-gvisor-interface-impl2
committed
d65a749
sandbox: wire the evidence validator in, and give acceptance one command that can fail
w-gvisor-interface-impl3
committed
9657581
sandbox: verify a real tc capture, and refuse every substitution in both families
w-gvisor-interface-impl3
committed
3cb4495
sandbox: read the skipped lines too — statistics and action bookkeeping are accounted for
w-gvisor-interface-impl3
committed
0e4b507
sandbox live: let an integrated leg carry its own [sandbox] section
w-gvisor-interface-impl3
committed
f15e7e3
sandbox live: author the missing IPv6, both-runtime and pinhole legs (never run)
w-gvisor-interface-impl3
committed
4f593c0
sandbox: exercise the cancellation bound instead of only reading it
w-gvisor-interface-impl3
committed
04ea546
sandbox live: make the matrix survive its own first real run
w-policy-constant-mutation-933
committed
98f1190
sandbox: permit only ND control traffic so v6 denial means something
w-gvisor-interface-impl3
committed
7eae391
sandbox live: truncate the short plan by v4 count, not by a fixed tail
w-gvisor-interface-impl3
committed
fe82eb4
sandbox: check the ND ordering guard by the message the guard now emits
w-gvisor-interface-impl3
committed
2857c56
sandbox evidence: refuse a case record that states a field twice
w-gvisor-interface-impl3
committed
53f4103
sandbox netns: keep custody of a sidecar whose command was cancelled
w-gvisor-interface-impl3
committed
5a78169
sandbox netns: actually bound the removal that called itself bounded
w-gvisor-interface-impl3
committed
c856bf5
sandbox live: score a denial only when the connection was denied
w-gvisor-interface-impl3
committed
4d46b2e
sandbox iface: read a statistics line by grammar, not by blacklist
w-gvisor-interface-impl3
committed
ed44aab
test(sandbox): make the integrated matrix measure the merged DNS seam
w-gvisor-interface-impl3
committed
c01e35a
docs(sandbox): stop this file's fixture reading as proof that DNS works
w-gvisor-interface-impl3
committed
f8b075e
fix(sandbox): keep sidecar custody until the container is shown gone, and refuse a readback this parser cannot account for
w-gvisor-interface-impl3
committed
3a43ad0
test(sandbox): measure the custody rule at the site that applies it, not only the flag that feeds it
w-gvisor-interface-impl3
committed
5d7837d
fix(sandbox): tie every saved case to the test that asserts it, and measure the host leg that nothing measured
w-gvisor-interface-impl3
committed
df93a55
fix(sandbox): fence a delayed create, hold custody until the container is confirmed gone, refuse an ND line this parser cannot consume
w-gvisor-interface-impl3
committed
13745fd
fix(sandbox): fence the sidecar create, keep custody through a signal kill, confine evidence paths, and gate establish itself
w-gvisor-interface-impl3
committed
c57e6c2
sandbox_netns: confine the docker test seam to cfg(test)
w-gvisor-interface-impl3
committed
d6774e4
sandbox_netns: take the docker client as an argument and let cleanup outlast the create
w-gvisor-interface-impl3
committed
e725c38

Commits on Sep 15, 2026

sandbox: bound the create flow, prove cancellation hit it, install one-port pinholes
w-gvisor-interface-impl3
committed
f1a655c
sandbox: keep cleanup custody past the bound, and bound the whole create flow
w-gvisor-interface-impl3
committed
42754c0
sandbox: make the outstanding-writer gate deterministic, not a race
w-gvisor-interface-impl3
committed
e424aa1
sandbox: state the writer's disposition on the deadline path, either way
w-gvisor-interface-impl3
committed
4bfcbe3
sandbox: transfer cleanup ownership instead of ending it, and ticket the IO that outlives a call
w-gvisor-interface-impl3
committed
407faff
sandbox: make the cleanup handoff atomic with settlement, and never drop a live obligation
w-gvisor-interface-impl3
committed
2726a86
sandbox: custody that does not end while the process lives
w-gvisor-interface-impl3
committed
2f08f60
sandbox: lifecycle-ordered discharge, complete ambiguity record, thread-free scheduling, supervised fast Drop
w-gvisor-interface-impl3
committed
d715d47
sandbox: wake waiters when an attempt starts; F3b gate on ordering, not wall-clock
w-gvisor-interface-impl3
committed
93bc9a9
sandbox: adopt per-job cleanup-after stamp and expiry sweep primitives
w-gvisor-deadline-sweep-r1
committed
16f9032
sandbox: stamp job-owned helpers with the same seat, expiry and job as their holder
w-pr1006-continuation-r1
committed
6590c56
seller node: sweep expired job containers every 300s on the run loop
w-pr1006-continuation-r1
committed
d314352
sandbox: tests for the per-job expiry sweep
w-pr1006-continuation-r1
committed
ea84d96
retire process-lifetime custody now that the expiry sweep owns late containers
w-gvisor-deadline-sweep-r1
committed
4dd2942
compile the holder cleanup path without the acp feature
w-gvisor-deadline-sweep-r1
committed
a337dda
bound the sweep pass in wall clock and keep it off the run loop
w-gvisor-deadline-sweep-r1
committed
ebc69d1
correct the provenance line in 16f9032d
w-gvisor-deadline-sweep-r1
committed
fbaf972
live: re-cut the sweep acceptance rows and add the helper-stamp row
w-gvisor-deadline-sweep-r1
committed
f29028d
live: make the helper row name what the sweep saw when it goes red
w-gvisor-deadline-sweep-r1
committed
d1c3709
test: measure the descendant-pipe fixture's budget instead of guessing it
w-gvisor-deadline-sweep-r1
committed
c64e4d3
sandbox sweep: report refusals, rotate the pass, carry the deadline
w-gvisor-deadline-sweep-r1
committed
647c457
sweep: read a holder's job from its own label, not the helper's
w-gvisor-deadline-sweep-r1
committed
98436f5

Commits on Sep 16, 2026

sandbox_netns: resolve the sweep's job id per role, not first-column-wins
w-gvisor-deadline-sweep-r1
committed
8bb6005
seller_exec: prove a seller deadline reaches a real daemon label and decides the sweep
w-gvisor-deadline-sweep-r1
committed
806d1d1

Commits on Sep 17, 2026

test(996): guard the deadline's real entry point, and isolate the live run
w-gvisor-deadline-sweep-r1
committed
3a1beac
Merge MakePrisms/main (7d36a548) into w-gvisor-interface-impl2
w-gvisor-deadline-sweep-r1
committed
a5fa204
test(sandbox_netns_live): complete two struct literals main's merge left short
w-gvisor-deadline-sweep-r1
committed
f4e4eed
fix(sandbox_netns): let sweep_seat exist in the default build
w-gvisor-deadline-sweep-r1
committed
73ef6f0
test(seller_exec): give the live scope panic-safe ownership of what it creates
w-gvisor-deadline-sweep-r1
committed
8ef30aa

Commits on Sep 18, 2026

test(seller_exec): close R3 F1/F4 — acquisition-state ownership, non-absent listing failures
w-gvisor-deadline-sweep-r1
committed
5a4c34b