feat(sandbox): integrate OCSF structured logging for sandbox events#720

Open

johntmyers wants to merge 19 commits intomainfrom

feat/ocsf-log-integration

Commits on Apr 1, 2026

feat(sandbox): integrate OCSF structured logging for all sandbox events
johntmyers
committed
fix(scripts): attach provider to all smoke test phases to avoid rate limits
johntmyers
committed
fix(ocsf): remove timestamp from shorthand format to avoid double-timestamp
johntmyers
committed
refactor(ocsf): replace single-char severity with bracketed labels
johntmyers
committed
feat(sandbox): use OCSF level label for structured events in log push
johntmyers
committed
fix(sandbox): convert new Landlock path-skip warning to OCSF
johntmyers
committed
fix(sandbox): use rolling appender for OCSF JSONL file
johntmyers
committed
fix(sandbox): address reviewer warnings for OCSF integration
johntmyers
committed
refactor(sandbox): rename ocsf_logging_enabled to ocsf_json_enabled
johntmyers
committed
fix(ocsf): add timestamps to shorthand file layer output
johntmyers
committed
fix(docker): touch openshell-ocsf source to invalidate cargo cache
johntmyers
committed
fix(ocsf): add OCSF level prefix to file layer shorthand output
johntmyers
committed
fix(ocsf): clean up shorthand formatting for listen and SSH events
johntmyers
committed
docs(observability): update examples with OCSF prefix and formatting fixes
johntmyers
committed
docs(agents): add OCSF logging guidance to AGENTS.md
johntmyers
committed
fix: remove workflow files accidentally included during rebase
johntmyers
committed
docs(observability): use sandbox connect instead of raw SSH
johntmyers
committed
fix(docs): correct settings CLI syntax in OCSF JSON export page
johntmyers
committed
fix(e2e): update log assertions for OCSF shorthand format
johntmyers
committed