Issues

• Verify the signed release runtime once per launch, as one verification of the whole runtime set (design for approval)

  tinylabscom/mvm#5515 · Filter by author auser opened on Nov 15, 2026
  2

• Density: smaller machines by default, memory and CPU returned to the host, and a smaller virtualization layer

  tinylabscom/mvm#5510 · Filter by author auser opened on Nov 14, 2026
  2

• Merge queue stalled

  tinylabscom/mvm#5507 · Filter by author github-actions opened on Nov 14, 2026

• FlowMux registry keeps Closed entries for the whole session

  tinylabscom/mvm#5493 · Filter by author auser opened on Nov 14, 2026

• HvfVm::create leaks the VM and the GIC config when GIC creation fails

  tinylabscom/mvm#5492 · Filter by author auser opened on Nov 14, 2026

• hvf/standby: a standby parent with a negative pid is left running

  tinylabscom/mvm#5491 · Filter by author auser opened on Nov 14, 2026

• hvf_restore: await_restored leaves the supervisor running on a negative pid or a missing agent socket

  tinylabscom/mvm#5490 · Filter by author auser opened on Nov 14, 2026

• libkrun driver: killed boot-timeout child is never waited on

  tinylabscom/mvm#5489 · Filter by author auser opened on Nov 14, 2026

• HVF on a developer Mac: a launch spends 2 to 4 s in admission, overlay attach, initramfs attach and VMM creation before the guest starts (warm and cold)

  tinylabscom/mvm#5487 · Filter by author auser opened on Nov 14, 2026
  10

• explain shows no egress denials for a run that claimed a warm standby: the refusal is recorded under the standby's machine name

  tinylabscom/mvm#5482 · Filter by author auser opened on Nov 14, 2026

• Keep runtime tree and seed executable modes stable under restrictive umask

  tinylabscom/mvm#5480 · Filter by author Casey-allard opened on Nov 14, 2026

• Run explicit capture commands in the selected project directory

  tinylabscom/mvm#5479 · Filter by author Casey-allard opened on Nov 14, 2026
  1

• Stabilize connected-guest mailbox outbox timing test on Hetzner shard

  tinylabscom/mvm#5478 · Filter by author auser opened on Nov 14, 2026

• Fix aarch64 privileged console witness PTY EIO on child exit

  tinylabscom/mvm#5473 · Filter by author auser opened on Nov 13, 2026

• Compose local manifest CPU and memory defaults without widening authority

  tinylabscom/mvm#5472 · Filter by author auser opened on Nov 13, 2026

• HVF: two guests launched at once on a cold MVM_HOME, one fails to start (safe HVF rollback unconfirmed)

  tinylabscom/mvm#5471 · Filter by author auser opened on Nov 13, 2026
  2

• Integrate resource-holder epoch exclusion with host lifecycle ownership

  tinylabscom/mvm#5466 · Filter by author auser opened on Nov 13, 2026
  1

• Complete typed SDK policy authoring and signed launch enforcement

  tinylabscom/mvm#5465 · Filter by author auser opened on Nov 13, 2026
  1

• Security lane is red

  tinylabscom/mvm#5462 · Filter by author github-actions opened on Nov 13, 2026
  4

• Authorize and read back the first composable production release

  tinylabscom/mvm#5430 · Filter by author auser opened on Nov 13, 2026

• Witness production composable admission and latency on x86_64 KVM

  tinylabscom/mvm#5429 · Filter by author auser opened on Nov 13, 2026

• Claim immutable warm standbys with fresh child admission

  tinylabscom/mvm#5427 · Filter by author auser opened on Nov 13, 2026

• Bind authenticated mvmd origin to composable production launch

  tinylabscom/mvm#5428 · Filter by author auser opened on Nov 13, 2026

• Admit composable bundles through one signed-plan gate

  tinylabscom/mvm#5426 · Filter by author auser opened on Nov 13, 2026

• Protect and sign a self-contained composable bundle candidate

  tinylabscom/mvm#5425 · Filter by author auser opened on Nov 13, 2026