Repository navigation

feat(windows): add brokered AppContainer sandbox support - #2961

Merged

liugddx merged 100 commits into

apache:mainfrom

liugddx:feat/windows-sandbox-w0-spike

Aug 17, 2026

Commits on Aug 14, 2026
- test(windows): establish sandbox W0 evidence contract
  liugddx
  committed
  308d903
- style(windows): format W0 evidence scripts
  liugddx
  committed
  996559e
- feat(windows): spike restricted process launcher
  liugddx
  committed
  4893997
- style(windows): normalize launcher manifest
  liugddx
  committed
  63ebf16
- fix(windows): use token launch without assign privilege
  liugddx
  committed
  f017099
- fix(windows): scope token launcher job evidence
  liugddx
  committed
  d4d5c67
- fix(windows): request explicit restricted token
  liugddx
  committed
  e2ca056
- fix(windows): bound launcher child wait
  liugddx
  committed
  74569de
- fix(windows): import wait result constants
  liugddx
  committed
  99cf55a
- fix(windows): preserve child path separators
  liugddx
  committed
  8d5aa65
- fix(windows): pass explicit child executable
  liugddx
  committed
  665b72e
- fix(windows): pass minimal child environment
  liugddx
  committed
  4aae506
- test(windows): isolate process evidence from Node
  liugddx
  committed
  01273f7
- style(windows): make unsafe probe calls explicit
  liugddx
  committed
  d447299
- test(windows): record bounded token candidate failure
  liugddx
  committed
  148b23a
- fix(windows): tighten W0 evidence contracts
  liugddx
  committed
  f8f14f3
- style(windows): format path contract tests
  liugddx
  committed
  4e72370
- test(windows): record atomic launch capability
  liugddx
  committed
  093d6e6
- ci(windows): record atomic launcher capability
  liugddx
  committed
  1cabbaa
- feat(windows): add atomic Job launch candidate
  liugddx
  committed
  35107ad
- feat(windows): define broker launch authorization contract
  liugddx
  committed
  9bb1723
- feat(windows): validate broker requests through launcher
  liugddx
  committed
  213b163
- feat(windows): enforce broker launch authorization
  liugddx
  committed
  6887de4
- ci(windows): test broker authorization contract
  liugddx
  committed
  2baab26
- feat(windows): bound broker IPC frames
  liugddx
  committed
  9f29798
- feat(windows): add secure broker named pipe
  liugddx
  committed
  074234b
- fix(windows): stream broker pipe frames exactly
  liugddx
  committed
  27e3c0c
- fix(windows): read broker responses exactly
  liugddx
  committed
  d5ce80c
- fix(windows): flush broker response before disconnect
  liugddx
  committed
  41af772
- feat(windows): hand authorized broker requests to atomic launch
  liugddx
  committed
  c2f787b
- feat(runtime): compile Windows sandbox permission profiles
  liugddx
  committed
  e2088d4
- style(runtime): format Windows sandbox profile compiler
  liugddx
  committed
  1c67ef8
- feat(runtime): add Windows broker sandbox backend
  liugddx
  committed
  2092c13
- fix(runtime): propagate Windows sandbox backend type
  liugddx
  committed
  3520564
- feat(windows): add broker client transport
  liugddx
  committed
  0781f7a
- feat(windows): probe AppContainer identity boundary
  liugddx
  committed
  75ed7ab
- fix(windows): normalize successful broker smoke exit
  liugddx
  committed
  9764aec
- test(windows): verify AppContainer resource denial
  liugddx
  committed
  59cba71
- fix(runtime): align Windows sandbox diagnostics
  liugddx
  committed
  26b901a
- test(runtime): include Windows temp write root
  liugddx
  committed
  f8e63e1
- fix(windows): bind broker approval to launch policy
  liugddx
  committed
  f69950d
- feat(windows): launch broker requests in AppContainer
  liugddx
  committed
  8ecf368
- fix(windows): verify broker AppContainer handoff
  liugddx
  committed
  bcbc65f
- test(windows): prove AppContainer ACL allowlist
  liugddx
  committed
  e05dd4a
- feat(windows): recover AppContainer ACL grants
  liugddx
  committed
  52d8a01
- feat(windows): add one-shot broker lifecycle
  liugddx
  committed
  c547f1d
- feat(windows): package and register sandbox broker
  liugddx
  committed
  0eb67c8
- test(windows): make sandbox evidence blocking
  liugddx
  committed
  426fa4d
- docs(windows): define sandbox backend security contract
  liugddx
  committed
  84d9f65
- docs(windows): ground sandbox RFC in prior art
  liugddx
  committed
  28f6d2a
- docs(windows): freeze AppContainer sandbox design
  liugddx
  committed
  e32c97f
- test(windows): smoke packaged AppContainer broker
  liugddx
  committed
  8075f8b
- test(windows): clear expected reparse rejection status
  liugddx
  committed
  0e970d9
- fix(windows): preserve upgrade baseline contract
  liugddx
  committed
  b754bf3
Commits on Aug 15, 2026
- fix(windows): accept drive paths in sandbox boundaries
  liugddx
  committed
  2a888c2
- fix(windows): support exact file sandbox grants
  liugddx
  committed
  8be7578
- test(windows): prove exact file sandbox grants
  liugddx
  committed
  a8676db
- fix(windows): reject unsafe volume sandbox roots
  liugddx
  committed
  2ed2917
- fix(windows): stabilize filesystem tool execution
  liugddx
  committed
  5130b64
- style: format Windows sandbox changes
  liugddx
  committed
  47dd496
- style: format sandbox boundary validation
  liugddx
  committed
  90eed93
- fix(windows): address Copilot path boundary findings
  liugddx
  committed
  cfcc792
- fix(windows): harden sandbox review findings
  liugddx
  committed
  a8b8b87
- fix(windows): harden launcher argument and nonce handling
  liugddx
  committed
  0f16741
- fix(windows): preserve ACL recursion evidence
  liugddx
  committed
  e7b648a
- fix(windows): preserve exact sandbox root semantics
  liugddx
  committed
  5d59df6
- fix(windows): narrow exact path match handling
  liugddx
  committed
  5ebe23b
- fix(windows): serialize sandbox lifecycle safely
  liugddx
  committed
  bb34ac0
- fix(windows-sandbox): align package digest and recover ACL state
  liugddx
  committed
  2e50cc9
- docs: add windows sandbox pr handoff
  liugddx
  committed
  b031941
- docs: remove local sandbox handoff
  liugddx
  committed
  26b4496
- fix(windows-sandbox): make ACL recovery privilege-free and ledger-tolerant
  
  liugddx
  and
  claude
  committed
  dd8f415
- feat(windows-sandbox): relay worker stdio through the AppContainer child
  
  liugddx
  and
  claude
  committed
  5b15d85
- feat(runtime): run real filesystem-worker operations in the Windows sandbox
  
  liugddx
  and
  claude
  committed
  d7069db
- fix(windows-sandbox): keep the AppContainer profile registered across launches
  
  liugddx
  and
  claude
  committed
  cc06c83
- fix(ci): build runtime workspace deps in order and satisfy format check
  
  liugddx
  and
  claude
  committed
  4ba0c03
Commits on Aug 16, 2026
- fix(windows-sandbox): close pipe-squatting and metadata-case bypass
  
  liugddx
  and
  claude
  committed
  5196a18
- fix(windows-sandbox): accept real Windows environment names like CommonProgramFiles(x86)
  
  liugddx
  and
  claude
  committed
  cc7e32b
- fix(windows-sandbox): stop routing Bash through the broker on win32
  
  liugddx
  and
  claude
  committed
  b265538
- Merge remote-tracking branch 'upstream/main' into feat/windows-sandbox-w0-spike
  liugddx
  committed
  becec59
- fix(windows-sandbox): always pass an explicit environment block to CreateProcess
  
  liugddx
  and
  claude
  committed
  5d6fac6
- fix(windows-sandbox): reject broker request ids with NTFS-unsafe characters
  
  liugddx
  and
  claude
  committed
  86c4446
- fix(windows-sandbox): fill substrate environment variables into explicit blocks
  
  liugddx
  and
  claude
  committed
  fbd587e
- Merge remote-tracking branch 'upstream/main' into feat/windows-sandbox-w0-spike
  liugddx
  committed
  094e280
- Merge remote-tracking branch 'upstream/main' into feat/windows-sandbox-w0-spike
  liugddx
  committed
  2ab654e
- Merge remote-tracking branch 'upstream/main' into feat/windows-sandbox-w0-spike
  liugddx
  committed
  2a7e69b
- fix(windows): close AppContainer review findings
  liugddx
  committed
  29e2209
- test(windows): align broker smokes with network policy
  liugddx
  committed
  3890c31
- Merge remote-tracking branch 'upstream/main' into feat/windows-sandbox-w0-spike
  liugddx
  committed
  8b18d89
- docs: refresh Astryx surface inventory
  liugddx
  committed
  9f8ed59
- test(windows): isolate ACL recovery leases
  liugddx
  committed
  6755aba
- fix(windows): make Cargo notices reproducible
  liugddx
  committed
  6fe0bf7
- Merge remote-tracking branch 'upstream/main' into feat/windows-sandbox-w0-spike
  liugddx
  committed
  c6b5503
Commits on Aug 17, 2026
- fix(windows-sandbox): fail closed on hard links and cross-session ACL arbitration
  
  liugddx
  and
  claude
  committed
  c1978b6
- fix(windows-sandbox): stop exposing Grep inside the sandbox preview
  
  liugddx
  and
  claude
  committed
  98bef67
- fix(windows): start the packaged Electron worker inside the AppContainer
  
  liugddx
  and
  claude
  committed
  263e73f
- test(windows): execute the packaged Electron worker in the release evidence
  
  liugddx
  and
  claude
  committed
  7de7b5c
- fix(windows-sandbox): preserve recovery state when Job settlement is unproven
  
  liugddx
  and
  claude
  committed
  77415ed
- fix(windows-sandbox): keep exact writes exact by failing parent-entry shapes closed
  
  liugddx
  and
  claude
  committed
  24a099c
- style(runtime): collapse a two-entry array the formatter owns
  
  liugddx
  and
  claude
  committed
  781d7e0

Commits

Commits on Aug 14, 2026

Commits on Aug 15, 2026

Commits on Aug 16, 2026

Commits on Aug 17, 2026