feat: enforce container environment boundaries - #74

Merged

webup merged 42 commits into

feature/train-b-container-boundary

Aug 20, 2026

Commits on Aug 20, 2026

feat: define explicit container environment policies
webup
committed
783ca81
fix: keep container policies out of docker execution
webup
committed
a245534
fix: model preloaded dev container assignment
webup
committed
62de6d1
feat: isolate Docker run payload transport
webup
committed
dd0a3b3
fix: reject Windows carrier collisions
webup
committed
afadc90
feat: isolate Compose substitution environment
webup
committed
a273b9a
fix: harden secure artifact cleanup
webup
committed
e3f5874
fix: accept safe inherited Windows ACLs
webup
committed
8707a54
chore: prepare agentseek-api 0.3.0
webup
committed
5d16486
feat: materialize sanitized container build bundles
webup
committed
c25c67d
fix: enforce sanitized container CLI handoff
webup
committed
e4d3a03
fix: secure nested bundle output paths
webup
committed
04952a3
feat: enforce preloaded container image contract
webup
committed
30c28ea
fix: harden preloaded image construction
webup
committed
6d527e4
fix: allow successful image verification
webup
committed
1b62b04
feat: enforce preloaded container runtime contract
webup
committed
4f42371
fix: isolate preloaded runtime startup
webup
committed
6b49aad
fix: isolate image bootstrap commands
webup
committed
13cbad0
fix: preserve safe custom image entrypoints
webup
committed
3947c4f
fix: fail closed before container side effects
webup
committed
af287a3
fix: sweep expired build directories safely
webup
committed
ccc1ffe
test: prove container environment boundaries
webup
committed
85305e7
fix: close container proof archive and cleanup gaps
webup
committed
e36a2bd
fix: make hosted container proof executable
webup
committed
c637f0e
test: expose hosted container proof failures
webup
committed
5958c13
fix: preserve candidate wheel and bundle bytes
webup
committed
74690e3
fix: close hosted container portability gaps
webup
committed
b6c8cb6
test: expose hosted boundary failure locations
webup
committed
624420d
fix: verify hosted image and Windows trees
webup
committed
2818160
fix: canonicalize real Docker layer members
webup
committed
b8e924f
fix: scan reused OCI image layers
webup
committed
50a433f
fix: support Compose floor proof execution
webup
committed
a719401
fix: align CLI smoke with candidate wheel name
webup
committed
07a3b0c
test: expose value-free hosted startup failure
webup
committed
40b2401
fix: launch smoke from generated project
webup
committed
519ed41
fix: activate baked auth in CLI smoke
webup
committed
d403583
fix: bind generated container runtime execution
webup
committed
4d0a8cf
test: keep Docker boundary assertions platform-native
webup
committed
a59478c
ci: build Redis runtime from candidate wheel
webup
committed
92c7af3
fix: keep Redis candidate inside build root
webup
committed
cea8203
fix: launch Redis proof in preloaded mode
webup
committed
c0c043d
fix: carry auth into Redis proof containers
webup
committed
1548c1d