All pull requests

Pull requests

• windows: narrow the profile read grant to a listed set

  #767·ig-ant opened Oct 22, 2026Collaborator·

  ·

• windows: opt-in MXC BaseContainer backend

  #766·ig-ant opened Oct 21, 2026Collaborator·

  ·

• proxy: a SOCKS CONNECT to a mitmProxy host goes through the MITM socket

  #764·felixrieseberg opened Oct 21, 2026·

  ·

• fix(linux): harden CLI and network bridge lifetimes

  #763·EliasCodeFI opened Oct 21, 2026·

  ·

• test: require client evidence in network-denial checks

  #762·EliasCodeFI opened Oct 21, 2026·

  ·

• fix(tls-terminate): route outbound upstream leg through parent proxy

  #759·reginaldalfret opened Oct 21, 2026·

  ·
  1

• test: require workload evidence in sandbox boundary checks

  #758·EliasCodeFI opened Oct 21, 2026·

  ·

• Upgrade to MXC SDK 1.0.0 (PR #640 on 1.0.0)

  #757·ig-ant opened Oct 20, 2026Collaborator·

  ·

• linux: mount points hold across hosts that share a home

  #753·ronleizrowice-ant opened Oct 20, 2026Collaborator·

  ·
  

• Draft, not for merging: six pull requests merged together

  #751·ronleizrowice-ant opened Oct 20, 2026Collaborator·

  ·
  1

  

• macOS: denyMachLookup denies a lookup after every allow

  #741·connebs opened Oct 17, 2026·

  ·

• linux: a write deny that leads to a name that is no text lets the command start

  #737·dylan-conway opened Oct 16, 2026Collaborator·

  ·

• proxy: the ask callback is told which invocation asked

  #735·ken-jo opened Oct 16, 2026·

  ·
  1

• windows: protect the runner's threads from the sandboxed child

  #727·ig-ant opened Oct 15, 2026Collaborator·

  ·

• macOS: a caller can grant ioctl on the one terminal it spawns on

  #722·ken-jo opened Oct 15, 2026·

  ·
  1

• windows: wfp status reads partial when the set is incomplete, so a plain install repairs it

  #716·blairducrayoppat opened Oct 15, 2026·

  ·

• credentials: injectInto, where in a request a masked credential is substituted

  #715·carlostapiacl opened Oct 15, 2026·

  ·
  1

• windows: MXC backend with MXC SDK 0.9, replayed onto main for CI

  #713·ig-ant opened Oct 14, 2026Collaborator·

  ·

• windows: pass the JVM proxy agent to sandboxed commands

  #711·ig-ant opened Oct 14, 2026Collaborator·

  ·

• windows: fewer DACL rewrites per session, and non-blocking ACL calls

  #710·ig-ant opened Oct 14, 2026Collaborator·

  ·

• linux: an absent write-denied file reads as empty, not "Permission denied"

  #707·matteo-ms opened Oct 14, 2026·

  ·
  1

• Add .srt-settings.json to DANGEROUS_FILES (#275)

  #703·carlostapiacl opened Oct 13, 2026·

  ·
  1

• fix: retain macOS sandbox violations across stdout chunks

  #699·AaravMehta-07 opened Oct 12, 2026·

  ·
  1

  1

• Honor per-command sandbox policy overrides

  #695·goncalossilva opened Oct 11, 2026Contributor·

  ·
  3

• A deny keeps the symbolic links on the way to it in place

  #693·ronleizrowice-ant opened Oct 10, 2026Collaborator·

  ·
  1