fix(ci): secure and bound every sandbox evidence stream - #767

Closed

seonghobae wants to merge 94 commits into

mainfrom

fix/sandboxed-output-resource-bounds

Commits on Aug 5, 2026

fix(ci): redact sandboxed verification output
seonghobae
committed
aa6dbec
fix(ci): redact sandboxed web E2E output
seonghobae
committed
06f1dcd
test(ci): cover secret-safe sandbox output
seonghobae
committed
df52aa3
docs(doctoring): record sandbox log redaction boundary
seonghobae
committed
014f30c
test(ci): require complete sandbox output redaction
seonghobae
committed
e165834
fix(ci): redact every sandbox evidence publication sink
seonghobae
committed
d71f133
docs(ci): cover every sandbox evidence redaction sink
seonghobae
committed
27bb444
test(ci): reject JSON-value credential disclosure
seonghobae
committed
f538053
fix(ci): redact credential-shaped JSON values recursively
seonghobae
committed
4d61304
test(ci): reject credential-shaped JSON object keys
seonghobae
committed
03c9c94
fix(ci): redact credential-shaped JSON object keys
seonghobae
committed
0fab425
test(ci): bound assignment redaction scanning work
seonghobae
committed
87a6743
perf(ci): make assignment redaction a bounded forward scan
seonghobae
committed
5cf890b
docs(ci): record recursive and bounded log redaction
seonghobae
committed
02d50bb
build(security): align Strix dependency snapshots
seonghobae
committed
9f92c3d
docs(ci): record complete sandbox evidence redaction
seonghobae
committed
36f358d
test(ci): isolate provider-pattern JSON key coverage
seonghobae
committed
eb07d6b
test(ci): complete central redaction behavior coverage
seonghobae
committed
ea38588
test(ci): require complete Authorization header redaction
seonghobae
committed
45dc74f
test(ci): preserve standalone auth scheme evidence safely
seonghobae
committed
c832714
fix(ci): consume complete Authorization header values
seonghobae
committed
13323b1
test(ci): cover complete redactor branch and entry contracts
seonghobae
committed
cb533a8
test(redaction): cover echoed separate secret options
seonghobae
committed
17d7d46
docs: design bounded sandbox output resources
seonghobae
committed
624403b
docs: plan bounded sandbox output resources
seonghobae
committed
a7c5cca
test(ci): require bounded sandbox subprocess output
seonghobae
committed
b301897
feat(ci): bound child output with POSIX file limits
seonghobae
committed
f6f0a07
fix(redaction): scrub echoed separate secret options
seonghobae
committed
d4065bf
test(ci): require bounded sandbox verification output
seonghobae
committed
4553a5a
fix(ci): bound sandbox verification output
seonghobae
committed
43d5700
test(ci): require bounded service and E2E output
seonghobae
committed
b23fc23
test(ci): require bounded pipe draining without child file limits
seonghobae
committed
8461b7d
fix(ci): drain bounded subprocess pipes without limiting child files
seonghobae
committed
23efe55
fix(ci): bound sandbox service and E2E output
seonghobae
committed
6f84d7f
test(ci): adapt redaction evidence to bounded output wrappers
seonghobae
committed
93d2f00
docs: correct bounded output design to pipe draining
seonghobae
committed
72b65e3
docs: correct bounded output plan to continuous pipe drains
seonghobae
committed
a978b20
docs(ci): record bounded sandbox output evidence
seonghobae
committed
f5cd2aa
docs(ci): record bounded sandbox output behavior
seonghobae
committed
091d27f
Merge 091d27f13f873ea0af46cb33075eadc51465699c into d4065bf322279fae97a3de85518116270d65e3ad
seonghobae
authored
71f4c1f
fix(ci): separate bounded output from result evidence marker
seonghobae
committed
5ef4c52
fix(ci): separate E2E output from result evidence marker
seonghobae
committed
d4db1cd
test(ci): complete bounded subprocess branch contracts
seonghobae
committed
c00bd88
test(ci): complete bounded web E2E branch contracts
seonghobae
committed
c7b5515
test(ci): finalize both bounded stream readers on failure
seonghobae
committed
f12bb24
test(ci): require service cleanup when capture startup fails
seonghobae
committed
3471bd9
fix(ci): finalize every bounded stream reader
seonghobae
committed
915e281
fix(ci): preserve sandbox result compatibility
seonghobae
committed
f7e2449
fix(ci): reap failed service captures
seonghobae
committed
1f4e20f
test(ci): align sandbox E2E doubles with bounded execution
seonghobae
committed
1924257
test(ci): isolate readiness log-limit fixtures
seonghobae
committed
0faa3a8
fix(ci): align scheduled CodeQL action revisions
seonghobae
committed
32c2738
test(ci): require capture startup cleanup
seonghobae
committed
945709b
fix(ci): close service pipes when capture startup fails
seonghobae
committed
41630d4
test(ci): reproduce bounded capture startup orphaning
seonghobae
committed
9ca0db5
ci: execute bounded capture startup regression
seonghobae
committed
2c9d405
ci: apply PR 767 capture-startup fix after red proof
seonghobae
committed
7934b9a
fix(ci): make PR 767 repair exact-head and ref-safe
seonghobae
committed
6e22bcc
fix(ci): make capture repair anchor-independent
seonghobae
committed
b695ddd
fix(ci): reap partial bounded capture startup
github-actions[bot]
authored
96018a7
test(ci): repair capture-startup cleanup from verified red cases
seonghobae
committed
c8a86dc
chore(ci): remove completed PR 767 branch writer
seonghobae
committed
f44ec98
ci: verify PR 767 completed-process polling fix
seonghobae
committed
17336a1
ci: retry PR 767 completed-process polling repair
seonghobae
committed
08ac103
ci: verify PR 767 polling and hermetic Git regressions
seonghobae
committed
97e22d7
ci(pr767): harden and rerun completed-process repair
seonghobae
committed
a950818
ci: finalize PR 767 polling and Git isolation repair
seonghobae
committed
7eb5188
ci: run final PR 767 polling repair verification
seonghobae
committed
e4ddf70
test(coverage): expose sandbox entrypoint and cleanup gaps
seonghobae
committed
edb328e
ci: stage exact-head PR 767 coverage timeout repair
seonghobae
committed
1420c6b
ci(pr767): bound and clean completed-process repair
seonghobae
committed
9b9d984
fix(opencode): reap completed model attempts
github-actions[bot]
committed
0bd3d88
chore(ci): remove superseded PR 767 timeout experiment
seonghobae
committed
36afcf8
ci: trigger exact-head PR 767 review repairs
seonghobae
committed
a2475af
ci(pr767): verify current review fixes
seonghobae
committed
16e1b61
test(ci): isolate Git ownership contract from runner config
seonghobae
committed
1dee6d3
ci: rerun PR 767 review repairs hermetically
seonghobae
committed
dc05f73
test(ci): reproduce unbounded capture join
seonghobae
committed
0d1c792
test(ci): reproduce bare token over-redaction
seonghobae
committed
e5cdf11
test(ci): prove service overflow blocks E2E execution
seonghobae
committed
a91bc84
fix(ci): bound normal-path capture joins
seonghobae
committed
ac1fa27
fix(ci): require dash prefix for option-value redaction
seonghobae
committed
8f4dd8e
fix(test): use the real backend readiness option
seonghobae
committed
8657f36
docs(ci): record final sandbox review repairs
seonghobae
committed
1e2f9b4
docs(ci): bound inherited-pipe finalization evidence
seonghobae
committed
5fc9b64
docs(ci): preserve ordinary command operands during redaction
seonghobae
committed
16143d1
chore(pr767): remove superseded repair script
seonghobae
committed
24a1378
chore(pr767): remove superseded isolation helper
seonghobae
committed
0dc1979
chore(pr767): remove superseded repair workflow v2
seonghobae
committed
3bc52ff
chore(pr767): remove superseded repair workflow
seonghobae
committed
28a86e2
chore(pr767): remove duplicate review-fix workflow
seonghobae
committed
a4674c4
ci(pr767): verify final sandbox evidence repairs
seonghobae
committed
3a04c83
chore(ci): remove completed PR 767 cleanup workflow
seonghobae
committed
45e4929
ci(pr767): focus sandbox evidence bounds on current main
seonghobae
committed
37e6f61