All pull requests

Pull requests

• fix(supervisor): report isolation backend Attach refusals to the gateway

  #4791·shiju-nv opened Oct 21, 2026Collaborator·6 of 7 tasks·

  ·
  1

  1

• feat(sdk): route Rust SDK exec to the sandbox owner replica

  #4790·FrostGod opened Oct 21, 2026Collaborator·4 of 6 tasks·

  ·
  2

• feat(ocsf): correlate audit events with sampled OpenTelemetry traces

  #4789·HarryMoss opened Oct 21, 2026·3 of 4 tasks·

  ·
  1

  5

• fix(e2e): avoid stale Kubernetes reports

  #4788·danehans opened Oct 21, 2026Contributor·5 of 7 tasks·

  ·
  1

  2

• refactor(auth): prototype unified sandbox launch identity

  #4787·drew opened Oct 21, 2026Collaborator·8 of 9 tasks·

  ·
  1

  1

• refactor(ocsf): share builder setters and formatting helpers

  #4779·krishicks opened Oct 20, 2026Collaborator·5 of 6 tasks·

  ·

• test(auth): share fixtures for gateway audit event tests

  #4778·krishicks opened Oct 20, 2026Collaborator·3/3·5 of 6 tasks·

  ·

• refactor(auth): share audit helpers for gateway denials and rejections

  #4777·krishicks opened Oct 20, 2026Collaborator·2/3·5 of 6 tasks·

  ·

• feat(runner): add the test runner, plans and tmachine Session API

  #4775·matthewgrossman opened Oct 20, 2026Member·4/4·5 of 6 tasks·

  ·
  2

• test(suites): move the conformance, oci-image, provider-refresh and podman suites to testkit

  #4774·matthewgrossman opened Oct 20, 2026Member·3/4·6 tasks done·

  ·
  2

• test(sandbox): add the first testkit suite and run it in Branch E2E

  #4773·matthewgrossman opened Oct 20, 2026Member·2/4·6 tasks done·

  ·
  2

• feat(sandbox): add suspend and resume lifecycle

  #4765·drew opened Oct 20, 2026Collaborator·10 tasks done·

  ·
  1

• feat(auth): emit OCSF events for SSH session and sandbox token checks

  #4762·krishicks opened Oct 20, 2026Collaborator·1/3·6 of 7 tasks·

  ·
  1

  4

• docs(windows): route main documentation to the Windows release branch

  #4758·shailendra-nv opened Oct 20, 2026Collaborator·9 tasks done·

  ·
  2

  5

• docs(windows): document the Windows implementation and release branch

  #4757·shailendra-nv opened Oct 20, 2026Collaborator·7 tasks done·

  ·
  3

• feat(kubernetes): support sandbox supervisor anti-affinity

  #4750·russellb opened Oct 20, 2026Contributor·6 tasks done·

  ·
  1

  3

• chore(ci): update rust-cache to include upstream fixes

  #4748·SDAChess opened Oct 20, 2026Member·4 tasks done·

  ·

• feat(audit): audit credential disclosure reads

  #4745·ericcurtin opened Oct 20, 2026Contributor·5 of 6 tasks·

  ·
  1

  2

• feat(agents): support Kubernetes Gators with reusable tooling images

  #4744·johntmyers opened Oct 20, 2026Collaborator·5 of 6 tasks·

  ·
  1

• fix(gateway): report isolation backend mismatches in sandbox status

  #4738·shiju-nv opened Oct 20, 2026Collaborator·5 of 6 tasks·

  ·
  1

  2

• fix(policy): keep MCP tool selectors in agent proposals

  #4736·shiju-nv opened Oct 20, 2026Collaborator·5 of 6 tasks·

  ·
  1

• feat(policy): freeze a sandbox's effective policy for its lifetime

  #4735·shiju-nv opened Oct 20, 2026Collaborator·5 of 6 tasks·

  ·
  1

  1

• feat(gateway): broker stable sandbox SPIFFE provider tokens

  #4732·drew opened Oct 20, 2026Collaborator·5/5·7 tasks done·

  ·
  1

  2

• test(testkit): add the testkit library for end-to-end suites

  #4724·matthewgrossman opened Oct 19, 2026Member·1/4·8 of 10 tasks·

  ·
  2

• docs(rfc): propose gateway MCP for creating child sandboxes (RFC 0021)

  #4721·patkraw opened Oct 19, 2026·4 of 6 tasks·

  ·
  1

  20