All pull requests

Pull requests

• fix(server): budget SSH relays and service forwards separately

  #5063·ericcurtin opened Oct 30, 2026Contributor·5 of 6 tasks·

  ·
  1

  2

• fix(supervisor-network): add Windows root certificates to the sandbox CA bundle

  #5061·jquesnelle opened Oct 30, 2026·5 of 6 tasks·

  ·
  2

• fix(mxc): keep host supervisor proxy CA files in sandbox state

  #5059·jquesnelle opened Oct 30, 2026·5 of 6 tasks·

  ·
  2

• fix(mxc): attribute proxy connections regardless of reported TCP state

  #5057·jquesnelle opened Oct 30, 2026·4 of 6 tasks·

  ·
  2

• feat(server): keep pool sandbox sessions on their supervisor's gateway

  #5052·FrostGod opened Oct 29, 2026Collaborator·4 of 5 tasks·

  ·
  1

  1

• fix(vm): keep the compute driver socket under sun_path

  #5050·ericcurtin opened Oct 29, 2026Contributor·5 of 6 tasks·

  ·
  1

  2

• fix(ocsf): validate sandbox attribution against exported schemas

  #5048·aeilot opened Oct 29, 2026·6 tasks done·

  ·
  1

  4

• fix(crypto): let library consumers select their backend

  #5046·varshaprasad96 opened Oct 29, 2026Contributor·5 of 6 tasks·

  ·
  1

  2

• fix(cli): stage directory downloads so retries start clean

  #5045·ericcurtin opened Oct 29, 2026Contributor·4 of 6 tasks·

  ·
  1

  2

• feat(python): ship typed sync and async gRPC stubs

  #5040·maxdubrinsky opened Oct 29, 2026Collaborator·4 of 6 tasks·

  ·
  1

  1

• feat(ocsf)!: emit OCSF 1.8.0 only and deprecate the schema version knobs

  test:e2etopic:observability
  #5036·krishicks opened Oct 29, 2026Collaborator·6 of 7 tasks·

  ·
  1

  4

• feat(mxc): pass driver_config denied_paths to MXC deniedPaths

  #5033·jquesnelle opened Oct 29, 2026·4 of 6 tasks·

  ·
  10

• fix(ocsf): record redacted command in process launch events

  #5027·ericcurtin opened Oct 29, 2026Contributor·5 of 6 tasks·

  ·
  1

  2

• fix(ocsf): move sandbox container to device.container

  #5017·ericcurtin opened Oct 28, 2026Contributor·5 of 6 tasks·

  ·
  1

  3

• fix(network): restore Windows binary path normalization

  #5014·shailendra-nv opened Oct 28, 2026Collaborator·6 tasks done·

  ·
  3

• feat(policy): support Cedar in development builds

  #5006·drew opened Oct 28, 2026Collaborator·2/2·6 of 7 tasks·

  ·
  1

  2

• chore(build): add opt-in development feature bundles

  #5005·drew opened Oct 28, 2026Collaborator·1/2·5 tasks done·

  ·
  2

• fix(sdk/go): set up Listen tunnels in parallel

  #4995·ericcurtin opened Oct 28, 2026Contributor·4 of 6 tasks·

  ·
  1

  3

• feat(examples): add Cedar policies and demos

  #4991·drew opened Oct 28, 2026Collaborator·2/2·7 tasks done·

  ·
  1

  2

• fix(ci): make stable release publication retryable

  #4986·matthewgrossman opened Oct 27, 2026Member·6 of 7 tasks·

  ·
  4

• fix(server): defer reconciliation during sandbox lifecycle operations

  test:e2e
  #4983·TaylorMutch opened Oct 27, 2026Collaborator·6 tasks done·

  ·
  1

  1

• fix(supervisor): add configurable log directory

  #4982·ericcurtin opened Oct 27, 2026Contributor·5 of 6 tasks·

  ·
  1

  2

• fix(supervisor): render and detach full-screen TTY main processes correctly

  #4974·pimlock opened Oct 27, 2026Collaborator·4 of 5 tasks·

  ·
  1

• fix(ci): track Trivy image alerts by stable release lane

  #4971·SDAChess opened Oct 27, 2026Member·5 tasks done·

  ·
  2

• fix(cli): accept allow-encoded-slash in policy update

  #4968·ericcurtin opened Oct 27, 2026Contributor·4 of 6 tasks·

  ·
  1

  2