Repository navigation

All pull requests

Labels (10)Milestones (0)New pull request

Open

(165)

Closed

(434)

windows: correct the npx command for windows-install
#774ant-kurt opened Oct 23, 2026Collaborator
proxy: rsync gets the proxy credential in RSYNC_PROXY
#770luiacuaniello opened Oct 23, 2026
proxy: an allow-listed private address is reached through the proxy
#769luiacuaniello opened Oct 23, 2026
windows: document what a deny on a missing path leaves on disk
#768ken-jo opened Oct 23, 2026
windows: narrow the profile read grant to a listed set
#767ig-ant opened Oct 22, 2026Collaborator
windows: opt-in MXC BaseContainer backend
#766ig-ant opened Oct 21, 2026Collaborator
fix(linux): harden CLI and network bridge lifetimes
#763EliasCodeFI opened Oct 21, 2026
test: require client evidence in network-denial checks
#762EliasCodeFI opened Oct 21, 2026
fix(tls-terminate): route outbound upstream leg through parent proxy
#759reginaldalfret opened Oct 21, 2026
test: require workload evidence in sandbox boundary checks
#758EliasCodeFI opened Oct 21, 2026
Upgrade to MXC SDK 1.0.0 (PR #640 on 1.0.0)
#757ig-ant opened Oct 20, 2026Collaborator
linux: mount points hold across hosts that share a home
#753ronleizrowice-ant opened Oct 20, 2026Collaborator
Draft, not for merging: six pull requests merged together
#751ronleizrowice-ant opened Oct 20, 2026Collaborator
1
macOS: denyMachLookup denies a lookup after every allow
#741connebs opened Oct 17, 2026
linux: a write deny that leads to a name that is no text lets the command start
#737dylan-conway opened Oct 16, 2026Collaborator
proxy: the ask callback is told which invocation asked
#735ken-jo opened Oct 16, 2026
windows: protect the runner's threads from the sandboxed child
#727ig-ant opened Oct 15, 2026Collaborator
macOS: a caller can grant ioctl on the one terminal it spawns on
#722ken-jo opened Oct 15, 2026
windows: wfp status reads partial when the set is incomplete, so a plain install repairs it
#716blairducrayoppat opened Oct 15, 2026
credentials: injectInto, where in a request a masked credential is substituted
#715carlostapiacl opened Oct 15, 2026
windows: MXC backend with MXC SDK 0.9, replayed onto main for CI
#713ig-ant opened Oct 14, 2026Collaborator
windows: pass the JVM proxy agent to sandboxed commands
#711ig-ant opened Oct 14, 2026Collaborator
windows: fewer DACL rewrites per session, and non-blocking ACL calls
#710ig-ant opened Oct 14, 2026Collaborator
linux: an absent write-denied file reads as empty, not "Permission denied"
#707matteo-ms opened Oct 14, 2026
1
Add .srt-settings.json to DANGEROUS_FILES (#275)
#703carlostapiacl opened Oct 13, 2026

Navigation Menu

Repository navigation

All pull requests

windows: correct the npx command for windows-install

proxy: rsync gets the proxy credential in RSYNC_PROXY

proxy: an allow-listed private address is reached through the proxy

windows: document what a deny on a missing path leaves on disk

windows: narrow the profile read grant to a listed set

windows: opt-in MXC BaseContainer backend

fix(linux): harden CLI and network bridge lifetimes

test: require client evidence in network-denial checks

fix(tls-terminate): route outbound upstream leg through parent proxy

test: require workload evidence in sandbox boundary checks

Upgrade to MXC SDK 1.0.0 (PR #640 on 1.0.0)

linux: mount points hold across hosts that share a home

Draft, not for merging: six pull requests merged together

macOS: denyMachLookup denies a lookup after every allow

linux: a write deny that leads to a name that is no text lets the command start

proxy: the ask callback is told which invocation asked

windows: protect the runner's threads from the sandboxed child

macOS: a caller can grant ioctl on the one terminal it spawns on

windows: `wfp status` reads `partial` when the set is incomplete, so a plain `install` repairs it

credentials: injectInto, where in a request a masked credential is substituted

windows: MXC backend with MXC SDK 0.9, replayed onto main for CI

windows: pass the JVM proxy agent to sandboxed commands

windows: fewer DACL rewrites per session, and non-blocking ACL calls

linux: an absent write-denied file reads as empty, not "Permission denied"

Add .srt-settings.json to DANGEROUS_FILES (#275)

Pull requests