Anandan 96859c9bd1 feat(sandbox): unify command execution and enforcement (#781) ...

* feat(sandbox): unify command execution and enforcement

* test(sandbox): make platform contracts portable

* fix(sandbox): close execution lifecycle races

Bound retained interactive output, preserve interruption state, and start workspace observation before process launch.

Protect active runtime roots with cross-platform leases, capture transient protected-path creation events, and restore process attributes after PTY fallback.

* fix(sandbox): restore strict macOS isolation

Remove Seatbelt host-local network allowances after native validation showed localhost filters can reach host interfaces.

Track process reap completion so retained sessions cannot signal a stale numeric PID.

2026-07-21 18:55:13 +05:30

..

manager_test.go

Background: escalate process termination from SIGTERM to SIGKILL (#134)

2026-06-08 08:37:44 +05:30

manager.go

Background: escalate process termination from SIGTERM to SIGKILL (#134)

2026-06-08 08:37:44 +05:30

process_posix_test.go

Deep-audit remediation + sandbox hardening (batches 1–35) (#189)

2026-06-13 21:32:48 +05:30

process_posix.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

process_windows.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

terminate.go

Deep-audit remediation + sandbox hardening (batches 1–35) (#189)

2026-06-13 21:32:48 +05:30