coreci/nextcraft
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 24 Wiki Activity

24 Releases 30 Tags

RSS Feed
  • v0.2.2 f0df18576e
    Compare

    v0.2.2 — v0.3 Phase 1 (sandbox fabric) Pre-Release

    coreci-bot released this 2026-09-12 00:47:45 +00:00 | 53 commits to main since this release

    Milestone v0.3 Credential Engines — Phase 1 Sandbox Fabric shipped.

    • SandboxBackend protocol + UnshareBackend (Linux user/mount/pid/net namespaces) — probe-verified on this box (in-ns uid=0, network isolated, writes contained)
    • Lifecycle manager + concurrency guard (503 when full) + startup orphan reaper
    • Resource limits: memory/CPU/single-file rlimits + wall-clock reaper kernel-enforced; 512MB workdir-size sweep; per-sandbox pids/hard-disk-quota documented as accepted v0.3 gaps (no cgroup/sudo on box)
    • Abuse control (no-auth): learner allowlist (403), per-learner cap (429), create-rate cap (429)

    174 tests green; ruff clean; /v1/sandboxes lifecycle verified live. Known v0.3 gap: userns is not a DAC barrier + killing the supervisor doesn't kill in-ns children — disclosed for full hardening in the post-MVP containerd backend.

    Downloads