df658e7ef9
feat: TTL enforcement and operational hardening (SAND-WP-0009)
...
Add TTL parser, expires_at on create, extend_ttl and expire/reap APIs,
activity-core integration doc, repo classification, registry refresh,
HTTP parity, and 69 tests.
2026-06-24 12:44:04 +02:00
ee304f313d
docs: post-WP-0007 gap analysis and SAND-WP-0009 workplan
...
Assess remaining INTENT gaps after snapshots; propose TTL enforcement,
platform hygiene, and HTTP parity as the next implementation track.
2026-06-24 12:36:56 +02:00
952cebf2e9
feat: snapshot/restore checkpoints (SAND-WP-0007)
...
Add workspace checkpoint API with SnapshotStore, extension hooks on
compose-ssh and saas-stub, manager orchestration, CLI/HTTP surface,
profile.compose-checkpoint, and docs/tests.
2026-06-24 07:57:40 +02:00
1415e17230
Implement SAND-WP-0006: SaaS payments, routing, and ext.saas-stub
...
Add credits store, metering on create/destroy, extension routing resolver,
metered SaaS stub extension, burst/saas profiles, credits CLI, docs, and tests.
2026-06-24 07:52:20 +02:00
cec0fc6348
Implement SAND-WP-0005: extension SDK and ext.vm-packer
...
Add SandboxExtension base class, extension SDK docs, vm-packer attach mode
for build-machines VMs, profile.vm-haskell-build, SSH port support, tests,
and migration docs.
2026-06-24 01:47:07 +02:00
1594bceec1
Finish SAND-WP-0004: mark e2e-framework migration arc complete
...
Update migration-gaps, SCOPE, and workplan status after the-custodian
make e2e shim delegates to validate run.
2026-06-23 21:43:53 +02:00
e7d31b7f55
Finish SAND-WP-0003: wise-validator extraction workplan
...
Add workplan, update migration-gaps delivered table, and extend sand-boxer
e2e.yml with health check for validate run self-smoke.
2026-06-23 21:37:08 +02:00
c0a9261cdc
Implement SAND-WP-0008: host telemetry and self-canary
...
Add profile.sandbox-canary, HostSnapshot/inventory/stale schemas, SSH
collectors, before/after provision deltas, telemetry export to State Hub
and local JSON, default `sandboxer create` self-deploy, inspect/reap-stale
CLI, runbook, and CoulombCore verification (26 tests pass).
2026-06-23 19:53:51 +02:00
8e0465865a
Finish SAND-WP-0002: remote smoke, podman-compose, HTTP stub
...
- T10 smoke passed on CoulombCore (sand-boxer self-deploy, sandbox 4e542c51)
- Add e2e smoke compose, scripts/smoke-compose-e2e.sh, make smoke-remote
- Support SANDBOXER_COMPOSE_CMD for podman-compose hosts
- FastAPI v0 stub at sandboxer.api.app; migration gaps doc
- Mark workplan finished (all 10 tasks done)
2026-06-23 16:52:29 +02:00
939c4e1aff
Fix SSH auth: respect ~/.ssh/config instead of defaulting to root
...
CoulombCore (92.205.130.254) authenticates as tegwick via id_ops in
ssh config, not root. Omit SANDBOXER_SSH_USER to let OpenSSH apply config;
set SANDBOXER_SSH_USER only to override.
2026-06-23 14:16:16 +02:00
d6d3155792
Implement SAND-WP-0002 meta-framework foundation (T01–T09)
...
Add meta-framework spec, pydantic schemas, profile/extension YAML, extension
registry, ext.compose-ssh backend, SandboxManager with State Hub events, CLI
commands, integration docs, capability registry entry, and compose-e2e runbook.
Nine unit tests pass. T10 remote smoke test remains for operator.
2026-06-22 23:27:31 +02:00
