Timothy J. Aveni
d6434efc28
Reuse checked bootstrap catalogs and coordinate execution deadlines
2026-10-09 17:10:14 -07:00
Timothy J. Aveni
1b91e21d49
Keep restricted engines reserved through asynchronous retirement
2026-10-08 05:21:10 -07:00
Timothy J. Aveni
dec3aa475a
Expose workspace-scoped restricted artifact placement and live executor activity
...
Show per-export placement, static eligibility blockers, bounded metadata and live pool/idle/timing diagnostics. Attach inspector updates through one private shard stream and the existing authenticated SSE hub without waking graph views or VMs. Fix packed agent preparation to use OpenSSH and the worker’s own private systemd credential.
2026-10-08 04:31:16 -07:00
Timothy J. Aveni
a9f42e14c3
Include canonical hashing in restricted package execution
2026-10-08 01:03:14 -07:00
Timothy J. Aveni
b1397465ee
Admit checked restricted artifacts without individual code approvals
2026-10-07 21:43:44 -07:00
Timothy J. Aveni
b5046ad680
Confine restricted engines before launch and preserve the reader recovery baseline
2026-10-07 20:47:53 -07:00
Timothy J. Aveni
dbd159be70
Keep checked browser runtime versions independent of authority upgrades
2026-10-07 17:03:01 -07:00
Timothy J. Aveni
d6e66b537f
Pool host-approved restricted code with scoped and fair graph execution
2026-10-07 16:47:19 -07:00
Timothy J. Aveni
929fdb4a28
Reuse restricted engines with fresh invocation state and revocable ports
2026-10-07 16:14:15 -07:00
Timothy J. Aveni
f934347041
Bound checked candidate metadata and restricted invocation resources
2026-10-07 15:51:22 -07:00
Timothy J. Aveni
47fcb47d5c
Implement VM-scoped restricted registry transport
2026-10-07 04:04:32 -07:00
Timothy J. Aveni