8 Commits

Include renames

Author	SHA1	Message	Date
Timothy J. Aveni	1b91e21d49	Keep restricted engines reserved through asynchronous retirement	2026-10-08 05:21:10 -07:00
Timothy J. Aveni	dec3aa475a	Expose workspace-scoped restricted artifact placement and live executor activity ... Show per-export placement, static eligibility blockers, bounded metadata and live pool/idle/timing diagnostics. Attach inspector updates through one private shard stream and the existing authenticated SSE hub without waking graph views or VMs. Fix packed agent preparation to use OpenSSH and the worker’s own private systemd credential.	2026-10-08 04:31:16 -07:00
Timothy J. Aveni	b1397465ee	Admit checked restricted artifacts without individual code approvals	2026-10-07 21:43:44 -07:00
Timothy J. Aveni	b5046ad680	Confine restricted engines before launch and preserve the reader recovery baseline	2026-10-07 20:47:53 -07:00
Timothy J. Aveni	d6e66b537f	Pool host-approved restricted code with scoped and fair graph execution	2026-10-07 16:47:19 -07:00
Timothy J. Aveni	929fdb4a28	Reuse restricted engines with fresh invocation state and revocable ports	2026-10-07 16:14:15 -07:00
Timothy J. Aveni	f934347041	Bound checked candidate metadata and restricted invocation resources	2026-10-07 15:51:22 -07:00
Timothy J. Aveni	47fcb47d5c	Implement VM-scoped restricted registry transport	2026-10-07 04:04:32 -07:00