Timothy J. Aveni a9f42e14c3 Include canonical hashing in restricted package execution

2026-10-08 01:03:14 -07:00

..

default.nix

Include canonical hashing in restricted package execution

2026-10-08 01:03:14 -07:00

identity-launcher.c

Admit checked restricted artifacts without individual code approvals

2026-10-07 21:43:44 -07:00

identity-module.nix

Admit checked restricted artifacts without individual code approvals

2026-10-07 21:43:44 -07:00

sandbox-probe.c

Confine restricted engines before launch and preserve the reader recovery baseline

2026-10-07 20:47:53 -07:00

sandbox.c

Admit checked restricted artifacts without individual code approvals

2026-10-07 21:43:44 -07:00

sandbox.nix

Confine restricted engines before launch and preserve the reader recovery baseline

2026-10-07 20:47:53 -07:00

seccomp.c

Confine restricted engines before launch and preserve the reader recovery baseline

2026-10-07 20:47:53 -07:00

service.mjs

Admit checked restricted artifacts without individual code approvals

2026-10-07 21:43:44 -07:00

service.test.mjs

Include canonical hashing in restricted package execution

2026-10-08 01:03:14 -07:00

worker.mjs

Reuse restricted engines with fresh invocation state and revocable ports

2026-10-07 16:14:15 -07:00

workerd.nix

Admit checked restricted artifacts without individual code approvals

2026-10-07 21:43:44 -07:00