CASAN

T

thanhnvandClaude Opus 4.8 cb61d52936 feat(c6): TRUE runtime isolation via container (Plan-07 C6 / V22)

Upgrades the static-policy scaffold to real kernel isolation. sandbox-container.sh
runs the command in a locked-down container where the KERNEL neutralises escapes:
--network=none (no egress), --read-only rootfs (no out-of-workspace writes),
--pids-limit (fork bombs capped), --memory/--cpus, --cap-drop=ALL +
no-new-privileges, and ONLY the workspace bind-mounted (host $HOME/.ssh
unreachable). Wall-clock timeout goes through the portable tool-exec.sh (macOS
has no coreutils `timeout`); a timed-out container is force-removed.
sandbox-run.sh delegates here when CASAN_SANDBOX_MODE=container (default stays the
static scaffold → phase2 C6 + baseline unchanged); falls back if Docker absent.
phase-c6-sandbox-tests.sh: 6 checks (skip-aware) proving egress/host-read/
out-of-workspace-write fail INSIDE the sandbox while benign workspace writes
land on the host — validated live against Docker (busybox).

Baselines: run-casan4 35/35, adversarial 44/44, phase2 C6 29/29 unchanged.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-05 22:49:03 +09:00

.claude

docs(arch): add projectable visual architecture page (casan-architecture.html)

2026-07-05 12:48:32 +09:00

.gitea/workflows

fix(ci): self-heal mysql env-file read access in deploy preflight

2026-07-01 22:09:53 +09:00

00_SUBMISSION_PACKAGE

feat(h6): AgentOps hardening — live alerting, provider-API reconcile, hosted dashboard, window breaker (79→80)

2026-07-05 01:14:46 +09:00

AINative_OKR_CASAN5

feat(c6): TRUE runtime isolation via container (Plan-07 C6 / V22)