jokecode
rich / metatron-security Private

AI sandbox runtime — caging autonomous agents at ring-0

securityrustsandboxai
50 commits
Commits on 29 Sept 1969
  • a11y: cli accessibility — coloured logs respect NO_COLOR
    rich · 29 Sept
    db53784 View →
Commits on 26 Sept 1969
  • docs: README — architecture diagram
    rich · 26 Sept
    416aa92 View →
Commits on 23 Sept 1969
  • syscall: route execve through policy decision
    rich · 23 Sept
    d0f1635 View →
Commits on 20 Sept 1969
  • fix: TOCTOU in path resolution
    rich · 20 Sept
    9b1ad9f View →
Commits on 19 Sept 1969
  • feat: snapshot rollback on policy violation
    rich · 19 Sept
    f897e3f View →
Commits on 18 Sept 1969
  • chore: prune dependency graph — drop 7 crates
    rich · 18 Sept
    35b5b96 View →
Commits on 16 Sept 1969
  • tests: kernel-mode unit tests via kunit
    rich · 16 Sept
    a6565f4 View →
Commits on 12 Sept 1969
  • perf: cache policy decisions per-PID
    rich · 12 Sept
    4d4158f View →
Commits on 9 Sept 1969
  • docs: contributing guide for kernel hackers
    rich · 9 Sept
    ee37fe5 View →
Commits on 5 Sept 1969
  • syscall: deny io_uring outright for now
    rich · 5 Sept
    9c362ea View →
Commits on 2 Sept 1969
  • feat: agent-id propagation through fork+exec
    rich · 2 Sept
    9ebe36a View →
Commits on 30 Aug 1969
  • fix: signed/unsigned mix in capability check
    rich · 30 Aug
    914ff3a View →
Commits on 26 Aug 1969
  • audit: fuzz CageSpec deserialiser
    rich · 26 Aug
    45cac49 View →
Commits on 23 Aug 1969
  • refactor: hoist policy traits into shared crate
    rich · 23 Aug
    33e8814 View →
Commits on 20 Aug 1969
  • docs: ABI compat policy v1
    rich · 20 Aug
    3cec01e View →
Commits on 17 Aug 1969
  • feat: structured-output mode for policy logs
    rich · 17 Aug
    4131f45 View →
Commits on 16 Aug 1969
  • fix: leak of pinned page on policy reload
    rich · 16 Aug
    9465618 View →
Commits on 14 Aug 1969
  • perf: SLAB cache for SyscallContext
    rich · 14 Aug
    361ba93 View →
Commits on 12 Aug 1969
  • chore: licensing — switch to AGPL-3.0
    rich · 12 Aug
    c3913c8 View →
Commits on 9 Aug 1969
  • docs: roadmap for ring-0 telemetry
    rich · 9 Aug
    15c3955 View →