Repository navigation

feat: forward Linux CPU quota events through v2.2 stream - #68

Merged

senamakel merged 40 commits into

epic/8369-security-migrationfrom

sec-27-resource-events

Oct 27, 2026

Merged

feat: forward Linux CPU quota events through v2.2 stream#68
senamakel merged 40 commits into
epic/8369-security-migrationfrom
sec-27-resource-events

Commits on Oct 27, 2026
- test(tinybox-module): cover cpu quota cause forwarding before exit
  
  senamakel
  and
  medullabot
  committed
  01eefe1
- feat(runtime): report provider-proven cpu quota terminations
  
  senamakel
  and
  medullabot
  committed
  9fadb0e
- feat(core): export TerminationCause from runtime
  
  senamakel
  and
  medullabot
  committed
  cfec5f4
- feat(host): report cpu quota throttling from jailed executions
  
  senamakel
  and
  medullabot
  committed
  d9baaae
- feat(sandbox): sample cgroup cpu counters before the scope stops
  
  senamakel
  and
  medullabot
  committed
  0b5445a
- test(host): cover cpu throttling counter parsing and jail env
  
  senamakel
  and
  medullabot
  committed
  583358e
- test(sandbox): assert the jail command uses the configured binary
  
  senamakel
  and
  medullabot
  committed
  7dfc4a7
- docs: document cpu limit hit observation
  
  senamakel
  and
  medullabot
  committed
  19917c3
- test(sandbox): assert cpu event scope wrapper in native jail argv
  
  senamakel
  and
  medullabot
  committed
  ff229fa
- test(sandbox): assert cpu.stat in native jail argv
  
  senamakel
  and
  medullabot
  committed
  8f21c03
- test(sandbox): drop stale cpu.stat assertion from jail command test
  
  senamakel
  and
  medullabot
  committed
  e8ca72d
- test(sandbox): match cpu event file env var by substring
  
  senamakel
  and
  medullabot
  committed
  67cccc9
- test(sandbox): reformat cpu event file assertion
  
  senamakel
  and
  medullabot
  committed
  c17b61b
- test(sandbox): match cpu.stat as a substring in argv
  
  senamakel
  and
  medullabot
  committed
  bc01054
- refactor(limited): extract cpu event report helpers
  
  senamakel
  and
  medullabot
  committed
  570a97b
- refactor(limited): extract jail command setup into helper
  
  senamakel
  and
  medullabot
  committed
  89c01b4
- test(tinybox-module): drop unused Result from cpu quota observer test
  
  senamakel
  and
  medullabot
  committed
  ceae1af
- refactor(limited): extract runtime dir lookup into prepare_in
  
  senamakel
  and
  medullabot
  committed
  e28acae
- test(limited): add debug output to cpu event report test
  
  senamakel
  and
  medullabot
  committed
  713f68e
- test(limited): tighten permissions on temp dir in cpu event report test
  
  senamakel
  and
  medullabot
  committed
  6c0f04a
- test(limited): move permissions import above tempdir setup
  
  senamakel
  and
  medullabot
  committed
  533514c
- fix(limited): reject runtime dirs outside /run before preparing cpu event report
  
  senamakel
  and
  medullabot
  committed
  3696cbc
- test(limited): cover cpu event report for masked run paths
  
  senamakel
  and
  medullabot
  committed
  0868c5c
- test(limited): clear env before unmetered systemd-run check
  
  senamakel
  and
  medullabot
  committed
  e76cf40
- test(runtime): cover observers receiving a cpu quota termination cause
  
  senamakel
  and
  medullabot
  committed
  811cd80
- fix(tinybox-core): silence unused parameter warning in termination_cause
  
  senamakel
  and
  medullabot
  committed
  3880c28
- chore(runtime): prevent inlining of termination_cause default
  
  senamakel
  and
  medullabot
  committed
  15edac9
- test(runtime): coerce observer to trait object in cpu quota test
  
  senamakel
  and
  medullabot
  committed
  e7081be
- test(public_api): cover observer termination causes through the public api
  
  senamakel
  and
  medullabot
  committed
  ce44d62
- feat(core): return whether termination cause was recorded
  
  senamakel
  and
  medullabot
  committed
  0b557cc
- refactor(core): make termination_cause a required observer method
  
  senamakel
  and
  medullabot
  committed
  8e8b188
- feat(core): add termination_cause to ExecutionObserver
  
  senamakel
  and
  medullabot
  committed
  6dda06f
- test: add termination_cause stubs to observer test fixtures
  
  senamakel
  and
  medullabot
  committed
  ce097af
- refactor(core): give execution observers a default termination_cause
  
  senamakel
  and
  medullabot
  committed
  6c87eed
- refactor(runtime): move ExecutionObserver into types module
  
  senamakel
  and
  medullabot
  committed
  7c4d394
- test(runtime): cover default observer termination causes
  
  senamakel
  and
  medullabot
  committed
  0c74bd1
- test(runtime): remove redundant cpu quota observer test
  
  senamakel
  and
  medullabot
  committed
  7a6d4a9
- test(runtime): update observer test for renamed default observer
  
  senamakel
  and
  medullabot
  committed
  224cd10
- refactor(runtime): move execution observer into output module
  
  senamakel
  and
  medullabot
  committed
  75464ae
- test(docker): cover forwarding of provider termination causes
  
  senamakel
  and
  medullabot
  committed
  4c7c11c

Commits

Commits on Oct 27, 2026