Repository navigation

feat: network allowlist policy, sandbox events, namespace/KVM probes, contract 1.19 - #85

Merged

senamakel merged 22 commits into

mainfrom

security-bus-7328-p5

Oct 14, 2026

Merged

feat: network allowlist policy, sandbox events, namespace/KVM probes, contract 1.19#85
senamakel merged 22 commits into
mainfrom
security-bus-7328-p5

Commits on Oct 14, 2026
- feat(spec): add egress allowlist network policy
  senamakel
  committed
  5589c56
- refactor(tinybox-docker): borrow network policy in network_flags
  senamakel
  committed
  82953b6
- feat(event): add sandbox event sink types
  senamakel
  committed
  efd8212
- test(spec): reformat allowlist assertions and drop redundant event test
  senamakel
  committed
  f8b1b4f
- test: cover refusal of unenforceable network allowlists
  senamakel
  committed
  0b42ab7
- test(sandbox): cover refusal of unenforceable network allowlist
  senamakel
  committed
  ec5f10c
- test: reformat network allowlist refusal tests
  senamakel
  committed
  fd5950f
- feat(linux): expose namespace probe types
  senamakel
  committed
  9928bf3
- fix(probe): gate unix-only executable check behind cfg
  senamakel
  committed
  5e32bc5
- feat(kvm): add KVM backend module for microvm
  senamakel
  committed
  5dac6f5
- chore: files changed crates/tinybox-microvm/src/lib.rs
  senamakel
  committed
  b9cac1b
- feat(bus): add network allowlist policy and sandbox events
  senamakel
  committed
  ed06962
- chore: files changed crates/tinybox-core/src/shell/analysis.rs,crates/tinybox-core/src/shell/mod.rs,
  senamakel
  committed
  e87c0e8
- fix(shell): allow deprecated items crate-wide in analysis
  senamakel
  committed
  177a4eb
- chore(shell): allow deprecated items in shell modules
  senamakel
  committed
  932a31e
- test: match on create result directly in allowlist refusal tests
  senamakel
  committed
  cb9b5e0
- test: replace unwrap calls with fallible test returns
  senamakel
  committed
  0f22a00
- test(spec): match refusal result directly in allowlist test
  senamakel
  committed
  195159e
- docs: document tinybox sandbox-only scope and contract 1.19
  senamakel
  committed
  ec97cd6
- style: format long lines and reorder exports
  senamakel
  committed
  1d594a9
- docs(kvm): fix stale intra-doc link to probe
  senamakel
  committed
  91e1bd6
- chore(deps): bump rustls from 0.23.45 to 0.23.46
  senamakel
  committed
  7f0571a

Commits

Commits on Oct 14, 2026