| [pipeline] Create first pipeline for repo | 4 个月前 |
| add README and LICENSES Signed-off-by: jingrui <jingrui@huawei.com> | 8 个月前 |
| feat: add stdin support to process execution Assisted-by: Codex:gpt-5.6-terra Signed-off-by: hu-zhangying <huzhangying@huawei.com> | 1 个月前 |
| feat: serve incremental memory with conch cow | 25 天前 |
| feat: configure sandbox memory mode | 25 天前 |
| feat(network): add configurable sandbox policies Sandboxes previously inherited unrestricted network behavior from warm network slots, with no API for per-sandbox ingress or egress controls. Slot reuse could also retain policy and conntrack state across sandbox assignments. Add typed allow and deny configuration across the daemon, runtime service, persistent state, and Python SDK. Validate destinations before slot allocation and apply live changes with batched iptables updates. Compensate persistent state when updates fail, and clear policy and conntrack state before returning slots to the warm pool. Co-authored-by: Yifan Zhao <stopire@gmail.com> Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com> | 1 个月前 |
| docs: improve project documentation Documentation mixed user and developer guidance and still described outdated dependencies, commands, and runtime behavior. Organize documentation by audience, remove obsolete pages and assets, and align setup, template, network, and VMM guidance with the current implementation. Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com> | 1 个月前 |
| fix: preserve versioned memory restore artifacts | 25 天前 |
| docs: improve project documentation Documentation mixed user and developer guidance and still described outdated dependencies, commands, and runtime behavior. Organize documentation by audience, remove obsolete pages and assets, and align setup, template, network, and VMM guidance with the current implementation. Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com> | 1 个月前 |
| feat: manage conch cow lifecycle | 25 天前 |
| feat(network): add configurable sandbox policies Sandboxes previously inherited unrestricted network behavior from warm network slots, with no API for per-sandbox ingress or egress controls. Slot reuse could also retain policy and conntrack state across sandbox assignments. Add typed allow and deny configuration across the daemon, runtime service, persistent state, and Python SDK. Validate destinations before slot allocation and apply live changes with batched iptables updates. Compensate persistent state when updates fail, and clear policy and conntrack state before returning slots to the warm pool. Co-authored-by: Yifan Zhao <stopire@gmail.com> Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com> | 1 个月前 |
| fix:CRLF to LF | 7 个月前 |
| docs: improve project documentation Documentation mixed user and developer guidance and still described outdated dependencies, commands, and runtime behavior. Organize documentation by audience, remove obsolete pages and assets, and align setup, template, network, and VMM guidance with the current implementation. Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com> | 1 个月前 |
| docs: document commit message requirements Commit message expectations were not recorded in the repository, so contributors had no shared guidance for context, formatting, attribution, or sign-off. Add a contributing guide that defines message structure, line length, assistant attribution, sign-off ordering, and use of repository history as the style reference. Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com> | 1 个月前 |
| feat: manage conch cow lifecycle | 25 天前 |
| docs: improve project documentation Documentation mixed user and developer guidance and still described outdated dependencies, commands, and runtime behavior. Organize documentation by audience, remove obsolete pages and assets, and align setup, template, network, and VMM guidance with the current implementation. Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com> | 1 个月前 |
| docs: improve project documentation Documentation mixed user and developer guidance and still described outdated dependencies, commands, and runtime behavior. Organize documentation by audience, remove obsolete pages and assets, and align setup, template, network, and VMM guidance with the current implementation. Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com> | 1 个月前 |
| feat: add conch cow control protocol | 25 天前 |
| refactor(runtime): remove CRI support Conch now exposes its native sandbox lifecycle directly, while the CRI adapter still carries Kubernetes pod/container identities and placeholder container state through the core runtime. Remove the CRI server, configuration, state records, runtime DTOs, tests, and documentation. Converge on a single SandboxID, keep CNI and sandbox rehydration paths intact, and drop the direct cri-api dependency. This is an intentional break with no legacy CRI or state migration. Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com> | 1 个月前 |
