All pull requests

Pull requests

• docs: clarify Linux network modes and local service access

  Area - Egress/Credsdocumentation
  #260·kevin-orellana opened Nov 1, 2026Collaborator·7 of 8 tasks·

  ·
  6

• test: clean up concurrent integration fixtures and share move scenarios

  Area - Shell/Montychore
  #256·kevin-orellana opened Nov 1, 2026Collaborator·8 tasks done·

  ·
  5

• fix(containment): refuse virtual-console state changes

  Area - Agent Containmentbug
  #255·kevin-orellana opened Nov 1, 2026Collaborator·8 tasks done·

  ·
  2

• fix(containment): retain Linux bind mount targets

  Area - Agent Containmentbug
  #254·kevin-orellana opened Nov 1, 2026Collaborator·8 tasks done·

  ·
  3

• feat(policy): decide a pack-bound spawn as its pack action alone

  Area - policy-engineArea - Tool Containment (Binaries/Local MCP)enhancement
  #252·ferdingler opened Oct 31, 2026Collaborator·8 tasks done·

  ·

• docs: improved agents.md

  documentation
  #251·ferdingler opened Oct 31, 2026Collaborator·8 tasks done·

  ·
  9

• docs: add the egress data path design

  Area - Egress/CredsArea - policy-enginedocumentation
  #250·siwachabhi opened Oct 31, 2026Contributor·4 of 6 tasks·

  ·
  39

• test: separate integration runtime discovery from fixture execution

  Area - Releasechore
  #249·kevin-orellana opened Oct 30, 2026Collaborator·8 tasks done·

  ·
  5

• fix(linux): preserve setup failures through executable launch

  Area - Agent Containmentbug
  #248·kevin-orellana opened Oct 30, 2026Collaborator·8 tasks done·

  ·
  6

• feat(policy): decide and record tool pack actions in the policy engine

  Area - policy-engineArea - Tool Containment (Binaries/Local MCP)enhancement
  #247·ferdingler opened Oct 30, 2026Collaborator·8 tasks done·

  ·
  1

• docs: ingress relay design

  Area - Egress/Credsdocumentation
  #245·rvkandury opened Oct 30, 2026Contributor·6 tasks done·

  ·
  26

• fix: harden Linux namespace supervisor memory

  Area - Agent Containmentbug
  #243·kevin-orellana opened Oct 30, 2026Collaborator·8 tasks done·

  ·
  8

• fix: block proc mem executable page writes

  Area - Agent Containmentbug
  #241·kevin-orellana opened Oct 30, 2026Collaborator·6 tasks done·

  ·
  6

• fix(containment): restrict additional Linux terminal controls

  Area - Agent Containmentbug
  #240·kevin-orellana opened Oct 30, 2026Collaborator·8 tasks done·

  ·
  8

• prototype: use SDK credential providers for AWS

  Area - Egress/Credsenhancement
  #239·ferdingler opened Oct 30, 2026Collaborator·3 of 8 tasks·

  ·

• ci(strands): reviewer posts no inline comment for a test gap alone

  Area - Releasechore
  #237·zastrowm opened Oct 30, 2026Member·5 of 6 tasks·

  ·
  2

• feat(mcp): select a stdio MCP server by its full command

  Area - Tool Containment (Binaries/Local MCP)enhancement
  #236·notowen333 opened Oct 30, 2026Contributor·2 of 8 tasks·

  ·
  12

• ci(rust): bump the production-minor group across 2 directories with 18 updates

  choredependencies
  #235·dependabot[bot] opened Oct 30, 2026Bot·

  ·
  1

• feat(linux): remove the startup opt-in requirement

  Area - Agent ContainmentArea - Releaseenhancement
  #234·kevin-orellana opened Oct 30, 2026Collaborator·8 tasks done·

  ·
  4

• refactor(egress): remove the gateway's dead code, and merge its duplicate code

  Area - Egress/Credschore
  #233·siwachabhi opened Oct 30, 2026Contributor·7 of 8 tasks·

  ·
  8

• feat(release): publish Linux ARM64 in stable releases

  Area - Releaseenhancement
  #231·kevin-orellana opened Oct 30, 2026Collaborator·8 tasks done·

  ·
  3

• fix(egress-gateway): fold a resource URI's fragment and empty query

  Area - Egress/CredsArea - policy-enginebug
  #229·abhisheksp opened Oct 30, 2026Contributor·8 tasks done·

  ·
  3

• fix(policy): hold a tool call whose name carries a quote or a backslash

  Area - policy-engineArea - Tool Containment (Binaries/Local MCP)bug
  #228·abhisheksp opened Oct 30, 2026Contributor·8 tasks done·

  ·
  18

• feat(policy)!: split the pinned address into ip4 and ip6

  Area - Egress/CredsArea - policy-enginebug
  #227·abhisheksp opened Oct 30, 2026Contributor·8 tasks done·

  ·
  33

• feat(credentials): sign AWS requests with the compute host execution role

  Area - Egress/Credsenhancement
  #226·leo237 opened Oct 30, 2026·8 tasks done·

  ·
  4