[ML] PR D: linear child ownership and fault-injected lifecycle for Sandbox2 - #3186

Closed

valeriy42 wants to merge 15 commits into

elastic:feature/sandbox2-pr-c-fs-net-policyfrom

valeriy42:feature/sandbox2-pr-d-lifecycle

Commits on Sep 9, 2026

[ML] Generate syscall policies from one declaration; fail-closed degraded seccomp
valeriy42
committed
bdb9a9e
[ML] Typed filesystem/network launch policy for Sandbox2 pytorch_inference
valeriy42
committed
79d4173
[ML] Explicit lifecycle state enum + CAS timeout latch for sandboxed process spawner (header only)
valeriy42
committed
51ddf27
[ML] Fix doc-comment provenance for sandboxed process lifecycle enum
valeriy42
committed
6ff755d
[ML] Kill-and-reap guard + injectable seams for spawn() skeleton
valeriy42
committed
6b4d850
[ML] Fix guard UAF and unguarded exception window in spawn()
valeriy42
committed
5ead403
[ML] pidfd outcome classification, ENOSYS->Sandbox2::Kill() routing, terminateChild()
valeriy42
committed
c5ea3b5
[ML] terminateChild(): roll back s_State on failed termination attempt
valeriy42
committed
9971a80
[ML] Add CSandboxedProcessSpawnerLifecycleTest_Linux (PR D Task 4)

valeriy42
and
claude
committed
282af8d
[ML] Strengthen ENOSYS-fallback SIGKILL assertion and bound its wait
valeriy42
committed
e540295
[ML] Fix UAF on timeout-then-detach path in pidfd-ENOSYS lifecycle test
valeriy42
committed
47a8dd6
[ML] Fix pidfd recycled-descriptor race, generation-blind rollback, dead lifecycle states
valeriy42
committed
b42ee96
[ML] Adjudicate final-review residuals: fix log PID, guard warm-up hang, guard E_Monitoring write
valeriy42
committed
31c72b4
[ML] Fix self-review round 2 findings: EXTERNAL_KILL assertion, gate 8 UAF, gate 3 fd leak, promise UAF, log classification
valeriy42
committed
13cc526
fix(sandbox2-lifecycle-test): release monitor closure refs before fd checks
valeriy42
committed
92aafd8

Navigation Menu

[ML] PR D: linear child ownership and fault-injected lifecycle for Sandbox2 - #3186

[ML] PR D: linear child ownership and fault-injected lifecycle for Sandbox2#3186
valeriy42 wants to merge 15 commits into
elastic:feature/sandbox2-pr-c-fs-net-policyfrom
valeriy42:feature/sandbox2-pr-d-lifecycle

Commits on Sep 9, 2026

[ML] Generate syscall policies from one declaration; fail-closed degraded seccomp

[ML] Typed filesystem/network launch policy for Sandbox2 pytorch_inference

[ML] Explicit lifecycle state enum + CAS timeout latch for sandboxed process spawner (header only)

[ML] Fix doc-comment provenance for sandboxed process lifecycle enum

[ML] Kill-and-reap guard + injectable seams for spawn() skeleton

[ML] Fix guard UAF and unguarded exception window in spawn()

[ML] pidfd outcome classification, ENOSYS->Sandbox2::Kill() routing, terminateChild()

[ML] terminateChild(): roll back s_State on failed termination attempt

[ML] Add CSandboxedProcessSpawnerLifecycleTest_Linux (PR D Task 4)

[ML] Strengthen ENOSYS-fallback SIGKILL assertion and bound its wait

[ML] Fix UAF on timeout-then-detach path in pidfd-ENOSYS lifecycle test

[ML] Fix pidfd recycled-descriptor race, generation-blind rollback, dead lifecycle states

[ML] Adjudicate final-review residuals: fix log PID, guard warm-up hang, guard E_Monitoring write

[ML] Fix self-review round 2 findings: EXTERNAL_KILL assertion, gate 8 UAF, gate 3 fd leak, promise UAF, log classification

fix(sandbox2-lifecycle-test): release monitor closure refs before fd checks