[ML] PR E: typed routing behind the established controller protocol - #3188

Open

valeriy42 wants to merge 34 commits into

feature/sandbox2-pr-d-lifecyclefrom

feature/sandbox2-pr-e-typed-routing

Commits on Sep 10, 2026

[ML] Add CProcessSpawnerRouter (PR E Task 2)
valeriy42
committed
9f2d571
[ML] Add typed route model + controller-token parsing (PR E Task 1)
valeriy42
committed
9e77b2b
[ML] MG8 activation: hard-terminate on degraded-route seccomp failure (PR E Task 3)

valeriy42
and
claude
committed
5eab252
[ML] H4 structured once-per-launch enforced-mode signal (PR E Task 4)
valeriy42
committed
ba373d2
[ML] Staged userns probe + ML_SANDBOX2_REQUIRE CI wiring (PR E Task 5)
valeriy42
committed
cc3ad78
[ML] Fix vacuous fail_closed pass on userns probe exec failure
valeriy42
committed
b855b1a
[ML] Repair test_sandbox2_attack_defense.py (V14) + failure-modes doc
valeriy42
committed
ee8e9bf
[ML] Fix controller-construction leak and blocked-open pipe-reader leak
valeriy42
committed
6e9f8e5
[ML] Publish controller protocol/capability version token (producer side)
valeriy42
committed
a16df79
[ML] PR E review: dormant no-token default + single deployment_id derivation
valeriy42
committed
9b61f77
[ML] PR E review: skip in-process seccomp when ML_SANDBOXED=1
valeriy42
committed
e017922
[ML] PR E review: V14 PID discovery via controller log; one CI mode per arch
valeriy42
committed
bc148b1
[ML] PR E review: strip ML_SANDBOXED from legacy children; keep hard terminate dormant
valeriy42
committed
027798a
[ML] PR E review: H4 legacy_reason field; V14 harness asserts its route
valeriy42
committed
b04fc23
[ML] Fix Windows fail-open ML_SANDBOXED bypass; drop dead scratch-path comment
valeriy42
committed
b31b26b
[ML] Fix case-sensitive ML_SANDBOXED match on Windows env stripping
valeriy42
committed
816b0db
[ML] Fix lossy Unicode round-trip in Windows env-stripping (review Fix 3)
valeriy42
committed
41eb3f4
[ML] Add sandbox2_compiled_in field to H4 signal (review Fix 4)
valeriy42
committed
cf7ecf3
[ML] Ship controller-protocol.version in the nodeps zip too (review Fix 5)
valeriy42
committed
13b12c1
[ML] Make captureLogged()/env-var test helpers exception-safe (review Fixes 8, 9)
valeriy42
committed
c95a0ff
[ML] Distinguish absent/present userns capability in fail_closed mode (review Fix 10)
valeriy42
committed
d95d764
[ML] Polish: stale comments and _GNU_SOURCE redefinition guard (review nice-to-haves)
valeriy42
committed
0ad4d93
[ML] Apply clang-format 5.0.1 to files touched across PR E's fix rounds
valeriy42
committed
171b05a
[ML] Remove workspace-internal doc citations from comments
valeriy42
committed
387e376
[ML] Fix Windows build: rename OUT local to TARGET_FILE
valeriy42
committed
09ed3a2
[ML] Fix Windows test failures: platform-aware copy args, gate arg-count tests
valeriy42
committed
bcc141b
[ML] Fix Linux ml_test_controller segfault: ODR-safe, lazily built sandbox spawner
valeriy42
committed
139b571

Commits on Sep 12, 2026

Mount the per-child IPC root at the same path inside and outside Sandbox2
valeriy42
committed
a63428d

Commits on Sep 14, 2026