Issues

• a box whose container stopped uncleanly never starts again: stale /tmp/.X1-lock kills Xvfb

  hexuria/box#35 · Filter by author codeitlikemiley opened on Sep 30, 2026

• Design: org shared computer — ACL, credentials, control seat, egress (not just tunnel claim)

  designegressorg
  hexuria/box#31 · Filter by author codeitlikemiley opened on Sep 18, 2026
  1

• [EPIC] Post-PR #7 review: 12 verified gaps on main @ 2dea0d4

  enhancement
  hexuria/box#24 · Filter by author hexuria opened on Sep 14, 2026

• Cleanup: six gratuitous unsafe blocks, hand-rolled CDP JSON parsing, predictable temp path

  enhancement
  hexuria/box#23 · Filter by author hexuria opened on Sep 14, 2026
  1

• EnsureBox docker run omits the hardening flags PR #7 added to docker-compose.yml

  enhancement
  hexuria/box#22 · Filter by author hexuria opened on Sep 14, 2026
  1

• Recipes have no wall-clock budget and cook artifacts have no quota or retention

  enhancement
  hexuria/box#21 · Filter by author hexuria opened on Sep 14, 2026
  1

• ExecResponse cannot report signal death: SIGSEGV looks like a clean silent exit

  enhancement
  hexuria/box#20 · Filter by author hexuria opened on Sep 14, 2026
  1

• Path jail rejects absolute paths under a symlinked WORKSPACE_ROOT; jail test fails on macOS

  bug
  hexuria/box#19 · Filter by author hexuria opened on Sep 14, 2026
  1

• /v1/ready can hang forever (no read timeout) and the display probe fails open

  bug
  hexuria/box#18 · Filter by author hexuria opened on Sep 14, 2026
  1

• Recipe artifact_dir uses a second path jail that does not canonicalize; a workspace symlink escapes it

  bug
  hexuria/box#17 · Filter by author hexuria opened on Sep 14, 2026
  1

• Multiple X seats per box (one display per agent) and a view-only VNC tier

  enhancement
  hexuria/box#11 · Filter by author hexuria opened on Sep 14, 2026

• Activity event stream (GET /v1/events) and a busy/heartbeat that counts CUA

  enhancement
  hexuria/box#10 · Filter by author hexuria opened on Sep 14, 2026

• Driver lease with TTL for CUA/exec episodes; recipe-wide hold; gate reset_desktop and shutdown behind it

  enhancement
  hexuria/box#9 · Filter by author hexuria opened on Sep 14, 2026

• Caller identity: x-box-caller header, per-caller audit ring, owned detached-exec results

  enhancement
  hexuria/box#8 · Filter by author hexuria opened on Sep 14, 2026