All pull requests

Pull requests

• docs(middleware): reorganize and expand middleware guides

  #3636·pimlock opened Sep 23, 2026·

  ·
  2

• fix(server): make HA sandbox create and HA e2e tests reliable

  test:e2etest:e2e-kubernetes
  #3635·krishicks opened Sep 23, 2026·

  ·
  2

• ci: validate workflow references against policy

  #3634·purp opened Sep 23, 2026·

  ·
  1

  1

• fix(identity): assess leaf and ancestor executable identities

  #3633·purp opened Sep 23, 2026·

  ·

  · OpenShell 0.1.0
  1

• feat(helm)!: confine gateway workspace permissions with an admission policy

  gator:in-reviewtest:e2e
  #3630·krishicks opened Sep 23, 2026·5/5·

  ·

  · OpenShell 0.1.0
  4

• fix(helm)!: grant operator-mode Secret permissions through the workspace chart

  gator:blockedtest:e2etest:e2e-kubernetes
  #3629·krishicks opened Sep 23, 2026·4/5·

  ·

  · OpenShell 0.1.0
  3

• fix(driver-kubernetes): stage workspace Secrets per runtime generation

  test:e2e
  #3628·krishicks opened Sep 23, 2026·3/5·

  ·

  · OpenShell 0.1.0
  2

• fix(helm): reduce gateway Secret permissions

  test:e2e
  #3627·krishicks opened Sep 23, 2026·2/5·

  ·

  · OpenShell 0.1.0
  2

• fix(docker): retry transient runtime volume removal

  automated-flake-find
  #3621·drew opened Sep 23, 2026·4/5·

  ·
  1

• fix(proxy): ignore exited socket owners and isolate middleware tests

  automated-flake-find
  #3620·drew opened Sep 23, 2026·3/5·

  ·
  1

• fix(server): avoid duplicate relay opens on reconnect

  automated-flake-find
  #3619·drew opened Sep 23, 2026·2/5·

  ·
  1

• fix(ci): recover relay opens and isolate VM proxy ports

  automated-flake-find
  #3618·drew opened Sep 23, 2026·1/5·

  ·
  1

• fix(vm): remove socket root via RAII guard

  #3617·benoitf opened Sep 23, 2026·

  ·
  1

• fix(driver-kubernetes-secrets)!: store provider credentials in one namespace

  gator:approval-neededtest:e2etest:e2e-kubernetes
  #3616·krishicks opened Sep 23, 2026·1/5·

  ·

  · OpenShell 0.1.0
  3

• chore(build): migrate Rust validation tasks to Nix

  #3614·elezar opened Sep 23, 2026·

  ·

• fix(server): atomic replay boundary

  #3613·letv1nnn opened Sep 23, 2026·

  ·
  1

• feat(compute): make driver lifecycle id-only

  #3611·elezar opened Sep 23, 2026·

  ·
  1

  1

• fix(podman): restore host gateway alias mediation

  gator:in-review
  #3606·grs opened Sep 23, 2026·

  ·

  · OpenShell 0.1.0
  1

  3

  

• test(conformance): migrate file transfer coverage

  test:e2e
  #3597·elezar opened Sep 23, 2026·

  ·
  2

• fix(network): honor HTTP response connection closure

  test:e2e
  #3581·drew opened Sep 23, 2026·

  ·
  2

• chore(kubernetes): update Agent Sandbox to v1.0.3

  test:e2e
  #3578·mrunalp opened Sep 23, 2026·

  ·
  4

• docs(windows): add runtime architecture overview

  #3575·shailendra-nv opened Sep 23, 2026·

  ·
  1

• fix(cli): recover sandbox connect transport

  #3573·drew opened Sep 23, 2026·

  ·
  1

• fix(kubernetes): converge stale suspended boundaries

  #3570·drew opened Sep 22, 2026·

  ·
  1

• fix(sandbox): classify network notification races

  #3569·drew opened Sep 22, 2026·

  ·
  1