Repository navigation

D2: Add pinned restricted agent containers - #40

Merged

mchwang merged 17 commits into

mainfrom

codex/agent-isolation-d2

Sep 25, 2026

Merged

D2: Add pinned restricted agent containers#40
mchwang merged 17 commits into
mainfrom
codex/agent-isolation-d2

Commits on Sep 25, 2026
- Add D2 pinned restricted agent containers
  mchwang
  committed
  4480791
- Harden D2 container validation and Linux setup
  mchwang
  committed
  3788d27
- Close D2 profile and validation trust gaps
  mchwang
  committed
  f869031
- Require exact D2 capability and mount profiles
  mchwang
  committed
  e854ec6
- Trust D2 helper images and settle cleanup
  mchwang
  committed
  25ffe54
- Bind D2 resources to their owners
  mchwang
  committed
  a229e8e
- Close D2 namespace and cleanup gaps
  mchwang
  committed
  abc9994
- Allow clone ownership regression to settle
  mchwang
  committed
  b701213
- Pin the D2 Codex state path
  mchwang
  committed
  cc60cb9
- Seal D2 inputs and complete resource checks
  mchwang
  committed
  f27ef2d
- Fix D2 seeding, tmpfs rounding, and namespace defaults
  
  mchwang
  and
  claude
  committed
  af3c893
- Close D2 auth swap, unowned cleanup, and restart gaps
  
  mchwang
  and
  claude
  committed
  65c32e3
- Reconcile killed container creates before disposing credentials
  
  mchwang
  and
  claude
  committed
  c61b3b5
- Enforce builtin seccomp and pin clone directory identity
  
  mchwang
  and
  claude
  committed
  fb6577c
- Reconcile killed storage creates and honour the invocation deadline
  
  mchwang
  and
  claude
  committed
  162554e
- Authenticate captured invocations and cover CI test budgets
  
  mchwang
  and
  claude
  committed
  72fb064
- Pin the runc runtime and capture each attempt once
  
  mchwang
  and
  claude
  committed
  b66f236

Commits

Commits on Sep 25, 2026