feat(sandbox): selective per-domain network allowlist (slirp4netns) — #10 step 2#143

Merged

oratis merged 7 commits into

mainfrom

feat/sandbox-net-allowlist

Jun 1, 2026

Commits on Jun 1, 2026

chore(sandbox): diagnostic PoC for slirp4netns net-allowlist mechanics

oratis
and
claude
committed
chore(sandbox): make net PoC hang-proof (sleep readiness + watchdog)

oratis
and
claude
committed
chore(sandbox): fix resolv.conf bind (dangling symlink) + --disable-dns

oratis
and
claude
committed
chore(sandbox): slirp --userns-path to fix setns EPERM into bwrap netns

oratis
and
claude
committed
chore(sandbox): PoC — bwrap --uid 0 + README-exact slirp + ns diagnostics

oratis
and
claude
committed
feat(sandbox): slirp4netns selective per-domain network allowlist (#10)

oratis
and
claude
committed
fix(sandbox): swallow stream errors on netns teardown

oratis
and
claude
committed