Repository navigation

Draft, not for merging: seven pull requests merged together - #751

Draft

ronleizrowice-ant wants to merge 150 commits into

mainfrom

claude/project-thread-u33gxn

Draft

Draft, not for merging: seven pull requests merged together#751
ronleizrowice-ant wants to merge 150 commits into
mainfrom
claude/project-thread-u33gxn

Commits on Sep 18, 2026
Commits on Sep 19, 2026
Commits on Sep 20, 2026
Commits on Sep 21, 2026
Commits on Sep 22, 2026
Commits on Sep 25, 2026
Commits on Sep 26, 2026
Commits on Sep 28, 2026
Commits on Sep 29, 2026
Commits on Oct 10, 2026
Commits on Oct 20, 2026
- Merge main into the toolchain pins
  
  claude
  and
  ronleizrowice-ant
  committed
  f88e744
- Merge the toolchain pins, with main in them, into the new legs
  
  claude
  and
  ronleizrowice-ant
  committed
  c01c372
- Merge main into the read-deny glob budget
  
  claude
  and
  ronleizrowice-ant
  committed
  ba0a884
- Merge main into the links kept on the way to a deny
  
  claude
  and
  ronleizrowice-ant
  committed
  6ea4cea
- Merge main into the negated bracket sets
  
  claude
  and
  ronleizrowice-ant
  committed
  8be91e7
- package.json: test:bundled after typecheck, which it starts with
  
  claude
  and
  ronleizrowice-ant
  committed
  54716d5
- Merge main into the host helpers taken from outside the write paths
  
  claude
  and
  ronleizrowice-ant
  committed
  a383b79
- test: a negated set with a `-` under sandbox-exec, and a `,` for the property
  
  claude
  and
  ronleizrowice-ant
  committed
  b0f47a3
- test: read EBUSY as either C library words it
  
  claude
  and
  ronleizrowice-ant
  committed
  438380f
- test: name the helpers where a case allows writes to /usr
  
  claude
  and
  ronleizrowice-ant
  committed
  4f8bc03
- ci: what a review of the whole change found
  
  claude
  and
  ronleizrowice-ant
  committed
  cf6cfdd
- Merge branch 'ci/pin-toolchain' into ci/more-legs
  
  claude
  and
  ronleizrowice-ant
  committed
  d90089f
- ci: what a review of the whole change found, in the new legs
  
  claude
  and
  ronleizrowice-ant
  committed
  bc03da8
- ci: a simplification pass over the whole change
  
  claude
  and
  ronleizrowice-ant
  committed
  9c54fab
- Merge branch 'ci/pin-toolchain' into ci/more-legs
  
  claude
  and
  ronleizrowice-ant
  committed
  4aaa50d
- ci: a simplification pass over the new legs
  
  claude
  and
  ronleizrowice-ant
  committed
  adbae33
- linux: what a review of the whole glob budget found
  
  claude
  and
  ronleizrowice-ant
  committed
  b34cef5
- linux: the glob budget in a third of the lines
  
  claude
  and
  ronleizrowice-ant
  committed
  1951705
- What a review of the whole diff found in the links on the way to a deny
  
  claude
  and
  ronleizrowice-ant
  committed
  dcc0f33
- glob: write a set the way a macOS profile was measured to read it
  
  claude
  and
  ronleizrowice-ant
  committed
  c479240
- linux: what a second review of the glob budget found
  
  claude
  and
  ronleizrowice-ant
  committed
  2c01587
- WIP: host helpers judged in one place (tests of its own suite not yet brought along)
  
  claude
  and
  ronleizrowice-ant
  committed
  bab2847
- Merge main, and take its tree: the mandatory denies are written anew on it
  
  claude
  and
  ronleizrowice-ant
  committed
  b0aa23a
- windows: the mandatory write denies, on the kept grants
  
  claude
  and
  ronleizrowice-ant
  committed
  80ca316
- glob: leave what is beyond ASCII in a set where it was written
  
  claude
  and
  ronleizrowice-ant
  committed
  19da72c
- A simplification pass over the source of the links on the way to a deny
  
  claude
  and
  ronleizrowice-ant
  committed
  4c9a85d
- WIP: the suite of the host helpers for the new shape (512 lines, was 802); the two which suites still to follow
  
  claude
  and
  ronleizrowice-ant
  committed
  f508a02
- test: the links on the way to a deny in 671 lines, where there were 1,187
  
  claude
  and
  ronleizrowice-ant
  committed
  08d1132
- WIP: an empty HOME no longer switches the comparison off; the which suites follow the joined paths
  
  claude
  and
  ronleizrowice-ant
  committed
  a6fcda6
- test(windows): the denied are not opened by rewriting permissions or taking ownership
  
  claude
  and
  ronleizrowice-ant
  committed
  37749b7
- host helpers: look the shell up where it was, and shorter which suites
  
  claude
  and
  ronleizrowice-ant
  committed
  71953c1
- host helpers: writablePlaces leaves the resolving to normalizePathForSandbox
  
  claude
  and
  ronleizrowice-ant
  committed
  e8c9d28
- host helpers: drop a case that repeats another's pin
  
  claude
  and
  ronleizrowice-ant
  committed
  9f3106d
- windows: what a review of the mandatory denies found
  
  claude
  and
  ronleizrowice-ant
  committed
  8aa1749
- host helpers: what the second review found
  
  claude
  and
  ronleizrowice-ant
  committed
  ef2a6d7
- linux: a shut directory on the way does not lift the deny of the missing names before it
  
  claude
  and
  ronleizrowice-ant
  committed
  4ac7e7e
- windows: the mandatory denies come sorted, and what the second review found
  
  claude
  and
  ronleizrowice-ant
  committed
  f151d32
- Merge remote-tracking branch 'origin/fix/glob-to-regex-negation-and-placeholders' into HEAD
  
  claude
  and
  ronleizrowice-ant
  committed
  7b12bf9
- Merge remote-tracking branch 'origin/fix/linux-read-deny-glob-bound' into HEAD
  
  claude
  and
  ronleizrowice-ant
  committed
  0e078d1
- Merge remote-tracking branch 'origin/fix/windows-mandatory-denies' into HEAD
  
  claude
  and
  ronleizrowice-ant
  committed
  bbc0996
- Merge remote-tracking branch 'origin/fix/a-write-deny-on-a-link-holds-the-name-too' into HEAD
  claude
  committed
  9748edd
- Merge remote-tracking branch 'origin/fix/host-helpers-from-trusted-paths' into HEAD
  claude
  committed
  96c9913
- join: the helper read for --holds-links is the one the wrap runs
  
  claude
  and
  ronleizrowice-ant
  committed
  fb56896
- TRIAL, not for merging: the seven merged together, with their joins
  
  claude
  and
  ronleizrowice-ant
  committed
  70b624f
- host helpers: export the new type a few lines up
  
  claude
  and
  ronleizrowice-ant
  committed
  7b53da1
Commits on Nov 6, 2026
- Merge main into ci/pin-toolchain
  
  claude
  and
  ronleizrowice-ant
  committed
  5b979ee
- Merge main into ci/more-legs
  
  claude
  and
  ronleizrowice-ant
  committed
  234678f
- Merge main into fix/glob-to-regex-negation-and-placeholders
  
  claude
  and
  ronleizrowice-ant
  committed
  8a4a93f
- Merge main into fix/linux-read-deny-glob-bound
  
  claude
  and
  ronleizrowice-ant
  committed
  369c275
- Merge main into fix/windows-mandatory-denies
  
  claude
  and
  ronleizrowice-ant
  committed
  18e1aeb
- Merge main into fix/a-write-deny-on-a-link-holds-the-name-too
  
  claude
  and
  ronleizrowice-ant
  committed
  2a4776d
- Merge main into fix/host-helpers-from-trusted-paths
  
  claude
  and
  ronleizrowice-ant
  committed
  cf3bd57
- windows: the mxc backend is handed no mandatory deny
  
  claude
  and
  ronleizrowice-ant
  committed
  6cb9e4e
- ci: the smoke test looks at which seccomp helper is named, and dist is built once
  
  claude
  and
  ronleizrowice-ant
  committed
  4f3a8dd
- Merge main into the trial of all seven
  
  claude
  and
  ronleizrowice-ant
  committed
  eea3465
- Merge commit '5b979ee' into HEAD
  
  claude
  and
  ronleizrowice-ant
  committed
  1895e53
- Merge commit '4f3a8dd' into HEAD
  
  claude
  and
  ronleizrowice-ant
  committed
  9c5d656
- Merge commit '8a4a93f' into HEAD
  
  claude
  and
  ronleizrowice-ant
  committed
  f6871df
- Merge commit '369c275' into HEAD
  
  claude
  and
  ronleizrowice-ant
  committed
  700a8da
- Merge commit '6cb9e4e' into HEAD
  
  claude
  and
  ronleizrowice-ant
  committed
  9b06acf
- Merge commit '2a4776d' into HEAD
  
  claude
  and
  ronleizrowice-ant
  committed
  c6e030d
- Merge commit 'cf3bd57' into HEAD
  claude
  committed
  5ac60cb
- windows: what a review of the mxc guard found
  
  claude
  and
  ronleizrowice-ant
  committed
  fb6e0ec
- ci: the step that builds dist says so
  
  claude
  and
  ronleizrowice-ant
  committed
  503075e
- Merge commit 'fb6e0ec966472c2100f0484a14b344f999b7832e' into HEAD
  
  claude
  and
  ronleizrowice-ant
  committed
  ac83299
- Merge commit '503075e742ec0313db288537c0590f3360cae644' into HEAD
  
  claude
  and
  ronleizrowice-ant
  committed
  252d09c
Commits on Nov 9, 2026
- Merge main into ci/pin-toolchain
  
  claude
  and
  ronleizrowice-ant
  committed
  acac083
- Merge main into ci/more-legs
  
  claude
  and
  ronleizrowice-ant
  committed
  dd943e9
- Merge main into fix/glob-to-regex-negation-and-placeholders
  
  claude
  and
  ronleizrowice-ant
  committed
  9713af9
- Merge main into fix/linux-read-deny-glob-bound
  
  claude
  and
  ronleizrowice-ant
  committed
  dbd699b
- Merge main into fix/windows-mandatory-denies
  
  claude
  and
  ronleizrowice-ant
  committed
  be119d2
- Merge main into fix/a-write-deny-on-a-link-holds-the-name-too
  
  claude
  and
  ronleizrowice-ant
  committed
  c3ae746
- Merge main into fix/host-helpers-from-trusted-paths
  
  claude
  and
  ronleizrowice-ant
  committed
  4c67c24
- Merge main into the trial of all seven
  
  claude
  and
  ronleizrowice-ant
  committed
  cebfadc
- Merge commit 'acac083b0c022f7fab918690ed73377f164ab3ee' into trial751
  
  claude
  and
  ronleizrowice-ant
  committed
  2ed1051
- Merge commit 'dd943e93c2a6b080b37726866d1d30caf449dfdb' into trial751
  
  claude
  and
  ronleizrowice-ant
  committed
  2cdf409
- Merge commit '9713af921f393537b952d9d3093f945c723a886c' into trial751
  
  claude
  and
  ronleizrowice-ant
  committed
  2f5282b
- Merge commit 'dbd699b55de642c0022e29d1cc0cf5cdb80c9988' into trial751
  
  claude
  and
  ronleizrowice-ant
  committed
  24b4cdf
- Merge commit 'be119d23514a7dd2fab479266f01d95b74bf4d6a' into trial751
  
  claude
  and
  ronleizrowice-ant
  committed
  c695385
- Merge commit 'c3ae7464ae67e45ab6ad938abe526b1d87b4a3f3' into trial751
  
  claude
  and
  ronleizrowice-ant
  committed
  3952c2c
- Merge commit '4c67c24e19b1d33d1b4d2716c65b18af53a64673' into trial751
  
  claude
  and
  ronleizrowice-ant
  committed
  9bc15b9

Commits

Commits on Sep 18, 2026

Commits on Sep 19, 2026

Commits on Sep 20, 2026

Commits on Sep 21, 2026

Commits on Sep 22, 2026

Commits on Sep 25, 2026

Commits on Sep 26, 2026

Commits on Sep 28, 2026

Commits on Sep 29, 2026

Commits on Oct 10, 2026

Commits on Oct 20, 2026

Commits on Nov 6, 2026