fix(sandbox): accept local connections natively on loopback-confined sockets - #4150

Open

drew wants to merge 18 commits into

mainfrom

fix/4058-native-local-accept/drew

Commits on Oct 2, 2026

fix(sandbox): accept local connections natively on loopback-confined sockets
drew
committed
f5c2bbc

Commits on Oct 3, 2026

fix(sandbox): close review gaps in native local accept confinement
drew
committed
dc6449f
refactor(sandbox): replace unsafe socket calls with socket2 and rustix
drew
committed
f18403c
fix(sandbox): allowlist workload socket families
drew
committed
f7e91a3
refactor(sandbox): remove legacy read-only mode
drew
committed
a5e46e1
refactor(sandbox): drop WAIT_KILLABLE_RECV and make handlers restart-safe
drew
committed
4d2a12e
fix(sandbox): finish teardown only when every workload descendant has exited
drew
committed
f6e8930
fix(sandbox): keep a frozen workload from resuming itself
drew
committed
ade074f
fix(sandbox): send mediated DNS datagrams from the broker socket
drew
committed
f5615df
fix(sandbox): keep sandbox control variables out of the workload environment
drew
committed
c4dea19
fix(sandbox): keep /proc read-only for GPU workloads
drew
committed
adfa02b
fix(sandbox): keep the broker socket for connected UDP DNS sockets
drew
committed
634da46
fix(sandbox): keep slow loopback connects from stalling mediation
drew
committed
94b0296
fix(sandbox): contain network broker handler panics
drew
committed
afbd6e3
fix(sandbox): reject ancillary data on DNS sends instead of broker-sending
drew
committed
7a26c20
fix(sandbox): address review findings across the hardening changes
drew
committed
d7d4499
fix(cli): wait for input when piped exec stdin is nonblocking
drew
committed
65d8d56
fix(sandbox): fix macOS lint and older-glibc test linking
drew
committed
0325f86