feat(protected): Isolate owned daemon roles from runtime observers - #1416

Merged

leumor merged 15 commits into

feature/pr-314-controller-owned-workload-role-isolation

Sep 22, 2026

Commits on Sep 22, 2026

feat(protected): add controller-owned workload role isolation
leumor
committed
204134e
fix(protected): derive workload paths from the fixed role roster
leumor
committed
b092613
fix(protected): contain HTTP faults and bind denial actors
leumor
committed
4a36b70
fix(protected): bind app acceptance to the active role invocation
leumor
committed
9592b50
fix(protected): validate runtime bodies and bind workload witnesses
leumor
committed
3c092ab
fix(protected): scope resource and restart acceptance witnesses
leumor
committed
15492c2
fix(protected): bind app selection and denial target evidence
leumor
committed
e8db749
test(protected): make workload fixtures portable to macOS
leumor
committed
5a9b365
fix(protected): reject probe reuse across workload attempts
leumor
committed
f50583f
fix(protected): bind exchange and lifecycle evidence to cases
leumor
committed
daf5757
fix(protected): bind witness payloads and measured app processes
leumor
committed
5aa8766
fix(protected): bind probe commitments to denial payloads
leumor
committed
145ec11
fix(protected): stop workload controller before acquiring cleanup lease
leumor
committed
c581195
fix(protected): support nested app PIDs and datastore files
leumor
committed
3ef7857
fix(protected): bind both restart epochs to measured context
leumor
committed
ad07c8e