feat(isolation): define the RFC 0012 boundary contract

[drew]

Summary

Define the base RFC 0012 isolation contract for separating the trusted supervisor from the in-workload sandbox runtime. The contract is intentionally breaking: drivers must provide an authenticated protected channel, lifecycle ownership, process control, binary identity, TCP mediation, and DNS mediation.

General application UDP mediation is not part of this stack. DNS may use UDP or TCP internally, but both paths remain mediated by the supervisor.

Related Issue

Part of #1737.

Changes

• Define backend-neutral sandbox lifecycle, process, identity, and network contracts.
• Require fail-closed startup confirmation before untrusted workload execution.
• Define the supervisor/sandbox trust boundary and protected-channel responsibilities.
• Narrow the network contract to TCP plus DNS; remove connected, unconnected, and raw UDP APIs.
• Document capability-free sandbox requirements and driver-owned outer egress fences.

Testing

• mise run pre-commit passes
• Full unit and E2E validation delegated to remote CI

Checklist

• Follows Conventional Commits
• Authored commits are signed off (DCO)

Review remediation

• Clarify that unavailable or stale DNS process identity is never an authorization grant; DNS remains hostname-policy mediated by the supervisor.

Stack

1. feat(isolation): define the RFC 0012 boundary contract #2941 — contract (this PR)
2. feat(isolation): add boundary protocol and Linux primitives #2942 — shared interface and primitives
3. feat(isolation): split supervisor and sandbox runtimes #3151 — supervisor and sandbox runtimes
4. feat(vm): run the supervisor outside the guest workload #2945 — VM driver
5. feat(docker): isolate workloads behind the host supervisor #2965 — Docker driver
6. feat(kubernetes): add proxy-pod isolation topology #3144 — Kubernetes proxy-pod topology
7. feat(podman): isolate workloads behind the host supervisor #3230 — Podman driver
8. perf(isolation): add TCP and DNS benchmark harnesses #3229 — performance harnesses

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

[copy-pr-bot]

Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually.

Contributors can view more details about this message here.

[github-actions]

Label test:e2e applied for a5dc6db. Open the existing run and click Re-run all jobs to execute with the label set. The run will execute the standard E2E suite after building the required gateway and supervisor images once. The matching required CI gate status on this PR will flip green automatically once the run finishes.

[drew]

/ok to test

[drew]

/ok to test

[drew]

/ok to test