feat(vm): run the supervisor outside the guest workload - #2945

Open

drew wants to merge 6 commits into

codex/1737-rfc12-supervisor-modesfrom

codex/vm-host-supervisor

Commits on Sep 9, 2026

feat(vm): run the supervisor outside the guest workload
drew
committed
54f2e53
fix(vm): demote host supervisors and protect staging paths
drew
committed
d6b82c5
refactor(vm): use the single authenticated grpc transport
drew
committed
c3ccbef
fix(vm): adapt rootfs fixture to host supervisor
drew
committed
7c396d0
fix(vm): preserve fallible supervisor command API
drew
committed
c6e19b6
test(vm): make security checks portable
drew
committed
8355238