feat(docker): isolate workloads behind the host supervisor - #2965

Open

drew wants to merge 3 commits into

codex/vm-host-supervisorfrom

codex/docker-host-supervisor

Commits on Sep 9, 2026

feat(docker): isolate workloads behind the host supervisor
drew
committed
f3236a2
fix(docker): protect private runtime paths and unify rollback
drew
committed
be04770
refactor(docker): use the single authenticated grpc transport
drew
committed
14fcdf5