feat(isolation): split supervisor and sandbox runtimes - #3151

Open

drew wants to merge 10 commits into

codex/1737-rfc12-supervisor-primitivesfrom

codex/1737-rfc12-supervisor-modes

Commits on Sep 9, 2026

feat(isolation): split supervisor and sandbox runtimes
drew
committed
2a4ba0e
docs(agents): register supervisor runtime
drew
committed
2afe2c8
fix(sandbox): harden boundary isolation and lifecycle ownership
drew
committed
4713d1c
fix(sandbox): reject private root redirects and adopt typed errors
drew
committed
8c9904e
fix(sandbox): preserve accept thread ownership on musl
drew
committed
f07e378
test(sandbox): isolate credential probes from filtered threads
drew
committed
3c6a4d9
fix(sandbox): return retained exec exit status to independent waiters
drew
committed
34b2d28
fix(sandbox): bound network mediation and preserve socket authorization
drew
committed
84be44c
fix(sandbox): bound control admission and retire stale mediation
drew
committed
ef53c81
ci(e2e): select migrated drivers per stack layer
drew
committed
d51a333