feat(podman): isolate workloads behind the host supervisor - #3230

Open

drew wants to merge 5 commits into

codex/kubernetes-proxy-pod-isolationfrom

codex/podman-host-supervisor

Commits on Sep 9, 2026

feat(podman): adopt isolated sandbox and supervisor containers
drew
committed
d42a7cc
fix(podman): stage bootstrap archives at named volume destinations
drew
committed
5314ed3
fix(podman): bound image metadata inspection and reject dangling roots
drew
committed
515b709
fix(podman): provision runtime state and rotate restart channel identity
drew
committed
a820116
fix(podman): use portable private tmpfs mounts
drew
committed
5e464ee