feat(sandbox): file transfer, egress policy and suspend/resume on Azure - #476

Open

ItamarZand88 wants to merge 29 commits into

mainfrom

itamar/alien-75-fix-gcp-sandbox-create

Commits on Aug 22, 2026

fix(sandbox): send the argv the Cloud Run launcher actually accepts
ItamarZand88
committed
9c41b0e
fix(sandbox): send Azure the image the stack declared
ItamarZand88
committed
b901fa4
fix(sandbox): take the data-plane audience from the package, not the host
ItamarZand88
committed
91c7565
feat(sandbox): move files in and out of an Azure sandbox
ItamarZand88
committed
c4f53c8
fix(sandbox): report an Azure session's real state, and send its variables
ItamarZand88
committed
95b7e35
feat(sandbox): create Azure sandboxes under the declared egress policy
ItamarZand88
committed
fd8cd6e
fix(sandbox): refuse a hostname allowlist instead of approximating it
ItamarZand88
committed
02b4866
fix(sandbox): fail an Azure create on a permission nobody asked for
ItamarZand88
committed
874f5a7
feat(sandbox): suspend, resume and auto-suspend an Azure sandbox
ItamarZand88
committed
f5c403f
fix(sandbox): read the state Azure's own auto-suspend produces
ItamarZand88
committed
07254cd
fix(sandbox): close what the pre-push review found
ItamarZand88
committed
f98f1b6
docs(sandbox): state what the code does, not what it used to do
ItamarZand88
committed
22e1767
fix(sandbox): refuse a GCP session id the launcher would read as a flag
ItamarZand88
committed
52896f3
fix(sandbox): close what the confirming review found
ItamarZand88
committed
2fc9b99
fix(sandbox): judge a session's state before its policy, and gate resume
ItamarZand88
committed
ca7f816
fix(sandbox): refuse a session that is on its way out, and reap one this code woke
ItamarZand88
committed
76b8d0b
fix(sandbox): judge a session in the state the work will run in
ItamarZand88
committed
3377b56
fix(sandbox): judge a sleeping session before waking it
ItamarZand88
committed
7e3ab83
fix(sandbox): suspend only the session this call woke
ItamarZand88
committed
1555252
fix(sandbox): send the verbs a repeat performs twice exactly once
ItamarZand88
committed
6d4c2ad
fix(sandbox): own a resume whose outcome the data plane never reported
ItamarZand88
committed
981b768
fix(sandbox): keep the caller's variables off the shell that bounds them
ItamarZand88
committed
51f27d4
docs(sandbox): hold the new comments to the standard
ItamarZand88
committed
ff27c01
fix(sandbox): make the wrapper this builds actually run
ItamarZand88
committed
024b408
fix(sandbox): refuse the loader family, not the two names guessed first
ItamarZand88
committed
e4a3de2
fix(sandbox): find the deadline report by its shape, not its position
ItamarZand88
committed
1d0a1c6
docs(sandbox): say what the deadline wrapper does not survive
ItamarZand88
committed
da08622
docs(sandbox): a refused session is left as it was found
ItamarZand88
committed
a1e08ab
fix(sandbox): send a state transition once, like the verbs beside it
ItamarZand88
committed
b6179a7

Navigation Menu

Uh oh!

feat(sandbox): file transfer, egress policy and suspend/resume on Azure - #476

feat(sandbox): file transfer, egress policy and suspend/resume on Azure#476
ItamarZand88 wants to merge 29 commits into
mainfrom
itamar/alien-75-fix-gcp-sandbox-create

Commits on Aug 22, 2026

fix(sandbox): send the argv the Cloud Run launcher actually accepts

fix(sandbox): send Azure the image the stack declared

fix(sandbox): take the data-plane audience from the package, not the host

feat(sandbox): move files in and out of an Azure sandbox

fix(sandbox): report an Azure session's real state, and send its variables

feat(sandbox): create Azure sandboxes under the declared egress policy

fix(sandbox): refuse a hostname allowlist instead of approximating it

fix(sandbox): fail an Azure create on a permission nobody asked for

feat(sandbox): suspend, resume and auto-suspend an Azure sandbox

fix(sandbox): read the state Azure's own auto-suspend produces

fix(sandbox): close what the pre-push review found

docs(sandbox): state what the code does, not what it used to do

fix(sandbox): refuse a GCP session id the launcher would read as a flag

fix(sandbox): close what the confirming review found

fix(sandbox): judge a session's state before its policy, and gate resume

fix(sandbox): refuse a session that is on its way out, and reap one this code woke

fix(sandbox): judge a session in the state the work will run in

fix(sandbox): judge a sleeping session before waking it

fix(sandbox): suspend only the session this call woke

fix(sandbox): send the verbs a repeat performs twice exactly once

fix(sandbox): own a resume whose outcome the data plane never reported

fix(sandbox): keep the caller's variables off the shell that bounds them

docs(sandbox): hold the new comments to the standard

fix(sandbox): make the wrapper this builds actually run

fix(sandbox): refuse the loader family, not the two names guessed first

fix(sandbox): find the deadline report by its shape, not its position

docs(sandbox): say what the deadline wrapper does not survive

docs(sandbox): a refused session is left as it was found

fix(sandbox): send a state transition once, like the verbs beside it