feat(sandbox): selective per-domain network allowlist (slirp4netns) — #10 step 2 - #143

Merged

oratis merged 7 commits into

mainfrom

feat/sandbox-net-allowlist

Jun 1, 2026

Commits on Jun 1, 2026

chore(sandbox): diagnostic PoC for slirp4netns net-allowlist mechanics

oratis
and
claude
committed
599c9a7
chore(sandbox): make net PoC hang-proof (sleep readiness + watchdog)

oratis
and
claude
committed
d226f1d
chore(sandbox): fix resolv.conf bind (dangling symlink) + --disable-dns

oratis
and
claude
committed
b290caa
chore(sandbox): slirp --userns-path to fix setns EPERM into bwrap netns

oratis
and
claude
committed
769cd31
chore(sandbox): PoC — bwrap --uid 0 + README-exact slirp + ns diagnostics

oratis
and
claude
committed
dc7d2b0
feat(sandbox): slirp4netns selective per-domain network allowlist (#10)

oratis
and
claude
committed
0223b1e
fix(sandbox): swallow stream errors on netns teardown

oratis
and
claude
committed
228de55