feat: add role-based Local computer permissions - #9472

Merged

w31r4 merged 42 commits into

codex/linux-bubblewrap-shell-sandbox

Sep 15, 2026

Commits on Jul 30, 2026

feat: sandbox local member execution on Linux
Soulter
committed
009e7ea
feat: add macOS Seatbelt local sandbox
Soulter
committed
56767f3

Commits on Jul 31, 2026

feat: Implement race-resistant file access for local tools
Soulter
committed
f671ff7

Commits on Aug 2, 2026

Merge remote-tracking branch 'origin/master' into codex/linux-bubblewrap-shell-sandbox
Soulter
committed
b273ef2
feat: add role-based Local computer permissions
Soulter
committed
27b6ab3
fix: clarify Windows Local permission behavior
Soulter
committed
e9a53e7
style: use neutral permission matrix border
Soulter
committed
0ea4879
fix: clarify Local runtime permission labels
Soulter
committed
d228218
fix: localize computer runtime options
Soulter
committed
945dddf
fix: tighten default Local permission policy
Soulter
committed
e44c8b4
fix: allow macOS sandboxed shell forks
Soulter
committed
220992b

Commits on Aug 13, 2026

Merge remote-tracking branch 'origin/master' into codex/linux-bubblewrap-shell-sandbox
Soulter
committed
2610e2c

Commits on Sep 3, 2026

chore: merge upstream master into local sandbox branch
RC-CHN
committed
6c738a6
refactor: extract platform process sandboxes
RC-CHN
committed
5687129

Commits on Sep 4, 2026

refactor: expose cross-platform sandbox limits
RC-CHN
committed
b29119e
refactor: unify sandbox process lifecycle
RC-CHN
committed
bc24cdd
refactor: seal local sandbox abstractions
RC-CHN
committed
03c058a

Commits on Sep 7, 2026

chore: merge latest upstream master
RC-CHN
committed
1510035
test: align local sandbox tests with Windows support
RC-CHN
committed
c5481fa
fix: improve local permission settings layout
RC-CHN
committed
a08c3db
fix: initialize workspace for restricted file writes
RC-CHN
committed
bdc8ad1
feat: expose runtime and sandbox dependency information
RC-CHN
committed
33d99ba
feat: add disabled local access and platform-aware permission controls
RC-CHN
committed
3b049c8
feat: display runtime information in local permission controls
RC-CHN
committed
05ac0ba

Commits on Sep 8, 2026

fix: validate local permission support before saving config
RC-CHN
committed
860ceca
chore: merge latest upstream master
RC-CHN
committed
a6e207a
fix: use supported local permission defaults on Windows
RC-CHN
committed
8ceb6a4
fix: restrict local file sending and align Windows permission tests
RC-CHN
committed
b0d5a5d
chore: remove redundant local permission hint
RC-CHN
committed
97ffa73
fix: restore local sandbox DNS and approved file access
RC-CHN
committed
7a1aa9c
ci: enable bubblewrap user namespaces on Ubuntu runners
RC-CHN
committed
1807e6f
fix: report local sandbox startup failures
RC-CHN
committed
ec6921c
fix: use a portable sandbox startup probe
RC-CHN
committed
20f9f12
fix: preserve read-only Python virtualenv access in local sandboxes
RC-CHN
committed
390c213
fix: revoke local shell sessions when permissions change
RC-CHN
committed
721cd89
fix: block shared-path attacks on local runtime file exchange
RC-CHN
committed
3589ad5

Commits on Sep 9, 2026

Commits on Sep 15, 2026

chore: merge upstream master into local sandbox branch
RC-CHN
committed
2871b34