[ML] PR E: typed routing behind the established controller protocol - #3188

Open

valeriy42 wants to merge 36 commits into

feature/sandbox2-pr-d-lifecyclefrom

feature/sandbox2-pr-e-typed-routing

Commits on Sep 18, 2026

[ML] Add CProcessSpawnerRouter (PR E Task 2)
valeriy42
committed
00dae7e
[ML] Add typed route model + controller-token parsing (PR E Task 1)
valeriy42
committed
6475859
[ML] MG8 activation: hard-terminate on degraded-route seccomp failure (PR E Task 3)

valeriy42
and
claude
committed
510fbfe
[ML] H4 structured once-per-launch enforced-mode signal (PR E Task 4)
valeriy42
committed
7728661
[ML] Staged userns probe + ML_SANDBOX2_REQUIRE CI wiring (PR E Task 5)
valeriy42
committed
28987a9
[ML] Fix vacuous fail_closed pass on userns probe exec failure
valeriy42
committed
61356a4
[ML] Repair test_sandbox2_attack_defense.py (V14) + failure-modes doc
valeriy42
committed
7eda77b
[ML] Fix controller-construction leak and blocked-open pipe-reader leak
valeriy42
committed
a26600a
[ML] Publish controller protocol/capability version token (producer side)
valeriy42
committed
e4d3111
[ML] PR E review: dormant no-token default + single deployment_id derivation
valeriy42
committed
1040f7c
[ML] PR E review: skip in-process seccomp when ML_SANDBOXED=1
valeriy42
committed
92b9a36
[ML] PR E review: V14 PID discovery via controller log; one CI mode per arch
valeriy42
committed
3f43a25
[ML] PR E review: strip ML_SANDBOXED from legacy children; keep hard terminate dormant
valeriy42
committed
aa339d4
[ML] PR E review: H4 legacy_reason field; V14 harness asserts its route
valeriy42
committed
55628c4
[ML] Fix Windows fail-open ML_SANDBOXED bypass; drop dead scratch-path comment
valeriy42
committed
e0e3ac4
[ML] Fix case-sensitive ML_SANDBOXED match on Windows env stripping
valeriy42
committed
a5a977b
[ML] Fix lossy Unicode round-trip in Windows env-stripping (review Fix 3)
valeriy42
committed
040dfa9
[ML] Add sandbox2_compiled_in field to H4 signal (review Fix 4)
valeriy42
committed
6ba11c7
[ML] Ship controller-protocol.version in the nodeps zip too (review Fix 5)
valeriy42
committed
1e05b72
[ML] Make captureLogged()/env-var test helpers exception-safe (review Fixes 8, 9)
valeriy42
committed
cfabd0f
[ML] Distinguish absent/present userns capability in fail_closed mode (review Fix 10)
valeriy42
committed
585be28
[ML] Polish: stale comments and _GNU_SOURCE redefinition guard (review nice-to-haves)
valeriy42
committed
3370be0
[ML] Apply clang-format 5.0.1 to files touched across PR E's fix rounds
valeriy42
committed
793dc6b
[ML] Remove workspace-internal doc citations from comments
valeriy42
committed
d52865b
[ML] Fix Windows build: rename OUT local to TARGET_FILE
valeriy42
committed
d846e27
[ML] Fix Windows test failures: platform-aware copy args, gate arg-count tests
valeriy42
committed
9fc071d
[ML] Fix Linux ml_test_controller segfault: ODR-safe, lazily built sandbox spawner
valeriy42
committed
a8f65b6
[ML] Add symmetric --requireSandbox controller token, retire ML_SANDBOX2_DEFAULT_ENFORCED
valeriy42
committed
e222712
[ML] clang-format fixes for requireSandbox change
valeriy42
committed
43b56fb
Create the per-child IPC directory before validating its paths
valeriy42
committed
fd4d9a5
Port the Sandbox2-specific syscall allowlist from PR #2873
valeriy42
committed
8a6f2fa
Mount the per-child IPC root at the same path inside and outside Sandbox2
valeriy42
committed
c993d13
[ML] Mount a PID-namespaced /proc inside the pytorch_inference sandbox
valeriy42
committed
e53997f
[ML] Add sandbox regression check that /proc/self/exe resolves
valeriy42
committed
597a3f2
Apply clang-format 5.0.1 after restack onto D.
valeriy42
committed
3b5ae82
Retarget sandbox2ExplicitSyscalls after allowlist namespace flatten.
valeriy42
committed
1765d61

Navigation Menu

[ML] PR E: typed routing behind the established controller protocol - #3188

[ML] PR E: typed routing behind the established controller protocol#3188
valeriy42 wants to merge 36 commits into
feature/sandbox2-pr-d-lifecyclefrom
feature/sandbox2-pr-e-typed-routing

Commits on Sep 18, 2026

[ML] Add CProcessSpawnerRouter (PR E Task 2)

[ML] Add typed route model + controller-token parsing (PR E Task 1)

[ML] MG8 activation: hard-terminate on degraded-route seccomp failure (PR E Task 3)

[ML] H4 structured once-per-launch enforced-mode signal (PR E Task 4)

[ML] Staged userns probe + ML_SANDBOX2_REQUIRE CI wiring (PR E Task 5)

[ML] Fix vacuous fail_closed pass on userns probe exec failure

[ML] Repair test_sandbox2_attack_defense.py (V14) + failure-modes doc

[ML] Fix controller-construction leak and blocked-open pipe-reader leak

[ML] Publish controller protocol/capability version token (producer side)

[ML] PR E review: dormant no-token default + single deployment_id derivation

[ML] PR E review: skip in-process seccomp when ML_SANDBOXED=1

[ML] PR E review: V14 PID discovery via controller log; one CI mode per arch

[ML] PR E review: strip ML_SANDBOXED from legacy children; keep hard terminate dormant

[ML] PR E review: H4 legacy_reason field; V14 harness asserts its route

[ML] Fix Windows fail-open ML_SANDBOXED bypass; drop dead scratch-path comment

[ML] Fix case-sensitive ML_SANDBOXED match on Windows env stripping

[ML] Fix lossy Unicode round-trip in Windows env-stripping (review Fix 3)

[ML] Add sandbox2_compiled_in field to H4 signal (review Fix 4)

[ML] Ship controller-protocol.version in the nodeps zip too (review Fix 5)

[ML] Make captureLogged()/env-var test helpers exception-safe (review Fixes 8, 9)

[ML] Distinguish absent/present userns capability in fail_closed mode (review Fix 10)

[ML] Polish: stale comments and _GNU_SOURCE redefinition guard (review nice-to-haves)

[ML] Apply clang-format 5.0.1 to files touched across PR E's fix rounds

[ML] Remove workspace-internal doc citations from comments

[ML] Fix Windows build: rename OUT local to TARGET_FILE

[ML] Fix Windows test failures: platform-aware copy args, gate arg-count tests

[ML] Fix Linux ml_test_controller segfault: ODR-safe, lazily built sandbox spawner

[ML] Add symmetric --requireSandbox controller token, retire ML_SANDBOX2_DEFAULT_ENFORCED

[ML] clang-format fixes for requireSandbox change

Create the per-child IPC directory before validating its paths

Port the Sandbox2-specific syscall allowlist from PR #2873

Mount the per-child IPC root at the same path inside and outside Sandbox2

[ML] Mount a PID-namespaced /proc inside the pytorch_inference sandbox

[ML] Add sandbox regression check that /proc/self/exe resolves

Apply clang-format 5.0.1 after restack onto D.

Retarget sandbox2ExplicitSyscalls after allowlist namespace flatten.