Repository navigation
Releases
Releases · gominimal/minimal
minimal 0.8.0-dev.265.gde32bd3d
0.8.0
261 commit(s) since v0.7.2.
Features
- mlog: opt-in OpenTelemetry export, switches and a local spool (2/7, spec 25) (#1994) (f4c13e4)
- min, minimald: one trace per request across the CLI and the daemon (3/7, spec 25) (#1995) (98dbe05)
- minvmd: export the VM host daemon's spans and carry telemetry into the guest (4/7, spec 25) (#1996) (8af4e1d)
- diag:
min bugcarries the telemetry spool and redacts telemetry settings (5/7, spec 25) (#1997) (1af0a88) - otel: guest telemetry rides the VM channel (#2039) (f5bb38c)
- packaging: ship minzoned in a signed macOS app bundle with the app icon (#2188) (4a87666)
- stdlib: type the patch ledger by kind, and check revision against it (#1277) (aa13deb)
- scripts: report non-Rust dependency pins and bump the pkgs locked_commit (#1875) (482c744)
- bep: add the bep crate with the GitHub module and the sealed envelope (#2346) (c2f0b78)
- bep: hold the proxy keys in the host keychain and publish their identity (#2363) (f8431d0)
- bep: append one hash-chained audit record per proxy decision (#2361) (b8b4f22)
- min: refuse GitHub grants at activation that the box or the host cannot honour (#2365) (767c59f)
- bep: issue leaf certificates under a name-constrained root and a signing CA (#2438) (788b6ec)
- bep: decide redemption as a pure function over host key, attribution and bounds (#2359) (554eff3)
- min: sign in to GitHub under the published App, kept in the host keychain (#2364) (5919d28)
- bep: refuse off-set authorities, off-port and expired values (#2448) (03466f7)
- min: add min box spec with root fingerprint, upstream set, steering and full marker (#2443) (0c33a45)
- bep: parse request heads strictly and forward a canonical head and body (#2362) (35529c8)
- min: read one box's audit trail with min box audit (#2457) (334e184)
- bep: refuse undeclared egress and host mismatches, admit only when every check passes (#2450) (4fcfa9c)
- bep: verify store handles against the client's registered key and the current rule (#2467) (248b259)
- bep: accept only box connections and terminate TLS for the module hosts over HTTP/1.1 (#2475) (cff2d9e)
- bep: validate the upstream, pass unsealed requests through, and stream replies (#2481) (cc56e3b)
- bep: wire the redemption decision and each box's declared egress into bep serve (#2486) (47223e0)
- minimal: mint sealed GitHub sign-in references and register the box with the proxy (#2490) (e55b32c)
- minimald: deliver each GitHub grant's sealed value into its variable in the box (#2491) (3eb782b)
- minimald: point a proxy_env box's environment at the proxy (#2492) (e8feee2)
- bep: issue and publish the host root certificate and hand it to each grant box (#2493) (efb91c7)
- minimald: put the proxy's root certificate in a grant box's trust store (#2495) (197a96b)
- minvmd: start the Box Egress Proxy beside gvproxy so git and gh reach GitHub (#2497) (ccc4f95)
- bep: rotate the signing CA under an unchanged root (#2508) (99ade7d)
- minimal: log out deletes the sign-in and refuses every reference to it (#2512) (42cf41d)
- net: reject UDP to port 443 where a box's QUIC stance is blocked (#2513) (1c94b06)
- bep: attribute a host-address redemption to its cohort and mark the audit (#2511) (2aa47e7)
- minimal: read client-owned store rules and refuse rules in the deny set (#2514) (55d0845)
- bep: renew an expiring GitHub sign-in once at the proxy (#2518) (f388b54)
- minimal: mint store handles and keep client keys registered across proxy restarts (#2520) (17ce321)
- minimald: steer credentialed names to the proxy and fail closed while it is down (#2519) (33b984a)
- bep: rotate the signing CA through the control socket (#2545) (230709d)
- minimal: check store rules at box creation and ask once per item (T54) (#2552) (15e9079)
- minimal: sign store handles under one host-keychain client key (T59) (#2557) (4180736)
- minimald: block UDP 443 for a host_ip cohort with a blocked QUIC stance (T53) (#2553) (160d3ed)
- minimal: store, list and remove secrets with min secret (T26) (#2522) (da0bdfb)
- minimal: list each store reference with its authorities in min box spec (T61) (#2569) (81ccbce)
- minimald: ship a git credential helper in grant boxes (T50) (#2547) (853a4f6)
- bep: record a revocation when a live box is destroyed (T20) (#2548) (7529939)
- bep: revoke or replace a registered client key and bound the registry (T63) (#2571) (cdcf1a2)
- bep: carry a store handle sealed as a store member (T60) (#2568) (694dba5)
- minimal: lay out the split VM users, directories and socket modes (T65) (#2561) (be9202e)
- minimald: steer the credentialed names of dns and both boxes through the gate (T58) (#2567) (3061ef1)
- bep: deny Minimal's infrastructure domains in the box CA and store rules (T55) (#2582) (8409ca0)
- bep: inject a stored key in its registered form per request (T28) (#2574) (bec5136)
- bep: rotate audit segments, carry the chain and restore revocations at start (T33) (#2583) (9d3dc96)
- bep: name the kid when a store handle is refused as unknown_key (#2592) (a1e65c5)
- bep: wire the client-key bound into bep serve with --max-client-keys (T69) (#2593) (e8f53f6)
- minimal: give a box re-created under its name an id of its own that redeems (T22) (#2584) (a38e265)
- bep: carry the handle jti into the audit record (T68) (#2596) (e455d2d)
- minimal: write the store rule from min secret set with fixed-token presets (T39) (#2577) (78e2a51)
- bep: inject store values in bep serve (T67) (#2597) (5a93a07)
- minimald: reject UDP 443 from a blocked cohort's own leaves (T72) (#2601) (5741f2f)
- minvmd: refuse a minted box id that a retained revocation record holds (T74) (#2611) (2fc77ce)
- bep: keep a replaced client key verifying until its boxes end (T84) (#2615) (4152396)
- bep: give bep serve a chain-preserving way out of an unreadable audit line (T75) (#2608) (2ced764)
- minimal: name the QUIC block helper in min finalize-install (T88) (#2644) (b49feb5)
- minvmd: check a minted box id against retained revocations with no proxy (T89) (#2643) (8c5d45a)
- bep: give bep serve the client's store rules so a store member is admitted (T83) (#2614) (dbba22b)
- bep: free the client key of a box that ended without forget_box (T90) (#2642) (1b7dfad)
- bep: admit a widened store rule without restarting bep serve (T91) (#2663) (bdc7a84)
- minimal: keep store rules under min --config-dir in step with bep serve (T92) (#2666) (fad7c72)
- just: add a preflight check and default cross to the amd64 image (#2478) (6f5ed76)
- minimald: proxy runtime-published ports like a direct connection (T99) (#2714) (7097b96)
- minimal: make min login the GitHub sign-in and drop retired cert surfaces (T113) (#2719) (cc55fef)
- minimald: record VM refusals on the host and admit RPC only from the host (T107) (#2721) (abe99f7)
- minimald: refuse an activation whose declared port something else holds (T100) (#2725) (703bb7f)
- minimal: report an edited audit chain in min doctor (T34) (#2603) (d5e802b)
- minimal: keep box names answering across a reboot and a second VM (T119) (#2722) (1f4bfd6)
- minimald: route the documented host literal on a native daemon (T116) (#2715) (eebb8fb)
- minimald: answer a macOS box's ports at the address its name resolves to (T98) (#2713) (64d3358)
Fixes
- minimal: say DNS, min.internal and box IPs plainly in finalize-install --show (#2166) (f90cf02)
- minvmd: reword the DNS-service refusals and minzoned release output in plain language (#2169) (0fb46a8)
- minvmd: reword refusal messages in plain language (#2171) (7dc57e6)
- cli,tui: reword cleanup and status warnings in plain language (#2175) (12a1152)
- minimald: reword network refusals and errors in plain language (#2173) (0ed86a6)
- minimald: reword attach refusals and port-request failures in plain language (#2172) (710abda)
- sessions: reword the credentialed-upstream policy row and ingress errors (#2180) (f3001e5)
- minimal: say the finalize-install egress item plainly (#2179) (1f6bc55)
- minimal: reword the min ls header rows and list warnings in plain language (#2182) (9db0c46)
- minimal: reword the box-name rows, the names line and session start messages in plain language (#2183) (080797e)
- minimal: skip the port-prompt subscription for a box with no host row (#2187) (4e168f6)
- switch: raise the outbound tcp connect bound so a burst of connections stops timing out (#2184) (265081b)
- minimald: elect one holder for a shared ingress port by creation order (#2185) (6f32545)
- minimal: accept a sticky root-owned directory and check before changing the host (#2195) (acda93b)
- minvmd: bind a waiting declared forward when the row holding its listener is withdrawn (#2186) (bfd0f99)
- minimal: give each local-range alias a /32 mask (#2196) (6c235fe)
- minimal: stop claiming a box name opens in any browser (#2211) (51f71f0)
- promote: find the draft release by listing and publish it under its tag (c5073b0)
- minimald: name the hand-over bind message in the actor's span (6e650e2)
- minimald: spawn the forward-ported tasks through the traced helpers (b567cf6)
- minvmd: say connection in the singular when the cap is one (5630f87)
- otel: the nineteen review follow-ups deferred from the telemetry stack (#2202) (#2207) (6c6c39a)
- cargo: remove the committed buf registry token (#2204) (813e4e5)
- minimald: hold an OS-picked port in the answerer relocation test (#2237) (e57b5ed)
- scripts: drop the nfpm pin that the 0.7.0 merge-back removed (#2243) (11b0b44)
- mctx: keep inline-table...
minimal 0.8.0-dev.241.g7097b969
0.8.0
239 commit(s) since v0.7.0.
Features
- mlog: opt-in OpenTelemetry export, switches and a local spool (2/7, spec 25) (#1994) (f4c13e4)
- min, minimald: one trace per request across the CLI and the daemon (3/7, spec 25) (#1995) (98dbe05)
- minvmd: export the VM host daemon's spans and carry telemetry into the guest (4/7, spec 25) (#1996) (8af4e1d)
- diag:
min bugcarries the telemetry spool and redacts telemetry settings (5/7, spec 25) (#1997) (1af0a88) - otel: guest telemetry rides the VM channel (#2039) (f5bb38c)
- packaging: ship minzoned in a signed macOS app bundle with the app icon (#2188) (4a87666)
- stdlib: type the patch ledger by kind, and check revision against it (#1277) (aa13deb)
- scripts: report non-Rust dependency pins and bump the pkgs locked_commit (#1875) (482c744)
- bep: add the bep crate with the GitHub module and the sealed envelope (#2346) (c2f0b78)
- bep: hold the proxy keys in the host keychain and publish their identity (#2363) (f8431d0)
- bep: append one hash-chained audit record per proxy decision (#2361) (b8b4f22)
- min: refuse GitHub grants at activation that the box or the host cannot honour (#2365) (767c59f)
- bep: issue leaf certificates under a name-constrained root and a signing CA (#2438) (788b6ec)
- bep: decide redemption as a pure function over host key, attribution and bounds (#2359) (554eff3)
- min: sign in to GitHub under the published App, kept in the host keychain (#2364) (5919d28)
- bep: refuse off-set authorities, off-port and expired values (#2448) (03466f7)
- min: add min box spec with root fingerprint, upstream set, steering and full marker (#2443) (0c33a45)
- bep: parse request heads strictly and forward a canonical head and body (#2362) (35529c8)
- min: read one box's audit trail with min box audit (#2457) (334e184)
- bep: refuse undeclared egress and host mismatches, admit only when every check passes (#2450) (4fcfa9c)
- bep: verify store handles against the client's registered key and the current rule (#2467) (248b259)
- bep: accept only box connections and terminate TLS for the module hosts over HTTP/1.1 (#2475) (cff2d9e)
- bep: validate the upstream, pass unsealed requests through, and stream replies (#2481) (cc56e3b)
- bep: wire the redemption decision and each box's declared egress into bep serve (#2486) (47223e0)
- minimal: mint sealed GitHub sign-in references and register the box with the proxy (#2490) (e55b32c)
- minimald: deliver each GitHub grant's sealed value into its variable in the box (#2491) (3eb782b)
- minimald: point a proxy_env box's environment at the proxy (#2492) (e8feee2)
- bep: issue and publish the host root certificate and hand it to each grant box (#2493) (efb91c7)
- minimald: put the proxy's root certificate in a grant box's trust store (#2495) (197a96b)
- minvmd: start the Box Egress Proxy beside gvproxy so git and gh reach GitHub (#2497) (ccc4f95)
- bep: rotate the signing CA under an unchanged root (#2508) (99ade7d)
- minimal: log out deletes the sign-in and refuses every reference to it (#2512) (42cf41d)
- net: reject UDP to port 443 where a box's QUIC stance is blocked (#2513) (1c94b06)
- bep: attribute a host-address redemption to its cohort and mark the audit (#2511) (2aa47e7)
- minimal: read client-owned store rules and refuse rules in the deny set (#2514) (55d0845)
- bep: renew an expiring GitHub sign-in once at the proxy (#2518) (f388b54)
- minimal: mint store handles and keep client keys registered across proxy restarts (#2520) (17ce321)
- minimald: steer credentialed names to the proxy and fail closed while it is down (#2519) (33b984a)
- bep: rotate the signing CA through the control socket (#2545) (230709d)
- minimal: check store rules at box creation and ask once per item (T54) (#2552) (15e9079)
- minimal: sign store handles under one host-keychain client key (T59) (#2557) (4180736)
- minimald: block UDP 443 for a host_ip cohort with a blocked QUIC stance (T53) (#2553) (160d3ed)
- minimal: store, list and remove secrets with min secret (T26) (#2522) (da0bdfb)
- minimal: list each store reference with its authorities in min box spec (T61) (#2569) (81ccbce)
- minimald: ship a git credential helper in grant boxes (T50) (#2547) (853a4f6)
- bep: record a revocation when a live box is destroyed (T20) (#2548) (7529939)
- bep: revoke or replace a registered client key and bound the registry (T63) (#2571) (cdcf1a2)
- bep: carry a store handle sealed as a store member (T60) (#2568) (694dba5)
- minimal: lay out the split VM users, directories and socket modes (T65) (#2561) (be9202e)
- minimald: steer the credentialed names of dns and both boxes through the gate (T58) (#2567) (3061ef1)
- bep: deny Minimal's infrastructure domains in the box CA and store rules (T55) (#2582) (8409ca0)
- bep: inject a stored key in its registered form per request (T28) (#2574) (bec5136)
- bep: rotate audit segments, carry the chain and restore revocations at start (T33) (#2583) (9d3dc96)
- bep: name the kid when a store handle is refused as unknown_key (#2592) (a1e65c5)
- bep: wire the client-key bound into bep serve with --max-client-keys (T69) (#2593) (e8f53f6)
- minimal: give a box re-created under its name an id of its own that redeems (T22) (#2584) (a38e265)
- bep: carry the handle jti into the audit record (T68) (#2596) (e455d2d)
- minimal: write the store rule from min secret set with fixed-token presets (T39) (#2577) (78e2a51)
- bep: inject store values in bep serve (T67) (#2597) (5a93a07)
- minimald: reject UDP 443 from a blocked cohort's own leaves (T72) (#2601) (5741f2f)
- minvmd: refuse a minted box id that a retained revocation record holds (T74) (#2611) (2fc77ce)
- bep: keep a replaced client key verifying until its boxes end (T84) (#2615) (4152396)
- bep: give bep serve a chain-preserving way out of an unreadable audit line (T75) (#2608) (2ced764)
- minimal: name the QUIC block helper in min finalize-install (T88) (#2644) (b49feb5)
- minvmd: check a minted box id against retained revocations with no proxy (T89) (#2643) (8c5d45a)
- bep: give bep serve the client's store rules so a store member is admitted (T83) (#2614) (dbba22b)
- bep: free the client key of a box that ended without forget_box (T90) (#2642) (1b7dfad)
- bep: admit a widened store rule without restarting bep serve (T91) (#2663) (bdc7a84)
- minimal: keep store rules under min --config-dir in step with bep serve (T92) (#2666) (fad7c72)
- just: add a preflight check and default cross to the amd64 image (#2478) (6f5ed76)
- minimald: proxy runtime-published ports like a direct connection (T99) (#2714) (7097b96)
Fixes
- minimal: say DNS, min.internal and box IPs plainly in finalize-install --show (#2166) (f90cf02)
- minvmd: reword the DNS-service refusals and minzoned release output in plain language (#2169) (0fb46a8)
- minvmd: reword refusal messages in plain language (#2171) (7dc57e6)
- cli,tui: reword cleanup and status warnings in plain language (#2175) (12a1152)
- minimald: reword network refusals and errors in plain language (#2173) (0ed86a6)
- minimald: reword attach refusals and port-request failures in plain language (#2172) (710abda)
- sessions: reword the credentialed-upstream policy row and ingress errors (#2180) (f3001e5)
- minimal: say the finalize-install egress item plainly (#2179) (1f6bc55)
- minimal: reword the min ls header rows and list warnings in plain language (#2182) (9db0c46)
- minimal: reword the box-name rows, the names line and session start messages in plain language (#2183) (080797e)
- minimal: skip the port-prompt subscription for a box with no host row (#2187) (4e168f6)
- switch: raise the outbound tcp connect bound so a burst of connections stops timing out (#2184) (265081b)
- minimald: elect one holder for a shared ingress port by creation order (#2185) (6f32545)
- minimal: accept a sticky root-owned directory and check before changing the host (#2195) (acda93b)
- minvmd: bind a waiting declared forward when the row holding its listener is withdrawn (#2186) (bfd0f99)
- minimal: give each local-range alias a /32 mask (#2196) (6c235fe)
- minimal: stop claiming a box name opens in any browser (#2211) (51f71f0)
- promote: find the draft release by listing and publish it under its tag (c5073b0)
- minimald: name the hand-over bind message in the actor's span (6e650e2)
- minimald: spawn the forward-ported tasks through the traced helpers (b567cf6)
- minvmd: say connection in the singular when the cap is one (5630f87)
- otel: the nineteen review follow-ups deferred from the telemetry stack (#2202) (#2207) (6c6c39a)
- cargo: remove the committed buf registry token (#2204) (813e4e5)
- minimald: hold an OS-picked port in the answerer relocation test (#2237) (e57b5ed)
- scripts: drop the nfpm pin that the 0.7.0 merge-back removed (#2243) (11b0b44)
- mctx: keep inline-table settings when adding deps (#2244) (9c985f0)
- minimal: hold the answerer channel socket owner-only (#2297) (746770d)
- minimal: remove the range aliases and resolver dir on macOS undo (#2246) (4e16307)
- minimal: compile the spin demo only in debug builds (#2301) (336c9b5)
- minimald: bound wedged transport writes with an inactivity deadline (#2303) (02f3af9)
- minimald: record dynamic-listen ports in the shared-port election (#2305) (3759c74)
- minimald: reuse the compose-time graph names in the finalize package check (#2304) (b45039a)
- minimal: spell network modes as host_ip, own_ip and none in min dash (#2310) (b18a418)
- minimald: log the box...
minimal 0.7.2
0.7.2
3 commit(s) since v0.7.1.
Fixes
Other changes
minimal 0.8.0-dev.226.gfad7c721
0.8.0
224 commit(s) since v0.7.0.
Features
- mlog: opt-in OpenTelemetry export, switches and a local spool (2/7, spec 25) (#1994) (f4c13e4)
- min, minimald: one trace per request across the CLI and the daemon (3/7, spec 25) (#1995) (98dbe05)
- minvmd: export the VM host daemon's spans and carry telemetry into the guest (4/7, spec 25) (#1996) (8af4e1d)
- diag:
min bugcarries the telemetry spool and redacts telemetry settings (5/7, spec 25) (#1997) (1af0a88) - otel: guest telemetry rides the VM channel (#2039) (f5bb38c)
- packaging: ship minzoned in a signed macOS app bundle with the app icon (#2188) (4a87666)
- stdlib: type the patch ledger by kind, and check revision against it (#1277) (aa13deb)
- scripts: report non-Rust dependency pins and bump the pkgs locked_commit (#1875) (482c744)
- bep: add the bep crate with the GitHub module and the sealed envelope (#2346) (c2f0b78)
- bep: hold the proxy keys in the host keychain and publish their identity (#2363) (f8431d0)
- bep: append one hash-chained audit record per proxy decision (#2361) (b8b4f22)
- min: refuse GitHub grants at activation that the box or the host cannot honour (#2365) (767c59f)
- bep: issue leaf certificates under a name-constrained root and a signing CA (#2438) (788b6ec)
- bep: decide redemption as a pure function over host key, attribution and bounds (#2359) (554eff3)
- min: sign in to GitHub under the published App, kept in the host keychain (#2364) (5919d28)
- bep: refuse off-set authorities, off-port and expired values (#2448) (03466f7)
- min: add min box spec with root fingerprint, upstream set, steering and full marker (#2443) (0c33a45)
- bep: parse request heads strictly and forward a canonical head and body (#2362) (35529c8)
- min: read one box's audit trail with min box audit (#2457) (334e184)
- bep: refuse undeclared egress and host mismatches, admit only when every check passes (#2450) (4fcfa9c)
- bep: verify store handles against the client's registered key and the current rule (#2467) (248b259)
- bep: accept only box connections and terminate TLS for the module hosts over HTTP/1.1 (#2475) (cff2d9e)
- bep: validate the upstream, pass unsealed requests through, and stream replies (#2481) (cc56e3b)
- bep: wire the redemption decision and each box's declared egress into bep serve (#2486) (47223e0)
- minimal: mint sealed GitHub sign-in references and register the box with the proxy (#2490) (e55b32c)
- minimald: deliver each GitHub grant's sealed value into its variable in the box (#2491) (3eb782b)
- minimald: point a proxy_env box's environment at the proxy (#2492) (e8feee2)
- bep: issue and publish the host root certificate and hand it to each grant box (#2493) (efb91c7)
- minimald: put the proxy's root certificate in a grant box's trust store (#2495) (197a96b)
- minvmd: start the Box Egress Proxy beside gvproxy so git and gh reach GitHub (#2497) (ccc4f95)
- bep: rotate the signing CA under an unchanged root (#2508) (99ade7d)
- minimal: log out deletes the sign-in and refuses every reference to it (#2512) (42cf41d)
- net: reject UDP to port 443 where a box's QUIC stance is blocked (#2513) (1c94b06)
- bep: attribute a host-address redemption to its cohort and mark the audit (#2511) (2aa47e7)
- minimal: read client-owned store rules and refuse rules in the deny set (#2514) (55d0845)
- bep: renew an expiring GitHub sign-in once at the proxy (#2518) (f388b54)
- minimal: mint store handles and keep client keys registered across proxy restarts (#2520) (17ce321)
- minimald: steer credentialed names to the proxy and fail closed while it is down (#2519) (33b984a)
- bep: rotate the signing CA through the control socket (#2545) (230709d)
- minimal: check store rules at box creation and ask once per item (T54) (#2552) (15e9079)
- minimal: sign store handles under one host-keychain client key (T59) (#2557) (4180736)
- minimald: block UDP 443 for a host_ip cohort with a blocked QUIC stance (T53) (#2553) (160d3ed)
- minimal: store, list and remove secrets with min secret (T26) (#2522) (da0bdfb)
- minimal: list each store reference with its authorities in min box spec (T61) (#2569) (81ccbce)
- minimald: ship a git credential helper in grant boxes (T50) (#2547) (853a4f6)
- bep: record a revocation when a live box is destroyed (T20) (#2548) (7529939)
- bep: revoke or replace a registered client key and bound the registry (T63) (#2571) (cdcf1a2)
- bep: carry a store handle sealed as a store member (T60) (#2568) (694dba5)
- minimal: lay out the split VM users, directories and socket modes (T65) (#2561) (be9202e)
- minimald: steer the credentialed names of dns and both boxes through the gate (T58) (#2567) (3061ef1)
- bep: deny Minimal's infrastructure domains in the box CA and store rules (T55) (#2582) (8409ca0)
- bep: inject a stored key in its registered form per request (T28) (#2574) (bec5136)
- bep: rotate audit segments, carry the chain and restore revocations at start (T33) (#2583) (9d3dc96)
- bep: name the kid when a store handle is refused as unknown_key (#2592) (a1e65c5)
- bep: wire the client-key bound into bep serve with --max-client-keys (T69) (#2593) (e8f53f6)
- minimal: give a box re-created under its name an id of its own that redeems (T22) (#2584) (a38e265)
- bep: carry the handle jti into the audit record (T68) (#2596) (e455d2d)
- minimal: write the store rule from min secret set with fixed-token presets (T39) (#2577) (78e2a51)
- bep: inject store values in bep serve (T67) (#2597) (5a93a07)
- minimald: reject UDP 443 from a blocked cohort's own leaves (T72) (#2601) (5741f2f)
- minvmd: refuse a minted box id that a retained revocation record holds (T74) (#2611) (2fc77ce)
- bep: keep a replaced client key verifying until its boxes end (T84) (#2615) (4152396)
- bep: give bep serve a chain-preserving way out of an unreadable audit line (T75) (#2608) (2ced764)
- minimal: name the QUIC block helper in min finalize-install (T88) (#2644) (b49feb5)
- minvmd: check a minted box id against retained revocations with no proxy (T89) (#2643) (8c5d45a)
- bep: give bep serve the client's store rules so a store member is admitted (T83) (#2614) (dbba22b)
- bep: free the client key of a box that ended without forget_box (T90) (#2642) (1b7dfad)
- bep: admit a widened store rule without restarting bep serve (T91) (#2663) (bdc7a84)
- minimal: keep store rules under min --config-dir in step with bep serve (T92) (#2666) (fad7c72)
Fixes
- minimal: say DNS, min.internal and box IPs plainly in finalize-install --show (#2166) (f90cf02)
- minvmd: reword the DNS-service refusals and minzoned release output in plain language (#2169) (0fb46a8)
- minvmd: reword refusal messages in plain language (#2171) (7dc57e6)
- cli,tui: reword cleanup and status warnings in plain language (#2175) (12a1152)
- minimald: reword network refusals and errors in plain language (#2173) (0ed86a6)
- minimald: reword attach refusals and port-request failures in plain language (#2172) (710abda)
- sessions: reword the credentialed-upstream policy row and ingress errors (#2180) (f3001e5)
- minimal: say the finalize-install egress item plainly (#2179) (1f6bc55)
- minimal: reword the min ls header rows and list warnings in plain language (#2182) (9db0c46)
- minimal: reword the box-name rows, the names line and session start messages in plain language (#2183) (080797e)
- minimal: skip the port-prompt subscription for a box with no host row (#2187) (4e168f6)
- switch: raise the outbound tcp connect bound so a burst of connections stops timing out (#2184) (265081b)
- minimald: elect one holder for a shared ingress port by creation order (#2185) (6f32545)
- minimal: accept a sticky root-owned directory and check before changing the host (#2195) (acda93b)
- minvmd: bind a waiting declared forward when the row holding its listener is withdrawn (#2186) (bfd0f99)
- minimal: give each local-range alias a /32 mask (#2196) (6c235fe)
- minimal: stop claiming a box name opens in any browser (#2211) (51f71f0)
- promote: find the draft release by listing and publish it under its tag (c5073b0)
- minimald: name the hand-over bind message in the actor's span (6e650e2)
- minimald: spawn the forward-ported tasks through the traced helpers (b567cf6)
- minvmd: say connection in the singular when the cap is one (5630f87)
- otel: the nineteen review follow-ups deferred from the telemetry stack (#2202) (#2207) (6c6c39a)
- cargo: remove the committed buf registry token (#2204) (813e4e5)
- minimald: hold an OS-picked port in the answerer relocation test (#2237) (e57b5ed)
- scripts: drop the nfpm pin that the 0.7.0 merge-back removed (#2243) (11b0b44)
- mctx: keep inline-table settings when adding deps (#2244) (9c985f0)
- minimal: hold the answerer channel socket owner-only (#2297) (746770d)
- minimal: remove the range aliases and resolver dir on macOS undo (#2246) (4e16307)
- minimal: compile the spin demo only in debug builds (#2301) (336c9b5)
- minimald: bound wedged transport writes with an inactivity deadline (#2303) (02f3af9)
- minimald: record dynamic-listen ports in the shared-port election (#2305) (3759c74)
- minimald: reuse the compose-time graph names in the finalize package check (#2304) (b45039a)
- minimal: spell network modes as host_ip, own_ip and none in min dash (#2310) (b18a418)
- minimald: log the box name plainly in shared-port hand-over lines (#2308) (1d13b17)
- minimald: name a pending hold in the expose refusal (#2317) (d825e46)
- minimal-client: skip entries vanishing ...
minimal 0.8.0-dev.204.g5a93a07a
0.8.0
202 commit(s) since v0.7.0.
Features
- mlog: opt-in OpenTelemetry export, switches and a local spool (2/7, spec 25) (#1994) (f4c13e4)
- min, minimald: one trace per request across the CLI and the daemon (3/7, spec 25) (#1995) (98dbe05)
- minvmd: export the VM host daemon's spans and carry telemetry into the guest (4/7, spec 25) (#1996) (8af4e1d)
- diag:
min bugcarries the telemetry spool and redacts telemetry settings (5/7, spec 25) (#1997) (1af0a88) - otel: guest telemetry rides the VM channel (#2039) (f5bb38c)
- packaging: ship minzoned in a signed macOS app bundle with the app icon (#2188) (4a87666)
- stdlib: type the patch ledger by kind, and check revision against it (#1277) (aa13deb)
- scripts: report non-Rust dependency pins and bump the pkgs locked_commit (#1875) (482c744)
- bep: add the bep crate with the GitHub module and the sealed envelope (#2346) (c2f0b78)
- bep: hold the proxy keys in the host keychain and publish their identity (#2363) (f8431d0)
- bep: append one hash-chained audit record per proxy decision (#2361) (b8b4f22)
- min: refuse GitHub grants at activation that the box or the host cannot honour (#2365) (767c59f)
- bep: issue leaf certificates under a name-constrained root and a signing CA (#2438) (788b6ec)
- bep: decide redemption as a pure function over host key, attribution and bounds (#2359) (554eff3)
- min: sign in to GitHub under the published App, kept in the host keychain (#2364) (5919d28)
- bep: refuse off-set authorities, off-port and expired values (#2448) (03466f7)
- min: add min box spec with root fingerprint, upstream set, steering and full marker (#2443) (0c33a45)
- bep: parse request heads strictly and forward a canonical head and body (#2362) (35529c8)
- min: read one box's audit trail with min box audit (#2457) (334e184)
- bep: refuse undeclared egress and host mismatches, admit only when every check passes (#2450) (4fcfa9c)
- bep: verify store handles against the client's registered key and the current rule (#2467) (248b259)
- bep: accept only box connections and terminate TLS for the module hosts over HTTP/1.1 (#2475) (cff2d9e)
- bep: validate the upstream, pass unsealed requests through, and stream replies (#2481) (cc56e3b)
- bep: wire the redemption decision and each box's declared egress into bep serve (#2486) (47223e0)
- minimal: mint sealed GitHub sign-in references and register the box with the proxy (#2490) (e55b32c)
- minimald: deliver each GitHub grant's sealed value into its variable in the box (#2491) (3eb782b)
- minimald: point a proxy_env box's environment at the proxy (#2492) (e8feee2)
- bep: issue and publish the host root certificate and hand it to each grant box (#2493) (efb91c7)
- minimald: put the proxy's root certificate in a grant box's trust store (#2495) (197a96b)
- minvmd: start the Box Egress Proxy beside gvproxy so git and gh reach GitHub (#2497) (ccc4f95)
- bep: rotate the signing CA under an unchanged root (#2508) (99ade7d)
- minimal: log out deletes the sign-in and refuses every reference to it (#2512) (42cf41d)
- net: reject UDP to port 443 where a box's QUIC stance is blocked (#2513) (1c94b06)
- bep: attribute a host-address redemption to its cohort and mark the audit (#2511) (2aa47e7)
- minimal: read client-owned store rules and refuse rules in the deny set (#2514) (55d0845)
- bep: renew an expiring GitHub sign-in once at the proxy (#2518) (f388b54)
- minimal: mint store handles and keep client keys registered across proxy restarts (#2520) (17ce321)
- minimald: steer credentialed names to the proxy and fail closed while it is down (#2519) (33b984a)
- bep: rotate the signing CA through the control socket (#2545) (230709d)
- minimal: check store rules at box creation and ask once per item (T54) (#2552) (15e9079)
- minimal: sign store handles under one host-keychain client key (T59) (#2557) (4180736)
- minimald: block UDP 443 for a host_ip cohort with a blocked QUIC stance (T53) (#2553) (160d3ed)
- minimal: store, list and remove secrets with min secret (T26) (#2522) (da0bdfb)
- minimal: list each store reference with its authorities in min box spec (T61) (#2569) (81ccbce)
- minimald: ship a git credential helper in grant boxes (T50) (#2547) (853a4f6)
- bep: record a revocation when a live box is destroyed (T20) (#2548) (7529939)
- bep: revoke or replace a registered client key and bound the registry (T63) (#2571) (cdcf1a2)
- bep: carry a store handle sealed as a store member (T60) (#2568) (694dba5)
- minimal: lay out the split VM users, directories and socket modes (T65) (#2561) (be9202e)
- minimald: steer the credentialed names of dns and both boxes through the gate (T58) (#2567) (3061ef1)
- bep: deny Minimal's infrastructure domains in the box CA and store rules (T55) (#2582) (8409ca0)
- bep: inject a stored key in its registered form per request (T28) (#2574) (bec5136)
- bep: rotate audit segments, carry the chain and restore revocations at start (T33) (#2583) (9d3dc96)
- bep: name the kid when a store handle is refused as unknown_key (#2592) (a1e65c5)
- bep: wire the client-key bound into bep serve with --max-client-keys (T69) (#2593) (e8f53f6)
- minimal: give a box re-created under its name an id of its own that redeems (T22) (#2584) (a38e265)
- bep: carry the handle jti into the audit record (T68) (#2596) (e455d2d)
- minimal: write the store rule from min secret set with fixed-token presets (T39) (#2577) (78e2a51)
- bep: inject store values in bep serve (T67) (#2597) (5a93a07)
Fixes
- minimal: say DNS, min.internal and box IPs plainly in finalize-install --show (#2166) (f90cf02)
- minvmd: reword the DNS-service refusals and minzoned release output in plain language (#2169) (0fb46a8)
- minvmd: reword refusal messages in plain language (#2171) (7dc57e6)
- cli,tui: reword cleanup and status warnings in plain language (#2175) (12a1152)
- minimald: reword network refusals and errors in plain language (#2173) (0ed86a6)
- minimald: reword attach refusals and port-request failures in plain language (#2172) (710abda)
- sessions: reword the credentialed-upstream policy row and ingress errors (#2180) (f3001e5)
- minimal: say the finalize-install egress item plainly (#2179) (1f6bc55)
- minimal: reword the min ls header rows and list warnings in plain language (#2182) (9db0c46)
- minimal: reword the box-name rows, the names line and session start messages in plain language (#2183) (080797e)
- minimal: skip the port-prompt subscription for a box with no host row (#2187) (4e168f6)
- switch: raise the outbound tcp connect bound so a burst of connections stops timing out (#2184) (265081b)
- minimald: elect one holder for a shared ingress port by creation order (#2185) (6f32545)
- minimal: accept a sticky root-owned directory and check before changing the host (#2195) (acda93b)
- minvmd: bind a waiting declared forward when the row holding its listener is withdrawn (#2186) (bfd0f99)
- minimal: give each local-range alias a /32 mask (#2196) (6c235fe)
- minimal: stop claiming a box name opens in any browser (#2211) (51f71f0)
- promote: find the draft release by listing and publish it under its tag (c5073b0)
- minimald: name the hand-over bind message in the actor's span (6e650e2)
- minimald: spawn the forward-ported tasks through the traced helpers (b567cf6)
- minvmd: say connection in the singular when the cap is one (5630f87)
- otel: the nineteen review follow-ups deferred from the telemetry stack (#2202) (#2207) (6c6c39a)
- cargo: remove the committed buf registry token (#2204) (813e4e5)
- minimald: hold an OS-picked port in the answerer relocation test (#2237) (e57b5ed)
- scripts: drop the nfpm pin that the 0.7.0 merge-back removed (#2243) (11b0b44)
- mctx: keep inline-table settings when adding deps (#2244) (9c985f0)
- minimal: hold the answerer channel socket owner-only (#2297) (746770d)
- minimal: remove the range aliases and resolver dir on macOS undo (#2246) (4e16307)
- minimal: compile the spin demo only in debug builds (#2301) (336c9b5)
- minimald: bound wedged transport writes with an inactivity deadline (#2303) (02f3af9)
- minimald: record dynamic-listen ports in the shared-port election (#2305) (3759c74)
- minimald: reuse the compose-time graph names in the finalize package check (#2304) (b45039a)
- minimal: spell network modes as host_ip, own_ip and none in min dash (#2310) (b18a418)
- minimald: log the box name plainly in shared-port hand-over lines (#2308) (1d13b17)
- minimald: name a pending hold in the expose refusal (#2317) (d825e46)
- minimal-client: skip entries vanishing during the workspace upload walk (#2316) (48a6259)
- minimal: flush the macOS system resolver cache in the finalize-install scripts (#2306) (9ea9433)
- common: write file cache downloads atomically via temp file and rename (#2242) (40420c9)
- minimal: ask only running VMs' daemons to release the hook port (#2245) (23e908f)
- mctx: keep task args from running as shell code (#2296) (cfcff04)
- net: keep restored own-ip boxes' rows and ingress across a VM restart (#2298) (10d34a5)
- net: refuse out-of-zone names at a guest deny-subtree DNS listener (#2300) (2c2f8cc)
- minimald: leave HEAD alone when a push targets another branch (#2319) (0a297d0)
- minimald: keep a timed-out hook's captured output (#2318) (3cfae65)
- minimal: report an already-destroyed session instead of failing (#2315) (c5b6dcd)
- minimald: handle --help at every level of the in-session min helper (#2312) (76cc0a7)
- minvmd: reap a stale gvproxy bef...
minimal 0.8.0-dev.172.gdd753658
0.8.0
170 commit(s) since v0.7.0.
Features
- mlog: opt-in OpenTelemetry export, switches and a local spool (2/7, spec 25) (#1994) (f4c13e4)
- min, minimald: one trace per request across the CLI and the daemon (3/7, spec 25) (#1995) (98dbe05)
- minvmd: export the VM host daemon's spans and carry telemetry into the guest (4/7, spec 25) (#1996) (8af4e1d)
- diag:
min bugcarries the telemetry spool and redacts telemetry settings (5/7, spec 25) (#1997) (1af0a88) - otel: guest telemetry rides the VM channel (#2039) (f5bb38c)
- packaging: ship minzoned in a signed macOS app bundle with the app icon (#2188) (4a87666)
- stdlib: type the patch ledger by kind, and check revision against it (#1277) (aa13deb)
- scripts: report non-Rust dependency pins and bump the pkgs locked_commit (#1875) (482c744)
- bep: add the bep crate with the GitHub module and the sealed envelope (#2346) (c2f0b78)
- bep: hold the proxy keys in the host keychain and publish their identity (#2363) (f8431d0)
- bep: append one hash-chained audit record per proxy decision (#2361) (b8b4f22)
- min: refuse GitHub grants at activation that the box or the host cannot honour (#2365) (767c59f)
- bep: issue leaf certificates under a name-constrained root and a signing CA (#2438) (788b6ec)
- bep: decide redemption as a pure function over host key, attribution and bounds (#2359) (554eff3)
- min: sign in to GitHub under the published App, kept in the host keychain (#2364) (5919d28)
- bep: refuse off-set authorities, off-port and expired values (#2448) (03466f7)
- min: add min box spec with root fingerprint, upstream set, steering and full marker (#2443) (0c33a45)
- bep: parse request heads strictly and forward a canonical head and body (#2362) (35529c8)
- min: read one box's audit trail with min box audit (#2457) (334e184)
- bep: refuse undeclared egress and host mismatches, admit only when every check passes (#2450) (4fcfa9c)
- bep: verify store handles against the client's registered key and the current rule (#2467) (248b259)
- bep: accept only box connections and terminate TLS for the module hosts over HTTP/1.1 (#2475) (cff2d9e)
- bep: validate the upstream, pass unsealed requests through, and stream replies (#2481) (cc56e3b)
- bep: wire the redemption decision and each box's declared egress into bep serve (#2486) (47223e0)
- minimal: mint sealed GitHub sign-in references and register the box with the proxy (#2490) (e55b32c)
- minimald: deliver each GitHub grant's sealed value into its variable in the box (#2491) (3eb782b)
- minimald: point a proxy_env box's environment at the proxy (#2492) (e8feee2)
- bep: issue and publish the host root certificate and hand it to each grant box (#2493) (efb91c7)
- minimald: put the proxy's root certificate in a grant box's trust store (#2495) (197a96b)
- minvmd: start the Box Egress Proxy beside gvproxy so git and gh reach GitHub (#2497) (ccc4f95)
- bep: rotate the signing CA under an unchanged root (#2508) (99ade7d)
- minimal: log out deletes the sign-in and refuses every reference to it (#2512) (42cf41d)
- net: reject UDP to port 443 where a box's QUIC stance is blocked (#2513) (1c94b06)
- bep: attribute a host-address redemption to its cohort and mark the audit (#2511) (2aa47e7)
- minimal: read client-owned store rules and refuse rules in the deny set (#2514) (55d0845)
- bep: renew an expiring GitHub sign-in once at the proxy (#2518) (f388b54)
- minimal: mint store handles and keep client keys registered across proxy restarts (#2520) (17ce321)
- minimald: steer credentialed names to the proxy and fail closed while it is down (#2519) (33b984a)
- bep: rotate the signing CA through the control socket (#2545) (230709d)
Fixes
- minimal: say DNS, min.internal and box IPs plainly in finalize-install --show (#2166) (f90cf02)
- minvmd: reword the DNS-service refusals and minzoned release output in plain language (#2169) (0fb46a8)
- minvmd: reword refusal messages in plain language (#2171) (7dc57e6)
- cli,tui: reword cleanup and status warnings in plain language (#2175) (12a1152)
- minimald: reword network refusals and errors in plain language (#2173) (0ed86a6)
- minimald: reword attach refusals and port-request failures in plain language (#2172) (710abda)
- sessions: reword the credentialed-upstream policy row and ingress errors (#2180) (f3001e5)
- minimal: say the finalize-install egress item plainly (#2179) (1f6bc55)
- minimal: reword the min ls header rows and list warnings in plain language (#2182) (9db0c46)
- minimal: reword the box-name rows, the names line and session start messages in plain language (#2183) (080797e)
- minimal: skip the port-prompt subscription for a box with no host row (#2187) (4e168f6)
- switch: raise the outbound tcp connect bound so a burst of connections stops timing out (#2184) (265081b)
- minimald: elect one holder for a shared ingress port by creation order (#2185) (6f32545)
- minimal: accept a sticky root-owned directory and check before changing the host (#2195) (acda93b)
- minvmd: bind a waiting declared forward when the row holding its listener is withdrawn (#2186) (bfd0f99)
- minimal: give each local-range alias a /32 mask (#2196) (6c235fe)
- minimal: stop claiming a box name opens in any browser (#2211) (51f71f0)
- promote: find the draft release by listing and publish it under its tag (c5073b0)
- minimald: name the hand-over bind message in the actor's span (6e650e2)
- minimald: spawn the forward-ported tasks through the traced helpers (b567cf6)
- minvmd: say connection in the singular when the cap is one (5630f87)
- otel: the nineteen review follow-ups deferred from the telemetry stack (#2202) (#2207) (6c6c39a)
- cargo: remove the committed buf registry token (#2204) (813e4e5)
- minimald: hold an OS-picked port in the answerer relocation test (#2237) (e57b5ed)
- scripts: drop the nfpm pin that the 0.7.0 merge-back removed (#2243) (11b0b44)
- mctx: keep inline-table settings when adding deps (#2244) (9c985f0)
- minimal: hold the answerer channel socket owner-only (#2297) (746770d)
- minimal: remove the range aliases and resolver dir on macOS undo (#2246) (4e16307)
- minimal: compile the spin demo only in debug builds (#2301) (336c9b5)
- minimald: bound wedged transport writes with an inactivity deadline (#2303) (02f3af9)
- minimald: record dynamic-listen ports in the shared-port election (#2305) (3759c74)
- minimald: reuse the compose-time graph names in the finalize package check (#2304) (b45039a)
- minimal: spell network modes as host_ip, own_ip and none in min dash (#2310) (b18a418)
- minimald: log the box name plainly in shared-port hand-over lines (#2308) (1d13b17)
- minimald: name a pending hold in the expose refusal (#2317) (d825e46)
- minimal-client: skip entries vanishing during the workspace upload walk (#2316) (48a6259)
- minimal: flush the macOS system resolver cache in the finalize-install scripts (#2306) (9ea9433)
- common: write file cache downloads atomically via temp file and rename (#2242) (40420c9)
- minimal: ask only running VMs' daemons to release the hook port (#2245) (23e908f)
- mctx: keep task args from running as shell code (#2296) (cfcff04)
- net: keep restored own-ip boxes' rows and ingress across a VM restart (#2298) (10d34a5)
- net: refuse out-of-zone names at a guest deny-subtree DNS listener (#2300) (2c2f8cc)
- minimald: leave HEAD alone when a push targets another branch (#2319) (0a297d0)
- minimald: keep a timed-out hook's captured output (#2318) (3cfae65)
- minimal: report an already-destroyed session instead of failing (#2315) (c5b6dcd)
- minimald: handle --help at every level of the in-session min helper (#2312) (76cc0a7)
- minvmd: reap a stale gvproxy before drawing the node proxy port (#2313) (7675e02)
- send the lease ARP as the relay's first frame (#2333) (1bec117)
- minimal: name the held port in finalize-install's names item (#2309) (daa934d)
- installer,dash: stop the daemon across uninstall and reinstall (#2342) (2e67f8a)
- minimal: name the min stop race in plain language (#2314) (abbdb31)
- common: disallow tar Entry::unpack via clippy to prevent a hardlink cwd escape (#2336) (40b542d)
- e2e: aim the escape-union cross arms at public halves (#2350) (28ab14c)
- deps: bump rustls-webpki and webpki-root-certs past the emSign advisories (#2466) (c0ac8c5)
- minvmd: keep a dormant creation's loopback address claimed (#2348) (3c9275a)
- installer: stop a daemon left on an older build after the swaps, asking before ending sessions (#2338) (e6cbd46)
- minimald: tell an exec why a session destroy ended it (#2351) (e815aad)
- rcache: skip an artifact write when the object exists at the same size; retry a 429 (#1755) (f38a87b)
- check: read only the parts of artifact files the checkers need (#2235) (4be6709)
- op: give the sandbox a private copy of non-extracted sources (#2234) (13aaa43)
- sandbox: remove a sandbox directory whose build failed (#2357) (02f68e2)
- minimald: run a session's teardown off the manager mainloop (#2224) (e30e124)
- common: a gcs transport error is an error, not a panic (#1718) (1223598)
- rcache: let one RemoteCacheWriter serve concurrent uploads (#2356) (3cd77c7)
- minimald,minimal: a cleanup destroy keeps a session that finished activating (#2233) (4cd07da)
- minimald: a listing reads a session's host from a slot the actor publishes (#2231) (06b3da5)
- minimald: take an exec's input off the SSH channel as it arrives, not as the command reads it (#2197) (608ab9c)
- minimal: close the daemo...
minimal 0.8.0-dev.153.g608ab9c9
0.8.0
151 commit(s) since v0.7.0.
Features
- mlog: opt-in OpenTelemetry export, switches and a local spool (2/7, spec 25) (#1994) (f4c13e4)
- min, minimald: one trace per request across the CLI and the daemon (3/7, spec 25) (#1995) (98dbe05)
- minvmd: export the VM host daemon's spans and carry telemetry into the guest (4/7, spec 25) (#1996) (8af4e1d)
- diag:
min bugcarries the telemetry spool and redacts telemetry settings (5/7, spec 25) (#1997) (1af0a88) - otel: guest telemetry rides the VM channel (#2039) (f5bb38c)
- packaging: ship minzoned in a signed macOS app bundle with the app icon (#2188) (4a87666)
- stdlib: type the patch ledger by kind, and check revision against it (#1277) (aa13deb)
- scripts: report non-Rust dependency pins and bump the pkgs locked_commit (#1875) (482c744)
- bep: add the bep crate with the GitHub module and the sealed envelope (#2346) (c2f0b78)
- bep: hold the proxy keys in the host keychain and publish their identity (#2363) (f8431d0)
- bep: append one hash-chained audit record per proxy decision (#2361) (b8b4f22)
- min: refuse GitHub grants at activation that the box or the host cannot honour (#2365) (767c59f)
- bep: issue leaf certificates under a name-constrained root and a signing CA (#2438) (788b6ec)
- bep: decide redemption as a pure function over host key, attribution and bounds (#2359) (554eff3)
- min: sign in to GitHub under the published App, kept in the host keychain (#2364) (5919d28)
- bep: refuse off-set authorities, off-port and expired values (#2448) (03466f7)
- min: add min box spec with root fingerprint, upstream set, steering and full marker (#2443) (0c33a45)
- bep: parse request heads strictly and forward a canonical head and body (#2362) (35529c8)
- min: read one box's audit trail with min box audit (#2457) (334e184)
- bep: refuse undeclared egress and host mismatches, admit only when every check passes (#2450) (4fcfa9c)
- bep: verify store handles against the client's registered key and the current rule (#2467) (248b259)
- bep: accept only box connections and terminate TLS for the module hosts over HTTP/1.1 (#2475) (cff2d9e)
- bep: validate the upstream, pass unsealed requests through, and stream replies (#2481) (cc56e3b)
- bep: wire the redemption decision and each box's declared egress into bep serve (#2486) (47223e0)
- minimal: mint sealed GitHub sign-in references and register the box with the proxy (#2490) (e55b32c)
- minimald: deliver each GitHub grant's sealed value into its variable in the box (#2491) (3eb782b)
- minimald: point a proxy_env box's environment at the proxy (#2492) (e8feee2)
- bep: issue and publish the host root certificate and hand it to each grant box (#2493) (efb91c7)
- minimald: put the proxy's root certificate in a grant box's trust store (#2495) (197a96b)
Fixes
- minimal: say DNS, min.internal and box IPs plainly in finalize-install --show (#2166) (f90cf02)
- minvmd: reword the DNS-service refusals and minzoned release output in plain language (#2169) (0fb46a8)
- minvmd: reword refusal messages in plain language (#2171) (7dc57e6)
- cli,tui: reword cleanup and status warnings in plain language (#2175) (12a1152)
- minimald: reword network refusals and errors in plain language (#2173) (0ed86a6)
- minimald: reword attach refusals and port-request failures in plain language (#2172) (710abda)
- sessions: reword the credentialed-upstream policy row and ingress errors (#2180) (f3001e5)
- minimal: say the finalize-install egress item plainly (#2179) (1f6bc55)
- minimal: reword the min ls header rows and list warnings in plain language (#2182) (9db0c46)
- minimal: reword the box-name rows, the names line and session start messages in plain language (#2183) (080797e)
- minimal: skip the port-prompt subscription for a box with no host row (#2187) (4e168f6)
- switch: raise the outbound tcp connect bound so a burst of connections stops timing out (#2184) (265081b)
- minimald: elect one holder for a shared ingress port by creation order (#2185) (6f32545)
- minimal: accept a sticky root-owned directory and check before changing the host (#2195) (acda93b)
- minvmd: bind a waiting declared forward when the row holding its listener is withdrawn (#2186) (bfd0f99)
- minimal: give each local-range alias a /32 mask (#2196) (6c235fe)
- minimal: stop claiming a box name opens in any browser (#2211) (51f71f0)
- promote: find the draft release by listing and publish it under its tag (c5073b0)
- minimald: name the hand-over bind message in the actor's span (6e650e2)
- minimald: spawn the forward-ported tasks through the traced helpers (b567cf6)
- minvmd: say connection in the singular when the cap is one (5630f87)
- otel: the nineteen review follow-ups deferred from the telemetry stack (#2202) (#2207) (6c6c39a)
- cargo: remove the committed buf registry token (#2204) (813e4e5)
- minimald: hold an OS-picked port in the answerer relocation test (#2237) (e57b5ed)
- scripts: drop the nfpm pin that the 0.7.0 merge-back removed (#2243) (11b0b44)
- mctx: keep inline-table settings when adding deps (#2244) (9c985f0)
- minimal: hold the answerer channel socket owner-only (#2297) (746770d)
- minimal: remove the range aliases and resolver dir on macOS undo (#2246) (4e16307)
- minimal: compile the spin demo only in debug builds (#2301) (336c9b5)
- minimald: bound wedged transport writes with an inactivity deadline (#2303) (02f3af9)
- minimald: record dynamic-listen ports in the shared-port election (#2305) (3759c74)
- minimald: reuse the compose-time graph names in the finalize package check (#2304) (b45039a)
- minimal: spell network modes as host_ip, own_ip and none in min dash (#2310) (b18a418)
- minimald: log the box name plainly in shared-port hand-over lines (#2308) (1d13b17)
- minimald: name a pending hold in the expose refusal (#2317) (d825e46)
- minimal-client: skip entries vanishing during the workspace upload walk (#2316) (48a6259)
- minimal: flush the macOS system resolver cache in the finalize-install scripts (#2306) (9ea9433)
- common: write file cache downloads atomically via temp file and rename (#2242) (40420c9)
- minimal: ask only running VMs' daemons to release the hook port (#2245) (23e908f)
- mctx: keep task args from running as shell code (#2296) (cfcff04)
- net: keep restored own-ip boxes' rows and ingress across a VM restart (#2298) (10d34a5)
- net: refuse out-of-zone names at a guest deny-subtree DNS listener (#2300) (2c2f8cc)
- minimald: leave HEAD alone when a push targets another branch (#2319) (0a297d0)
- minimald: keep a timed-out hook's captured output (#2318) (3cfae65)
- minimal: report an already-destroyed session instead of failing (#2315) (c5b6dcd)
- minimald: handle --help at every level of the in-session min helper (#2312) (76cc0a7)
- minvmd: reap a stale gvproxy before drawing the node proxy port (#2313) (7675e02)
- send the lease ARP as the relay's first frame (#2333) (1bec117)
- minimal: name the held port in finalize-install's names item (#2309) (daa934d)
- installer,dash: stop the daemon across uninstall and reinstall (#2342) (2e67f8a)
- minimal: name the min stop race in plain language (#2314) (abbdb31)
- common: disallow tar Entry::unpack via clippy to prevent a hardlink cwd escape (#2336) (40b542d)
- e2e: aim the escape-union cross arms at public halves (#2350) (28ab14c)
- deps: bump rustls-webpki and webpki-root-certs past the emSign advisories (#2466) (c0ac8c5)
- minvmd: keep a dormant creation's loopback address claimed (#2348) (3c9275a)
- installer: stop a daemon left on an older build after the swaps, asking before ending sessions (#2338) (e6cbd46)
- minimald: tell an exec why a session destroy ended it (#2351) (e815aad)
- rcache: skip an artifact write when the object exists at the same size; retry a 429 (#1755) (f38a87b)
- check: read only the parts of artifact files the checkers need (#2235) (4be6709)
- op: give the sandbox a private copy of non-extracted sources (#2234) (13aaa43)
- sandbox: remove a sandbox directory whose build failed (#2357) (02f68e2)
- minimald: run a session's teardown off the manager mainloop (#2224) (e30e124)
- common: a gcs transport error is an error, not a panic (#1718) (1223598)
- rcache: let one RemoteCacheWriter serve concurrent uploads (#2356) (3cd77c7)
- minimald,minimal: a cleanup destroy keeps a session that finished activating (#2233) (4cd07da)
- minimald: a listing reads a session's host from a slot the actor publishes (#2231) (06b3da5)
- minimald: take an exec's input off the SSH channel as it arrives, not as the command reads it (#2197) (608ab9c)
Other changes
- declare 0.8.0 as the next release (#2168) (28a38b3)
- switch: gate bep_host socket tests under miri (#2165) (1e32c2b)
- deny: ignore RUSTSEC-2024-0449 (unsafe-libyaml via nickel-lang-core's serde_yaml) (#2194) (71f35e0)
- rename the sandbox2 crate to sandbox and add the box naming rule (#2106) (21b369b)
- otel: spec 25 — review round: stories, opt-out, host-env scope, vsock guest path, trust model (#1988) (a214f31)
- harden three flaky probes ahead of the telemetry series (#1993) (aacba86)
- otel: requirement tests for mlog, min, minimald and minvmd; Kani lanes (#1989) (b6386b9)
- macos: take the unit job's crate list from the justfile scope (#2200) (1e2d93a)
- deps: rustls 0.23.46 (RUSTSEC-2026-0346, -0347, -0348, -0349) (#2206) (598e6d8)
- minimal: fold minimal-tui into the dash module (#2104) (a3f2fa9)
- minimal: reword activate network and egress flag help (#2170) (93e440a)
- **rel...
minimal 0.8.0-dev.134.g5378e56c
0.8.0
132 commit(s) since v0.7.0.
Features
- mlog: opt-in OpenTelemetry export, switches and a local spool (2/7, spec 25) (#1994) (f4c13e4)
- min, minimald: one trace per request across the CLI and the daemon (3/7, spec 25) (#1995) (98dbe05)
- minvmd: export the VM host daemon's spans and carry telemetry into the guest (4/7, spec 25) (#1996) (8af4e1d)
- diag:
min bugcarries the telemetry spool and redacts telemetry settings (5/7, spec 25) (#1997) (1af0a88) - otel: guest telemetry rides the VM channel (#2039) (f5bb38c)
- packaging: ship minzoned in a signed macOS app bundle with the app icon (#2188) (4a87666)
- stdlib: type the patch ledger by kind, and check revision against it (#1277) (aa13deb)
- scripts: report non-Rust dependency pins and bump the pkgs locked_commit (#1875) (482c744)
- bep: add the bep crate with the GitHub module and the sealed envelope (#2346) (c2f0b78)
- bep: hold the proxy keys in the host keychain and publish their identity (#2363) (f8431d0)
- bep: append one hash-chained audit record per proxy decision (#2361) (b8b4f22)
- min: refuse GitHub grants at activation that the box or the host cannot honour (#2365) (767c59f)
- bep: issue leaf certificates under a name-constrained root and a signing CA (#2438) (788b6ec)
- bep: decide redemption as a pure function over host key, attribution and bounds (#2359) (554eff3)
- min: sign in to GitHub under the published App, kept in the host keychain (#2364) (5919d28)
- bep: refuse off-set authorities, off-port and expired values (#2448) (03466f7)
- min: add min box spec with root fingerprint, upstream set, steering and full marker (#2443) (0c33a45)
- bep: parse request heads strictly and forward a canonical head and body (#2362) (35529c8)
- min: read one box's audit trail with min box audit (#2457) (334e184)
- bep: refuse undeclared egress and host mismatches, admit only when every check passes (#2450) (4fcfa9c)
- bep: verify store handles against the client's registered key and the current rule (#2467) (248b259)
- bep: accept only box connections and terminate TLS for the module hosts over HTTP/1.1 (#2475) (cff2d9e)
- bep: validate the upstream, pass unsealed requests through, and stream replies (#2481) (cc56e3b)
- bep: wire the redemption decision and each box's declared egress into bep serve (#2486) (47223e0)
Fixes
- minimal: say DNS, min.internal and box IPs plainly in finalize-install --show (#2166) (f90cf02)
- minvmd: reword the DNS-service refusals and minzoned release output in plain language (#2169) (0fb46a8)
- minvmd: reword refusal messages in plain language (#2171) (7dc57e6)
- cli,tui: reword cleanup and status warnings in plain language (#2175) (12a1152)
- minimald: reword network refusals and errors in plain language (#2173) (0ed86a6)
- minimald: reword attach refusals and port-request failures in plain language (#2172) (710abda)
- sessions: reword the credentialed-upstream policy row and ingress errors (#2180) (f3001e5)
- minimal: say the finalize-install egress item plainly (#2179) (1f6bc55)
- minimal: reword the min ls header rows and list warnings in plain language (#2182) (9db0c46)
- minimal: reword the box-name rows, the names line and session start messages in plain language (#2183) (080797e)
- minimal: skip the port-prompt subscription for a box with no host row (#2187) (4e168f6)
- switch: raise the outbound tcp connect bound so a burst of connections stops timing out (#2184) (265081b)
- minimald: elect one holder for a shared ingress port by creation order (#2185) (6f32545)
- minimal: accept a sticky root-owned directory and check before changing the host (#2195) (acda93b)
- minvmd: bind a waiting declared forward when the row holding its listener is withdrawn (#2186) (bfd0f99)
- minimal: give each local-range alias a /32 mask (#2196) (6c235fe)
- minimal: stop claiming a box name opens in any browser (#2211) (51f71f0)
- promote: find the draft release by listing and publish it under its tag (c5073b0)
- minimald: name the hand-over bind message in the actor's span (6e650e2)
- minimald: spawn the forward-ported tasks through the traced helpers (b567cf6)
- minvmd: say connection in the singular when the cap is one (5630f87)
- otel: the nineteen review follow-ups deferred from the telemetry stack (#2202) (#2207) (6c6c39a)
- cargo: remove the committed buf registry token (#2204) (813e4e5)
- minimald: hold an OS-picked port in the answerer relocation test (#2237) (e57b5ed)
- scripts: drop the nfpm pin that the 0.7.0 merge-back removed (#2243) (11b0b44)
- mctx: keep inline-table settings when adding deps (#2244) (9c985f0)
- minimal: hold the answerer channel socket owner-only (#2297) (746770d)
- minimal: remove the range aliases and resolver dir on macOS undo (#2246) (4e16307)
- minimal: compile the spin demo only in debug builds (#2301) (336c9b5)
- minimald: bound wedged transport writes with an inactivity deadline (#2303) (02f3af9)
- minimald: record dynamic-listen ports in the shared-port election (#2305) (3759c74)
- minimald: reuse the compose-time graph names in the finalize package check (#2304) (b45039a)
- minimal: spell network modes as host_ip, own_ip and none in min dash (#2310) (b18a418)
- minimald: log the box name plainly in shared-port hand-over lines (#2308) (1d13b17)
- minimald: name a pending hold in the expose refusal (#2317) (d825e46)
- minimal-client: skip entries vanishing during the workspace upload walk (#2316) (48a6259)
- minimal: flush the macOS system resolver cache in the finalize-install scripts (#2306) (9ea9433)
- common: write file cache downloads atomically via temp file and rename (#2242) (40420c9)
- minimal: ask only running VMs' daemons to release the hook port (#2245) (23e908f)
- mctx: keep task args from running as shell code (#2296) (cfcff04)
- net: keep restored own-ip boxes' rows and ingress across a VM restart (#2298) (10d34a5)
- net: refuse out-of-zone names at a guest deny-subtree DNS listener (#2300) (2c2f8cc)
- minimald: leave HEAD alone when a push targets another branch (#2319) (0a297d0)
- minimald: keep a timed-out hook's captured output (#2318) (3cfae65)
- minimal: report an already-destroyed session instead of failing (#2315) (c5b6dcd)
- minimald: handle --help at every level of the in-session min helper (#2312) (76cc0a7)
- minvmd: reap a stale gvproxy before drawing the node proxy port (#2313) (7675e02)
- send the lease ARP as the relay's first frame (#2333) (1bec117)
- minimal: name the held port in finalize-install's names item (#2309) (daa934d)
- installer,dash: stop the daemon across uninstall and reinstall (#2342) (2e67f8a)
- minimal: name the min stop race in plain language (#2314) (abbdb31)
- common: disallow tar Entry::unpack via clippy to prevent a hardlink cwd escape (#2336) (40b542d)
- e2e: aim the escape-union cross arms at public halves (#2350) (28ab14c)
- deps: bump rustls-webpki and webpki-root-certs past the emSign advisories (#2466) (c0ac8c5)
- minvmd: keep a dormant creation's loopback address claimed (#2348) (3c9275a)
- installer: stop a daemon left on an older build after the swaps, asking before ending sessions (#2338) (e6cbd46)
- minimald: tell an exec why a session destroy ended it (#2351) (e815aad)
Other changes
- declare 0.8.0 as the next release (#2168) (28a38b3)
- switch: gate bep_host socket tests under miri (#2165) (1e32c2b)
- deny: ignore RUSTSEC-2024-0449 (unsafe-libyaml via nickel-lang-core's serde_yaml) (#2194) (71f35e0)
- rename the sandbox2 crate to sandbox and add the box naming rule (#2106) (21b369b)
- otel: spec 25 — review round: stories, opt-out, host-env scope, vsock guest path, trust model (#1988) (a214f31)
- harden three flaky probes ahead of the telemetry series (#1993) (aacba86)
- otel: requirement tests for mlog, min, minimald and minvmd; Kani lanes (#1989) (b6386b9)
- macos: take the unit job's crate list from the justfile scope (#2200) (1e2d93a)
- deps: rustls 0.23.46 (RUSTSEC-2026-0346, -0347, -0348, -0349) (#2206) (598e6d8)
- minimal: fold minimal-tui into the dash module (#2104) (a3f2fa9)
- minimal: reword activate network and egress flag help (#2170) (93e440a)
- release: drop distro packages from the 0.7.0 release (#2214) (ce79c45)
- cli-min: qualify the own_ip deny-all default by the box's egress declaration (2ce67fd)
- e2e: expect the bundle's program in the range proof when the step installs the bundle (00eb544)
- rename the sessions crate to boxes (#2201) (6fb3c55)
- reference: document min net expose in sandbox-operations (#2216) (5955f3f)
- minimald: rename the session modules for what they hold (#2228) (c22640e)
- rename the session types for the box they model (#2229) (bfe0c5a)
- release: merge a diverged release tag back into main (804680c)
- release: fetch the tag and list unmatched fixes before a merge-back (e448eb2)
- release: force the tag fetch so a stale local tag is replaced (4cf5524)
- vale: accept the spec-hash and supply-chain terms (#2018) (647e902)
- telemetry: say DO_NOT_TRACK needs a non-empty value, and link spec 25 by URL (#2209) (cb46bda)
- reference: correct the --dynamic-ingress row for VM-backed hosts (#2217) (21744cc)
- e2e: hold daemon 2's busy default port across its start (#2311) (e2443c1)
- specs: let min secret set write the store rule, with fixed-token presets (#2247) (bb01558)
- spec-lint: read the linter from foundry's spec plugin (#2240) (#2241) (51c1348)
- specs: add an Anthropic API-key preset and set NODE_USE_ENV_PROXY under proxy_env (#2328) (c485dae)
-...
minimal 0.7.1
minimal 0.8.0-dev.123.g248b259c
0.8.0
121 commit(s) since v0.7.0.
Features
- mlog: opt-in OpenTelemetry export, switches and a local spool (2/7, spec 25) (#1994) (f4c13e4)
- min, minimald: one trace per request across the CLI and the daemon (3/7, spec 25) (#1995) (98dbe05)
- minvmd: export the VM host daemon's spans and carry telemetry into the guest (4/7, spec 25) (#1996) (8af4e1d)
- diag:
min bugcarries the telemetry spool and redacts telemetry settings (5/7, spec 25) (#1997) (1af0a88) - otel: guest telemetry rides the VM channel (#2039) (f5bb38c)
- packaging: ship minzoned in a signed macOS app bundle with the app icon (#2188) (4a87666)
- stdlib: type the patch ledger by kind, and check revision against it (#1277) (aa13deb)
- scripts: report non-Rust dependency pins and bump the pkgs locked_commit (#1875) (482c744)
- bep: add the bep crate with the GitHub module and the sealed envelope (#2346) (c2f0b78)
- bep: hold the proxy keys in the host keychain and publish their identity (#2363) (f8431d0)
- bep: append one hash-chained audit record per proxy decision (#2361) (b8b4f22)
- min: refuse GitHub grants at activation that the box or the host cannot honour (#2365) (767c59f)
- bep: issue leaf certificates under a name-constrained root and a signing CA (#2438) (788b6ec)
- bep: decide redemption as a pure function over host key, attribution and bounds (#2359) (554eff3)
- min: sign in to GitHub under the published App, kept in the host keychain (#2364) (5919d28)
- bep: refuse off-set authorities, off-port and expired values (#2448) (03466f7)
- min: add min box spec with root fingerprint, upstream set, steering and full marker (#2443) (0c33a45)
- bep: parse request heads strictly and forward a canonical head and body (#2362) (35529c8)
- min: read one box's audit trail with min box audit (#2457) (334e184)
- bep: refuse undeclared egress and host mismatches, admit only when every check passes (#2450) (4fcfa9c)
- bep: verify store handles against the client's registered key and the current rule (#2467) (248b259)
Fixes
- minimal: say DNS, min.internal and box IPs plainly in finalize-install --show (#2166) (f90cf02)
- minvmd: reword the DNS-service refusals and minzoned release output in plain language (#2169) (0fb46a8)
- minvmd: reword refusal messages in plain language (#2171) (7dc57e6)
- cli,tui: reword cleanup and status warnings in plain language (#2175) (12a1152)
- minimald: reword network refusals and errors in plain language (#2173) (0ed86a6)
- minimald: reword attach refusals and port-request failures in plain language (#2172) (710abda)
- sessions: reword the credentialed-upstream policy row and ingress errors (#2180) (f3001e5)
- minimal: say the finalize-install egress item plainly (#2179) (1f6bc55)
- minimal: reword the min ls header rows and list warnings in plain language (#2182) (9db0c46)
- minimal: reword the box-name rows, the names line and session start messages in plain language (#2183) (080797e)
- minimal: skip the port-prompt subscription for a box with no host row (#2187) (4e168f6)
- switch: raise the outbound tcp connect bound so a burst of connections stops timing out (#2184) (265081b)
- minimald: elect one holder for a shared ingress port by creation order (#2185) (6f32545)
- minimal: accept a sticky root-owned directory and check before changing the host (#2195) (acda93b)
- minvmd: bind a waiting declared forward when the row holding its listener is withdrawn (#2186) (bfd0f99)
- minimal: give each local-range alias a /32 mask (#2196) (6c235fe)
- minimal: stop claiming a box name opens in any browser (#2211) (51f71f0)
- promote: find the draft release by listing and publish it under its tag (c5073b0)
- minimald: name the hand-over bind message in the actor's span (6e650e2)
- minimald: spawn the forward-ported tasks through the traced helpers (b567cf6)
- minvmd: say connection in the singular when the cap is one (5630f87)
- otel: the nineteen review follow-ups deferred from the telemetry stack (#2202) (#2207) (6c6c39a)
- cargo: remove the committed buf registry token (#2204) (813e4e5)
- minimald: hold an OS-picked port in the answerer relocation test (#2237) (e57b5ed)
- scripts: drop the nfpm pin that the 0.7.0 merge-back removed (#2243) (11b0b44)
- mctx: keep inline-table settings when adding deps (#2244) (9c985f0)
- minimal: hold the answerer channel socket owner-only (#2297) (746770d)
- minimal: remove the range aliases and resolver dir on macOS undo (#2246) (4e16307)
- minimal: compile the spin demo only in debug builds (#2301) (336c9b5)
- minimald: bound wedged transport writes with an inactivity deadline (#2303) (02f3af9)
- minimald: record dynamic-listen ports in the shared-port election (#2305) (3759c74)
- minimald: reuse the compose-time graph names in the finalize package check (#2304) (b45039a) DD4B
- minimal: spell network modes as host_ip, own_ip and none in min dash (#2310) (b18a418)
- minimald: log the box name plainly in shared-port hand-over lines (#2308) (1d13b17)
- minimald: name a pending hold in the expose refusal (#2317) (d825e46)
- minimal-client: skip entries vanishing during the workspace upload walk (#2316) (48a6259)
- minimal: flush the macOS system resolver cache in the finalize-install scripts (#2306) (9ea9433)
- common: write file cache downloads atomically via temp file and rename (#2242) (40420c9)
- minimal: ask only running VMs' daemons to release the hook port (#2245) (23e908f)
- mctx: keep task args from running as shell code (#2296) (cfcff04)
- net: keep restored own-ip boxes' rows and ingress across a VM restart (#2298) (10d34a5)
- net: refuse out-of-zone names at a guest deny-subtree DNS listener (#2300) (2c2f8cc)
- minimald: leave HEAD alone when a push targets another branch (#2319) (0a297d0)
- minimald: keep a timed-out hook's captured output (#2318) (3cfae65)
- minimal: report an already-destroyed session instead of failing (#2315) (c5b6dcd)
- minimald: handle --help at every level of the in-session min helper (#2312) (76cc0a7)
- minvmd: reap a stale gvproxy before drawing the node proxy port (#2313) (7675e02)
- send the lease ARP as the relay's first frame (#2333) (1bec117)
- minimal: name the held port in finalize-install's names item (#2309) (daa934d)
- installer,dash: stop the daemon across uninstall and reinstall (#2342) (2e67f8a)
- minimal: name the min stop race in plain language (#2314) (abbdb31)
- common: disallow tar Entry::unpack via clippy to prevent a hardlink cwd escape (#2336) (40b542d)
- e2e: aim the escape-union cross arms at public halves (#2350) (28ab14c)
- deps: bump rustls-webpki and webpki-root-certs past the emSign advisories (#2466) (c0ac8c5)
- minvmd: keep a dormant creation's loopback address claimed (#2348) (3c9275a)
Other changes
- declare 0.8.0 as the next release (#2168) (28a38b3)
- switch: gate bep_host socket tests under miri (#2165) (1e32c2b)
- deny: ignore RUSTSEC-2024-0449 (unsafe-libyaml via nickel-lang-core's serde_yaml) (#2194) (71f35e0)
- rename the sandbox2 crate to sandbox and add the box naming rule (#2106) (21b369b)
- otel: spec 25 — review round: stories, opt-out, host-env scope, vsock guest path, trust model (#1988) (a214f31)
- harden three flaky probes ahead of the telemetry series (#1993) (aacba86)
- otel: requirement tests for mlog, min, minimald and minvmd; Kani lanes (#1989) (b6386b9)
- macos: take the unit job's crate list from the justfile scope (#2200) (1e2d93a)
- deps: rustls 0.23.46 (RUSTSEC-2026-0346, -0347, -0348, -0349) (#2206) (598e6d8)
- minimal: fold minimal-tui into the dash module (#2104) (a3f2fa9)
- minimal: reword activate network and egress flag help (#2170) (93e440a)
- release: drop distro packages from the 0.7.0 release (#2214) (ce79c45)
- cli-min: qualify the own_ip deny-all default by the box's egress declaration (2ce67fd)
- e2e: expect the bundle's program in the range proof when the step installs the bundle (00eb544)
- rename the sessions crate to boxes (#2201) (6fb3c55)
- reference: document min net expose in sandbox-operations (#2216) (5955f3f)
- minimald: rename the session modules for what they hold (#2228) (c22640e)
- rename the session types for the box they model (#2229) (bfe0c5a)
- release: merge a diverged release tag back into main (804680c)
- release: fetch the tag and list unmatched fixes before a merge-back (e448eb2)
- release: force the tag fetch so a stale local tag is replaced (4cf5524)
- vale: accept the spec-hash and supply-chain terms (#2018) (647e902)
- telemetry: say DO_NOT_TRACK needs a non-empty value, and link spec 25 by URL (#2209) (cb46bda)
- reference: correct the --dynamic-ingress row for VM-backed hosts (#2217) (21744cc)
- e2e: hold daemon 2's busy default port across its start (#2311) (e2443c1)
- specs: let min secret set write the store rule, with fixed-token presets (#2247) (bb01558)
- spec-lint: read the linter from foundry's spec plugin (#2240) (#2241) (51c1348)
- specs: add an Anthropic API-key preset and set NODE_USE_ENV_PROXY under proxy_env (#2328) (c485dae)
- spikes: measure whether clients send a sealed handle unmodified (#2327) (dedbf2c)
- minvmd: move canonical_box_name into box_registry (#2344) (d67d78e)
- deps: bump the github-actions group across 1 directory with 5 updates (#2353) (559a1d8)
- orchestrator: move DeliverableRef into a leaf ids module (#2340) (75a4646)
- minvmd: move the drop limiter core into its own module (#2349) (8d4e7c5)
- minimal-client: move AskWatch into ask_dialog to break an import cycle (#2341) (21adc79)
- *...