All pull requests

Pull requests

• test(minimal): T21 — Specs, types and entries inspected, end to end

  #3338·minimal-foundry[bot] opened Nov 12, 2026Bot·

  ·
  1

  4

• docs(spikes): record how the proxy reaches the TPM (T127)

  #3337·norrietaylor opened Nov 12, 2026Member·Queued
  1

  19

• test(minimald): T25 — Types only narrow, end to end

  #3336·minimal-foundry[bot] opened Nov 12, 2026Bot·

  ·
  1

  1

• feat(minimal): T45 — Box logs strips terminal control codes when stdout is not a terminal

  #3335·minimal-foundry[bot] opened Nov 12, 2026Bot·

  ·
  1

  19

• feat(minimal): T43 — Box show takes -o json|yaml|toml, with its execs

  #3334·minimal-foundry[bot] opened Nov 12, 2026Bot·

  ·
  1

  16

• fix(minimal): T42 — Rename on a native host prints no VM-host warning

  #3333·minimal-foundry[bot] opened Nov 12, 2026Bot·

  ·
  1

  7

• feat(bep): T130 — Hold the proxy's keys in Secret Service where the host has no usable TPM

  #3330·minimal-foundry[bot] opened Nov 12, 2026Bot·

  ·
  1

  50

• feat(minimal): T126 — Refuse a named loadout on a sealed box, a loadout that sets loadout_mode, and a contradicted constraint; a sealed box reads no default loadouts

  #3301·minimal-foundry[bot] opened Nov 12, 2026Bot·

  ·
  1

  66

• fix(classifier): an nft that refuses before reading its script still reports what it said

  review:approved
  #3289·bryan-minimal opened Nov 11, 2026Member·

  ·
  5

• fix(common): a cross-device copy keeps the source's modification time

  #3288·bryan-minimal opened Nov 11, 2026Member·

  ·
  7

• fix(minimal): leave a linked worktree's .git file out of the upload, and say so

  #3287·bryan-minimal opened Nov 11, 2026Member·Queued
  20

• test(minimald): drive an opted-out request through the channel, and verify runs it

  review:approved
  #3286·bryan-minimal opened Nov 11, 2026Member·

  ·
  6

• fix(apparmor): install no profile where the parser has no abi/4.0

  #3285·bryan-minimal opened Nov 11, 2026Member·

  ·
  10

• fix(sandbox): name both layers when two ship a path with different contents

  #3272·bryan-minimal opened Nov 11, 2026Member·Queued
  14

• fix(mctx,minimald,sandbox): the in-box min task run uses one sandbox run path for every task, and

  #3271·minimal-foundry[bot] opened Nov 11, 2026Bot·

  ·
  1

  3

• fix: accept the loopback skip reason in the concurrent-boots proxy-port test

  agent:fixagent:resolve
  #3267·gominimal-aw-bot[bot] opened Nov 11, 2026Bot·

  ·
  1

• fix(otel): say why on a failed span's status, and what a materialize fetched

  #3265·bryan-minimal opened Nov 10, 2026Member·

  ·
  1

  3

• fix(net): name the box on every gate violation line; keep IPv6 out of a box's namespace

  review:approved
  #3263·bryan-minimal opened Nov 10, 2026Member·

  ·
  21

• fix(classifier): enable the memory controller on the slice at install

  #3262·bryan-minimal opened Nov 10, 2026Member·

  ·
  19

• docs(guide): rewrite getting started as a command-first quickstart

  #3259·norrietaylor opened Nov 10, 2026Member·

  ·
  3

• docs(reference): add a glossary of user-facing terms

  #3258·norrietaylor opened Nov 10, 2026Member·

  ·
  4

• feat(op,minimald,minvmd,minimal,common): run a box's package builds in build boxes

  #3256·norrietaylor opened Nov 10, 2026Member·

  ·
  2

  61

• fix: fix(mfile): do not warn a task's network table is unknown

  agent:fixagent:resolve
  #3252·gominimal-aw-bot[bot] opened Nov 10, 2026Bot·

  ·
  6

• fix: retry the cgroup2 cover over the fallback tmpfs

  agent:fixagent:resolve
  #3227·gominimal-aw-bot[bot] opened Nov 10, 2026Bot·

  ·
  2

• fix: retry the reclaim check when a parallel test takes the freed pin

  agent:fixagent:resolve
  #3222·gominimal-aw-bot[bot] opened Nov 10, 2026Bot·

  ·
  11