Skip to content

v0.1.3

Choose a tag to compare

View all tags
@Prof-bilal Prof-bilal released this 06 Sep 09:28
· 30 commits to main since this release
v0.1.3
40c6f23

warden-sandbox-cli v0.1.3

Highlights

  • Windows: real ETW auditing, fail-closed. Each run starts a real-time Kernel-File/Kernel-Network ETW trace session scoped to the sandboxed process tree and maps Kernel-File events into the JSONL audit log. If the audit session cannot start, warden run refuses to run (the security gate).
  • Windows CI. A windows-latest job runs the AppContainer/WFP/ETW escape and lifecycle tests elevated, instead of skipping them.
  • Audit escape test. Asserts a blocked network request lands in the audit log as an allowed=false event.
  • Docs truth-sync. Windows backends documented as Ready with elevation (WFP/ETW require admin) and audit-visibility caveats.
  • npm wrapper fix. bin/warden had the wrong file mode, so npm dropped the warden command on 0.1.0–0.1.2 installs. Fixed here — 0.1.3 ships a working warden bin.

Binaries

The warden-sandbox-cli npm package downloads the matching binary below on first run. Verify checksums against SHA256SUMS.

Install

npm install -g warden-sandbox-cli
Assets 8
Loading