v0.1.0-rc17

Changelog

Features

• ad26de5: feat(brig): document and use stable exit codes (@pmoust)
• cf2c70e: feat(cli): print the execution envelope and add brig info (@pmoust)
• 4e31b2d: feat(envelope): report the isolation boundary of the sandbox (@pmoust)
• 4852e1d: feat(runtime): give a Linux sandbox a network of its own (@pmoust)
• b765d12: feat(telemetry): disclose telemetry and gate the boot on consent (@pmoust)
• a8d1c84: feat(telemetry): fix two disclosure claims and read enabled(setting) (@pmoust)
• e19d7c1: feat(verify): verify the digest that boots, not the tag (@pmoust)
• 7b2c0f3: feat(wrap): give a sandbox a network posture, and add an offline mode (@pmoust)
• bd9e76e: feat(wrap): refuse hvi on macOS below 15, and document what brig runs on (@pmoust)

Fixes

• 443f7e2: fix(brigd): arm the signal handler before binding the socket (@pmoust)
• fb8e86a: fix(brigd): make the session daemon safe to leave running (@pmoust)
• b64b8c9: fix(brigd): refuse a socket path the kernel cannot bind (@pmoust)
• 9851000: fix(cli): correct the envelope-skip comment and widen the leak scan (@pmoust)
• 10f52af: fix(cli): let env and ls answer with a broken or absent runtime (@pmoust)
• 754eff2: fix(cli): refuse a BRIG_NAME that drops the brig- prefix (@pmoust)
• 7acd90b: fix(cli): refuse unknown flags and stray arguments (@pmoust)
• 0f66df3: fix(cli): size the ls name column and list profile aliases (@pmoust)
• b50ace2: fix(creds): say which values BRIG_ENV_ARGV puts on the command line (@pmoust)
• f601d12: fix(git): refuse a hosts.yml that is not a regular file (@pmoust)
• 9b4501a: fix(profile): make the export-edit-run recipe work, and guard rm (@pmoust)
• d4f2bdd: fix(runtime): move the sandbox network off 10.87.0.0/24 (@pmoust)
• d3113c9: fix(runtime): tell a stopped sandbox from one that cannot be asked (@pmoust)
• df2303f: fix(script): boot the image check through brig, not the runtime (@pmoust)
• 114ce0b: fix(session): refuse a session-name collision, do not share (@pmoust)
• 504b805: fix(telemetry): gate consent on brig's stdin, not the guest pty (@pmoust)
• f5c901a: fix(verify): refuse an unrecognised BRIG_VERIFY, read BRIG_SKILLS strictly (@pmoust)
• da9bc3a: fix(verify): say whose policy checked the image, and stop advising the check off (@pmoust)
• e31a09a: fix(verify): verify the kernel a sandbox boots, not only its image (@pmoust)
• 9f45769: fix(wrap): echo the value set, trim it, and test the wiring (@pmoust)
• 3b48f49: fix(wrap): name the override when the registry cannot be reached (@pmoust)
• 70a5188: fix(wrap): open the workspace by descending where a guest can reach (@pmoust)
• 2b01aa9: fix(wrap): remember the workspace a sandbox was started with (@pmoust)
• 5e80e19: fix(wrap): require an explicit value for security switches (@pmoust)

Documentation

• 06cfd1e: docs(profiles): document size: on a tmpfs, and the unpublished flag (@ananos)
• a21111a: docs(security): add SECURITY.md and a private report channel (@pmoust)
• ae5303b: docs(security): capture the packets, and say what they show (@pmoust)
• 5f57557: docs(security): say per backend whether a sandbox can reach another (@pmoust)
• e96568e: docs(security): scope the no-host-read claim to credentials (@pmoust)
• f76b2ab: docs: add quickstart and troubleshooting pages (@pmoust)
• db72ad7: docs: describe the runtimes brig delegates to (@pmoust)
• 9ea8218: docs: quote the real image ref, claude-code-stock (@pmoust)
• 1d5918c: docs: scope the absolute safety claims in README and help (@pmoust)
• c639e8d: docs: scope the memory-only claim for ~/.claude (@pmoust)
• cdd605d: docs: write down what a guest image has to provide (@pmoust)
• e3e830e: docs: write down what brig will not do, and why (@pmoust)