v0.2.6

Changelog

Fixes

• 6fd24f2 fix: install a default guest kernel in setup, stop the runtime for the updater (#31)

Other

• 1631da9 chore: prepare v0.2.6 release (#32)

Unsigned binary: after download, run
xattr -d com.apple.quarantine openshell-driver-applecontainer.

Compatibility: OpenShell v0.0.96, apple/container 1.2.0, Apple silicon macOS 26.

v0.2.5

Changelog

Fixes

• 0a44f65 fix: keep the replaced binary executable during update (#29)

Other

• 256e1bd chore: prepare v0.2.5 release (#30)

Unsigned binary: after download, run
xattr -d com.apple.quarantine openshell-driver-applecontainer.

Compatibility: OpenShell v0.0.96, apple/container 1.2.0, Apple silicon macOS 26.

v0.2.4

Changelog

Features

• 85c8af8 feat: add update and cleanup lifecycle subcommands (#27)

Fixes

• 10b4625 fix: don't abort install.sh when the OpenShell gateway health-check fails (#26)

Other

• 619e4ee chore: prepare v0.2.4 release (#28)
• c093ab0 ci(deps): bump the github-actions group with 8 updates (#24)
• 6d5c117 ci: allow Co-authored-by trailers in commit-audit (#25)

Unsigned binary: after download, run
xattr -d com.apple.quarantine openshell-driver-applecontainer.

Compatibility: OpenShell v0.0.96, apple/container 1.2.0, Apple silicon macOS 26.

v0.2.3

Changelog

Features

• bf7bce2 feat: add --network-policy-file operator override (#20)

Fixes

• e858622 fix: guard socket cleanup against a race with a newer instance (#22)

Documentation

• e334e10 docs: replace ASCII architecture diagrams with Mermaid (#19)

Other

• fb0fb1f chore: prepare v0.2.3 release (#22) (#23)

Unsigned binary: after download, run
xattr -d com.apple.quarantine openshell-driver-applecontainer.

Compatibility: OpenShell v0.0.96, apple/container 1.2.0, Apple silicon macOS 26.

v0.2.2

Changelog

Features

• 7dd30af feat: one-line curl|sh installer with prerequisite checks (#17)

Fixes

• 7d9923e fix: gate host mounts + network override, harden service restart (#16)

Other

• 6bcf0e8 chore(security): scanning, CI hardening, permission tightening (#15)
• 425e85c chore: prepare v0.2.2 release (#18)

Unsigned binary: after download, run
xattr -d com.apple.quarantine openshell-driver-applecontainer.

Compatibility: OpenShell v0.0.96, apple/container 1.2.0, Apple silicon macOS 26.

v0.2.1

Changelog

Fixes

• 25e9d9f fix: harden extraction, delete teardown, and setup inputs (#10)

Other

• ee7a532 chore: add open-source governance and DCO sign-off (#9)
• 2086b61 chore: prepare v0.2.1 release (#13)

Unsigned binary: after download, run
xattr -d com.apple.quarantine openshell-driver-applecontainer.

Compatibility: OpenShell v0.0.96, apple/container 1.2.0, Apple silicon macOS 26.

v0.2.0

Changelog

Features

• 39bb15f feat: add driver-level default kernel flag
• 6e57fd4 feat: one-command host setup with zero-config defaults

Fixes

• 6f51e14 fix: attach guest console tail to exited sandbox conditions
• 60991d5 fix: gate the exit warning event on the entry still being exited
• 0166e81 fix: name the kernel path in provisioning failures
• 96a41e4 fix: require a canonical http or https endpoint scheme in preflight
• e8c4817 fix: validate configuration at startup with a preflight

Documentation

• 0a8a9ea docs: mark v0.1.0 released in status

Other

• 162b92e chore: prepare v0.2.0 release

Unsigned binary: after download, run
xattr -d com.apple.quarantine openshell-driver-applecontainer.

Compatibility: OpenShell v0.0.96, apple/container 1.2.0, Apple silicon macOS 26.

v0.1.0

Changelog

Features

• 2e75f3d feat: add backend runtime abstraction over the container CLI
• 4f085b3 feat: add persisted sandbox state store
• fa1647d feat: digest pinning, resource mapping, and per-sandbox driver config
• 0e5bf24 feat: hello driver serving the compute contract on a unix socket
• a9b3bba feat: provision sandbox VMs with seed dir, supervisor cache, boot shim
• 012ccdb feat: reconcile lifecycle against the runtime
• f290253 feat: run sandboxes as guest root with supervisor capability set
• 1d3db2c feat: vendor compute driver protos and generate Go stubs

Documentation

• 30fdc5a docs: complete contract recon and close gate 0
• 767166d docs: complete hardening milestone with soak results and full doc set
• c0560d0 docs: record M2 live acceptance and project status
• 16afadc docs: record gate 0 environment probes

Other

• a781cd8 chore: bootstrap repository with license, hooks, and editor config
• 076f32b ci: add lint, test matrix, cross-build, commit-audit, and vuln jobs
• e9c0c39 ci: add release pipeline for tagged versions

Unsigned binary: after download, run
xattr -d com.apple.quarantine openshell-driver-applecontainer.

Compatibility: OpenShell v0.0.96, apple/container 1.2.0, Apple silicon macOS 26.