v0.1.0

Changelog

Features

• 2e75f3d feat: add backend runtime abstraction over the container CLI
• 4f085b3 feat: add persisted sandbox state store
• fa1647d feat: digest pinning, resource mapping, and per-sandbox driver config
• 0e5bf24 feat: hello driver serving the compute contract on a unix socket
• a9b3bba feat: provision sandbox VMs with seed dir, supervisor cache, boot shim
• 012ccdb feat: reconcile lifecycle against the runtime
• f290253 feat: run sandboxes as guest root with supervisor capability set
• 1d3db2c feat: vendor compute driver protos and generate Go stubs

Documentation

• 30fdc5a docs: complete contract recon and close gate 0
• 767166d docs: complete hardening milestone with soak results and full doc set
• c0560d0 docs: record M2 live acceptance and project status
• 16afadc docs: record gate 0 environment probes

Other

• a781cd8 chore: bootstrap repository with license, hooks, and editor config
• 076f32b ci: add lint, test matrix, cross-build, commit-audit, and vuln jobs
• e9c0c39 ci: add release pipeline for tagged versions

Unsigned binary: after download, run
xattr -d com.apple.quarantine openshell-driver-applecontainer.

Compatibility: OpenShell v0.0.96, apple/container 1.2.0, Apple silicon macOS 26.