D2: Add pinned restricted agent containers - #40

Merged

mchwang merged 17 commits into

mainfrom

codex/agent-isolation-d2

Sep 25, 2026

Commits on Sep 25, 2026

Add D2 pinned restricted agent containers
mchwang
committed
4480791
Harden D2 container validation and Linux setup
mchwang
committed
3788d27
Close D2 profile and validation trust gaps
mchwang
committed
f869031
Require exact D2 capability and mount profiles
mchwang
committed
e854ec6
Trust D2 helper images and settle cleanup
mchwang
committed
25ffe54
Bind D2 resources to their owners
mchwang
committed
a229e8e
Close D2 namespace and cleanup gaps
mchwang
committed
abc9994
Allow clone ownership regression to settle
mchwang
committed
b701213
Pin the D2 Codex state path
mchwang
committed
cc60cb9
Seal D2 inputs and complete resource checks
mchwang
committed
f27ef2d
Fix D2 seeding, tmpfs rounding, and namespace defaults

mchwang
and
claude
committed
af3c893
Close D2 auth swap, unowned cleanup, and restart gaps

mchwang
and
claude
committed
65c32e3
Reconcile killed container creates before disposing credentials

mchwang
and
claude
committed
c61b3b5
Enforce builtin seccomp and pin clone directory identity

mchwang
and
claude
committed
fb6577c
Reconcile killed storage creates and honour the invocation deadline

mchwang
and
claude
committed
162554e
Authenticate captured invocations and cover CI test budgets

mchwang
and
claude
committed
72fb064
Pin the runc runtime and capture each attempt once

mchwang
and
claude
committed
b66f236