feat(fleet): preserve Cloud sandbox identity across cutover - #1705

Merged

khaliqgant merged 50 commits into

mainfrom

agent37-stable-id-0908

Sep 10, 2026

Commits on Sep 9, 2026

fix(fleet): preserve Cloud sandbox identity across cutover
Proactive Runtime Bot
committed
eff5f79
fix(cloud): reject untrusted sandbox cleanup identity
Proactive Runtime Bot
committed
4256581
fix(fleet): preserve legacy sandbox naming compatibility
Proactive Runtime Bot
committed
0763beb
fix(cloud): verify stable sandbox node names
Proactive Runtime Bot
committed
0eb71ff
fix(pr-proof): retain Cloud failure diagnostics
Proactive Runtime Bot
committed
b09797c
chore: restore unreleased patch metadata
Proactive Runtime Bot
committed
c8afa97
chore: mark sandbox replay as minor
Proactive Runtime Bot
committed
cddb9d9
fix(pr-proof): bound multibyte diagnostics
Proactive Runtime Bot
committed
155af79
fix(cloud): retain replay identity after failed provisioning
Proactive Runtime Bot
committed
1b160f3
fix(pr-proof): sanitize Cloud status diagnostics
Proactive Runtime Bot
committed
814579a
fix(pr-proof): redact all Cloud diagnostics
Proactive Runtime Bot
committed
1925c1a
fix(pr-proof): hide malformed status payloads
Proactive Runtime Bot
committed
e22d2b3
fix(proof): retry malformed cloud status polls
Proactive Runtime Bot
committed
02155c4
fix(cloud): preserve legacy sandbox responses
Proactive Runtime Bot
committed
a787b1f
fix(pr-proof): redact credential prefixes safely
Proactive Runtime Bot
committed
17b075f
test: align Agent37 base proof with legacy response
Proactive Runtime Bot
committed
2dcc6cb
test: harden Agent37 proof diagnostics
Proactive Runtime Bot
committed
02c907b
fix: harden sandbox failure and proof redaction
Proactive Runtime Bot
committed
ee27443
fix: keep proof redaction linear
Proactive Runtime Bot
committed
462907f
fix: contain proof output transform failures
Proactive Runtime Bot
committed
56c5da5
fix: preserve transform failure rejection
Proactive Runtime Bot
committed
9942464
fix: kill descendants on final transform failure
Proactive Runtime Bot
committed
a5dca89
test: generate long proof credential in child
Proactive Runtime Bot
committed
7703e7f
fix: preserve unknown sandbox replay identity
Proactive Runtime Bot
committed
0bfc175
test: avoid dynamic code in redaction proof
Proactive Runtime Bot
committed
0a41237
fix: redact cross-stream credential fragments
Proactive Runtime Bot
committed
515d543
style: auto-format with Prettier

github-actions[bot]
authored and
Proactive Runtime Bot
committed
afadcf6
fix: mask cross-stream credential fragments atomically
Proactive Runtime Bot
committed
cf64da4
feat: route Agent37 sandboxes through isolated Relaycast
Proactive Runtime Bot
committed
f7163e7
style: auto-format with Prettier
github-actions[bot]
committed
cbe0ff6
ci: verify Agent37 routing after formatting
Proactive Runtime Bot
committed
86f7466
fix(ci): use resolvable Relaycast smoke origin
Proactive Runtime Bot
committed
97263a8
fix(security): enforce trusted fleet Relaycast routes
Proactive Runtime Bot
committed
f93f050
style: auto-format with Prettier

github-actions[bot]
authored and
Proactive Runtime Bot
committed
4563d75
test(relayflow): model isolated Relaycast target
Proactive Runtime Bot
committed
e80584e
fix(fleet): preserve replay and workspace identity
Proactive Runtime Bot
committed
794753d
test(smoke): bound startup within workspace lease
Proactive Runtime Bot
committed
9fdc4c6
fix: bind cloud sandbox routing safely
Proactive Runtime Bot
committed
2635252
fix: serialize project target persistence
Proactive Runtime Bot
committed
1e1a649
fix(relaycast): retry only precommit failures
Proactive Runtime Bot
committed
bfda6e6

Commits on Sep 10, 2026

fix: close relayflow transport and proof review gaps
Proactive Runtime Bot
committed
7bc5edf
fix: address final cutover review gaps
Proactive Runtime Bot
committed
5026e73
fix(cli): close Agent37 routing review gaps
Proactive Runtime Bot
committed
f419ec6
fix(cli): preserve isolated Agent37 routing
Proactive Runtime Bot
committed
f7067f3
fix(cli): pair persisted relaycast route credentials
Proactive Runtime Bot
committed
18efa8d
fix(ci): prove workspace deletion after ambiguous response
Proactive Runtime Bot
committed
dce672c
fix(ci): trust committed workspace deletion
Proactive Runtime Bot
committed
3a3b7c4
fix(ci): retry transient cleanup verification
Proactive Runtime Bot
committed
9c8d1f5
fix(broker): honor registration cooldown
Proactive Runtime Bot
committed
2f2701c
fix(ci): parse retry-after portably
Proactive Runtime Bot
committed
17875d5