Skip to content

Navigation Menu

Appearance settings

View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

Uh oh!

There was an error while loading. Please reload this page.

Gitlawb / zero Public

Notifications You must be signed in to change notification settings
Fork 176
Star 1.7k

Code
Issues 55
Pull requests 66
Discussions
Actions
Projects
Security and quality
Insights

Additional navigation options

Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights

feat(sandbox): Windows sandbox principals (foundation for #662, does not close it) - #808

#808

Open

Vasanthdev2004 wants to merge 96 commits into

mainGitlawb/zero:mainfrom

feat/windows-sandbox-identityGitlawb/zero:feat/windows-sandbox-identityCopy head branch name to clipboard

Conversation Commits96 (96)Checks Files changed

Open

feat(sandbox): Windows sandbox principals (foundation for #662, does not close it)#808
Vasanthdev2004 wants to merge 96 commits into
mainfrom
feat/windows-sandbox-identity

Commits

Commits on Sep 4, 2026

feat(sandbox): add Windows sandbox principals
Vasanthdev2004
committed
6322126
feat(sandbox): use a sandbox principal for Windows command execution
Vasanthdev2004
committed
f3eeb0b
test(sandbox): name the per-shell env syntax in the provisioning skip
Vasanthdev2004
committed
41a1526
test(sandbox): cover the logon-rights and token-minting half
Vasanthdev2004
committed
34a6e21
feat(sandbox): provision a sandbox principal during elevated setup
Vasanthdev2004
committed
30944ff
fix(sandbox): keep the restricted token when the network is denied
Vasanthdev2004
committed
6053126
feat(sandbox): encrypt the stored principal password to the invoking user
Vasanthdev2004
committed
2ab568d
fix(sandbox): surface a squatted principal name instead of falling back
Vasanthdev2004
committed
521e9f5
fix(sandbox): reset the password when the account already exists
Vasanthdev2004
committed
5c624e0
fix(sandbox): revoke logon rights before deleting a principal
Vasanthdev2004
committed
c2ceb0d
fix(sandbox): refuse a squatted account name and clean up partial provisioning
Vasanthdev2004
committed
d40dce0
fix(sandbox): drop the stored secret whenever provisioning fails
Vasanthdev2004
committed
a54a001
test(sandbox): check the ACE type before decoding its trustee
Vasanthdev2004
committed
a5c2ab6
fix(sandbox): grant delete to the principal and keep rollback able to find it
Vasanthdev2004
committed
d5d2b09
fix(sandbox): stop setup destroying a principal it did not create
Vasanthdev2004
committed
60257df
fix(sandbox): keep an adopted principal's logon rights on rollback
Vasanthdev2004
committed
194e687
fix(sandbox): grant the principal the runtime tree commands write to
Vasanthdev2004
committed
7003367
fix(sandbox): refuse to adopt a principal in a privileged group
Vasanthdev2004
committed
1462592
fix(sandbox): materialize .git/config as a file, not a directory

Vasanthdev2004
and
claude
committed
aa1a187
fix(sandbox): re-check principal privilege when minting a command token

Vasanthdev2004
and
claude
committed
bdb5bc5
fix(sandbox): revoke stale principal ACEs before re-applying the plan

Vasanthdev2004
and
claude
committed
87180ab
fix(sandbox): revoke ACEs on teardown and key setup off the resolved root

Vasanthdev2004
and
claude
committed
c12738a
fix(sandbox): canonicalize the workspace root on both sides, not just setup

Vasanthdev2004
and
claude
committed
6d82e7a
fix(sandbox): normalize the cache root too, not just the workspace root

Vasanthdev2004
and
claude
committed
97ff106
fix(sandbox): resolve through path segments that do not exist yet

Vasanthdev2004
and
claude
committed
d44ac17
test(sandbox): assert the ancestor walk, not the old all-or-nothing contract

Vasanthdev2004
and
claude
committed
5a7f630
fix(sandbox): close the delete-through-parent, junction-ancestor and rollback gaps

Vasanthdev2004
and
claude
committed
dc8b7bb
fix(sandbox): stop teardown creating a directory while naming one

Vasanthdev2004
and
claude
committed
e42cace
fix(sandbox): surface a failed stale-secret cleanup after rotation
Vasanthdev2004
committed
27849df
fix(sandbox): reject reparse ancestors before creating an ACL target
Vasanthdev2004
committed
f2a8e71
fix(sandbox): keep the principal inside the Windows write jail
Vasanthdev2004
committed
374f28d
fix(sandbox): carry the principal opt-in through the setup protocol
Vasanthdev2004
committed
0aac1fa
fix(sandbox): revoke principal ACEs on roots that left the policy
Vasanthdev2004
committed
9dc1880
test(sandbox): compare ACL record paths the way the plans do
Vasanthdev2004
committed
f3e6bc0
fix(sandbox): stop a principal replacing .git to shed its carveouts
Vasanthdev2004
committed
62976aa
feat(sandbox): handle-relative directory create and delete on Windows
Vasanthdev2004
committed
7ea9405
fix(sandbox): keep the git rename guard tests portable
Vasanthdev2004
committed
fd6e1d8
fix(sandbox): bind windows ACL materialization and rollback to handles
Vasanthdev2004
committed
0ac2e72
fix(sandbox): reject protected metadata names that escape the write root
Vasanthdev2004
committed
f4fd1c9
fix(sandbox): apply the .git rename guard on a workspace that had no .git
Vasanthdev2004
committed
c834f88
fix(sandbox): stop granting a principal read at the volume root, and report failed ACE revocation
Vasanthdev2004
committed
9552175
docs(sandbox): attribute the Users-group premise the volume-root fix relies on
Vasanthdev2004
committed
60da04e
fix(sandbox): name the root that blocks unelevated ACL setup
Vasanthdev2004
committed
366b9c3
feat(sandbox): add `zero sandbox exec` to run one command through the sandbox
Vasanthdev2004
committed
9b3376d
fix(sandbox): fingerprint principal grants in the setup marker
Vasanthdev2004
committed
bbda356
fix(sandbox): report an inactive principal in doctor, and finish the comment upgrade
Vasanthdev2004
committed
e2b8b70
fix(sandbox): retire the principal on opt-out, and finish teardown past a foreign secret
Vasanthdev2004
committed
7b0ed7e
fix(sandbox): serialize elevated setup with a per-workspace lock
Vasanthdev2004
committed
54af05e
fix(sandbox): address jatmn's review on the principal backend and sandbox exec
Vasanthdev2004
committed
ad2d03b
fix(sandbox): keep elevated Windows setup tied to the caller's identity
Vasanthdev2004
committed
1ef6604
fix(sandbox): fail opt-out only when the principal actually survived
Vasanthdev2004
committed
63bda96
fix(sandbox): refuse to adopt a ZeroSandboxUsers group Zero did not create
Vasanthdev2004
committed
2170635
fix(sandbox): stop the principal's own SID from defeating its write jail
Vasanthdev2004
committed
97251dd
fix(sandbox): derive the fallback runtime root instead of minting one per process
Vasanthdev2004
committed
af97b88
chore: drop a stray probe artifact from the branch
Vasanthdev2004
committed
0496196
fix(sandbox): cover both runtime roots in the setup contract
Vasanthdev2004
committed
3a1d7ff
test(sandbox): make the jail aliasing assertion able to fail
Vasanthdev2004
committed
0f6469f
fix(sandbox): create the runtime roots setup grants
Vasanthdev2004
committed
207e218
fix(sandbox): say what changed when the setup marker is rejected
Vasanthdev2004
committed
bd64ab7
fix(sandbox): derive the runtime roots where TEMP is the operator's
Vasanthdev2004
committed
1ef250f
fix(sandbox): give the principal's read roots a restricting SID
Vasanthdev2004
committed
80ac2cd
test(sandbox): fix the workspace-root literal in the setup-args tests
Vasanthdev2004
committed
ed84ed3
fix(sandbox): protect the gitdir pointer in a linked worktree
Vasanthdev2004
committed
7a062a6
fix(sandbox): write the principal secret through one pinned handle
Vasanthdev2004
committed
99f340c
fix(sandbox): report the privileges a principal launch actually needs
Vasanthdev2004
committed
a70f36f
fix(sandbox): stop the principal's environment naming the caller
Vasanthdev2004
committed
ffe71ed
fix(sandbox): drop the unfollowable sandbox override from ACL failures
Vasanthdev2004
committed
83750ae
fix(sandbox): stop the redirect check resolving what it checks for
Vasanthdev2004
committed
ba5219c
test(sandbox): compare normalized paths, not the raw input
Vasanthdev2004
committed
3b34c83
feat(sandbox): give each workspace an offline and an online principal (#812)
Vasanthdev2004
committed
5ac436c
fix(sandbox): bind the ACL restore to the object it snapshotted
Vasanthdev2004
committed
79716d9
fix(sandbox): name the two role inventories, and fingerprint the whole plan
Vasanthdev2004
committed
909c741
fix(sandbox): refuse to provision a principal this caller could never launch
Vasanthdev2004
committed
ab3265c
test(sandbox): assert nothing was created, not that a count held still
Vasanthdev2004
committed
f369e33
fix(sandbox): keep principal provisioning closed until a launch path exists
Vasanthdev2004
committed
fe0c697
test(sandbox): keep the runtime-root candidates inside test-owned storage
Vasanthdev2004
committed
b40d72d
test(sandbox): stop the launch preflight test asserting a machine's token
Vasanthdev2004
committed
f882848
fix(sandbox): root the fallback runtime tree beneath a validated private anchor
Vasanthdev2004
committed
7f95315
fix(sandbox): resolve the temp dir physically before proving the fallback anchor
Vasanthdev2004
committed
41d2ab9
fix(sandbox,cli): plan the grant and its guard together, and state the tier boundary
Vasanthdev2004
committed
0d331a4
fix(sandbox): validate runtime candidates before the elevated create, not after
Vasanthdev2004
committed
0daeca9
fix(sandbox): check the runtime root still carries its grant, not just its pathname
Vasanthdev2004
committed
0585da8
fix(sandbox): recheck the runtime object on the unelevated tier too
Vasanthdev2004
committed
c934449
fix(sandbox): make the capability git guard reach a workspace that gets git later
Vasanthdev2004
committed
b958def
fix(sandbox): refuse a denyRead profile instead of ACLing the volume root
Vasanthdev2004
committed
e096206
fix(sandbox): key the read-grant refusal on the grant, not on the volume root
Vasanthdev2004
committed
654bf83
fix(sandbox): do not synthesize a .git inside an ancestor repository
Vasanthdev2004
committed
f8c752d
fix(cli): keep a specified-empty sandbox environment from inheriting
Vasanthdev2004
committed
4981ccf
test(sandbox): stop probing for privilege by mutating System32
Vasanthdev2004
committed
8f47de5
fix(sandbox): keep a linked worktree's .git typed as a file through planning
Vasanthdev2004
committed
0154b91
fix(sandbox): stop following sandbox-controlled runtime descendants
Vasanthdev2004
committed
214127b
test(sandbox): drive the runtime-tree descent through its entry point
Vasanthdev2004
committed
be9fcb4
fix(sandbox): restore a raced leaf whose parent this run created
Vasanthdev2004
committed
12d082e
test(sandbox): reproduce the raced leaf at the instant it can actually happen
Vasanthdev2004
committed
802f726
fix(cli): terminate the sandboxed command when the wrapper is cancelled
Vasanthdev2004
committed
659140f
fix(sandbox): decide the runtime base on a canonical spelling
Vasanthdev2004
committed
7e9a524

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.