feat(sandbox): give each workspace an offline and an online principal - #812

Merged

kevincodex1 merged 19 commits into

feat/windows-sandbox-identityfrom

feat/windows-sandbox-offline-online

Aug 21, 2026

Commits on Aug 12, 2026

feat(sandbox): give each workspace an offline and an online principal
Vasanthdev2004
committed
b9f739f
fix(sandbox): prove ownership before deleting a sandbox account
Vasanthdev2004
committed
ae0cd18
fix(sandbox): assert the filters cover principals, and report a retained account
Vasanthdev2004
committed
ed5b285
fix(sandbox): spare adopted principals when dual-role setup rolls back
Vasanthdev2004
committed
78f2edc
test(sandbox): stub the password reset and pin the resolved group SIDs
Vasanthdev2004
committed
73feb5c
fix(sandbox): refuse an offline group zero does not own
Vasanthdev2004
committed
188f9ae
fix(sandbox): recheck offline group membership before minting a token
Vasanthdev2004
committed
aa66283
fix(sandbox): derive setup's runtime root deterministically or not at all
Vasanthdev2004
committed
95ac796
style(sandbox): separate the two doc paragraphs the rebase ran together
Vasanthdev2004
committed
3d0a6f5
fix(sandbox): fail closed when offline-group coverage cannot be verified
Vasanthdev2004
committed
9d52a88
fix(sandbox): scope the offline-group assert to provisioned runs
Vasanthdev2004
committed
b195564
fix(sandbox): keep opted-out setup markers valid, and refuse a foreign offline group
Vasanthdev2004
committed
304a3e3
fix(doctor): report the principal that dual-role setup actually uses
Vasanthdev2004
committed
ae4eab8
fix(sandbox): converge the dual-role branch with the rebased identity work
Vasanthdev2004
committed
69909ac
fix(sandbox): keep offline coverage and grant the fallback runtime root
Vasanthdev2004
committed
15a2d86

Commits on Aug 18, 2026

chore: merge main for the Go 1.26.6 and x/image vulnerability fixes
Vasanthdev2004
committed
8550943

Commits on Aug 19, 2026

chore: merge main
Vasanthdev2004
committed
4ac596c
chore: merge the stacked base (#808)
Vasanthdev2004
committed
50d4af8

Commits on Aug 20, 2026

fix(sandbox): treat an unreadable offline group as a failure, and retire the pre-split principal
Vasanthdev2004
committed
6ec89b4