feat(linux): add Landlock sandbox backend with macOS feature parity - #50

Open

Pierozi wants to merge 12 commits into

mainfrom

Commits on Aug 22, 2026

feat(linux): add Landlock sandbox backend with macOS feature parity

Pierozi
and
claude
committed
2f4c818
fix(profiles): allow reading git user config on both platforms

Pierozi
and
claude
committed
9a22807
docs(config): explain first-run prompt and shell tooling setup

Pierozi
and
claude
committed
821dbc5
fix(deps): update anyhow past RUSTSEC-2026-0190

Pierozi
and
claude
committed
e35223e
fix(linux): bind Landlock rules to resolved paths and keep deny globs closed

Pierozi
and
claude
committed
6ecf4cf
fix(sandbox): close two ways the launcher could be subverted

Pierozi
and
claude
committed
1a1a286
fix(linux): harden the network isolation fallbacks

Pierozi
and
claude
committed
cb5de4c
feat(cli): warn when the working directory overrides deny_read

Pierozi
and
claude
committed
65db8c2
chore(ci): lint test code as well

Pierozi
and
claude
committed
f2cd098
fix(linux): rehearse the network namespace before committing to it

Pierozi
and
claude
committed
7294098
fix(test): gate a Linux-only import in the backend tests

Pierozi
and
claude
committed
f50d586
chore(ci): report which sandbox mechanisms a security run exercised

Pierozi
and
claude
committed
eaa59ee