Repository navigation

feat(network): add opt-in sentinel isolation and strict policy profile - #837

Open

Baylem wants to merge 23 commits into

masterfrom

stack/pr-763

Open

feat(network): add opt-in sentinel isolation and strict policy profile#837
Baylem wants to merge 23 commits into
masterfrom
stack/pr-763

Commits on Oct 21, 2026
- feat(network): add template sentinel isolation and strict policy profile
  Baylem
  committed
  4ae4173
- merge: include shared web build prerequisite
  Baylem
  committed
  72c77db
- ci: require and report every audit E2E bucket
  Baylem
  committed
  c936277
Commits on Oct 22, 2026
- fix(e2e): distinguish policy verdicts from probe diagnostics
  Baylem
  committed
  7afeb80
Commits on Oct 23, 2026
- fix(ci): preserve audit coverage with upstream selection
  Baylem
  committed
  afa3b52
- test(ci): cover audit buckets in full selection fixtures
  Baylem
  committed
  45c448f
- test: synchronize closed RCON response fixtures
  Baylem
  committed
  240126f
Commits on Oct 25, 2026
- fix: preserve sentinel access through isolation opt-out
  Baylem
  committed
  2a00660
- chore: merge upstream namespace controls into isolation
  Baylem
  committed
  bbbd632
Commits on Oct 27, 2026
- test: distinguish wipe inventory from sentinel safety queries
  Baylem
  committed
  911020b
Commits on Oct 28, 2026
- chore: reconcile isolation CRDs with upstream Tailscale schemas
  Baylem
  committed
  f4c8223
Commits on Oct 31, 2026
- Merge upstream FRP dependency security fix
  Baylem
  committed
  89b3bff
Commits on Nov 4, 2026
- merge: synchronize network isolation with upstream master
  Baylem
  committed
  d17729d
Commits on Nov 5, 2026
- fix(ci): install pinned Trivy from GitHub releases
  Baylem
  committed
  f209797
- merge: share pinned Trivy installer with network isolation
  Baylem
  committed
  0190a11
Commits on Nov 6, 2026
- fix(deps): update compress for GO-2026-6865
  Baylem
  committed
  6045280
- Merge shared compress advisory fix into network isolation
  Baylem
  committed
  93293a3
- fix(deps): retain workspace graph checksum
  Baylem
  committed
  9391601
- Merge shared workspace checksum into network isolation
  Baylem
  committed
  1bfcce0
- fix(deps): update x/net in shipped Go binaries
  Baylem
  committed
  569325c
- fix(operator): revoke stale isolation exposure and bound cleanup reads
  Baylem
  committed
  d0642a1
- fix(deps): normalize source module checksums after x/net update
  Baylem
  committed
  77c8b51
- fix(deps): retain workspace graph metadata after x/net update
  Baylem
  committed
  afcd98e

Commits

Commits on Oct 21, 2026

Commits on Oct 22, 2026

Commits on Oct 23, 2026

Commits on Oct 25, 2026

Commits on Oct 27, 2026

Commits on Oct 28, 2026

Commits on Oct 31, 2026

Commits on Nov 4, 2026

Commits on Nov 5, 2026

Commits on Nov 6, 2026