D5: Add the combined real-Docker isolation gate - #50

Open

mchwang wants to merge 11 commits into

mainfrom

codex/agent-isolation-d5

Commits on Sep 25, 2026

D5: Add the combined real-Docker isolation gate

mchwang
and
claude
committed
36cb59d
Make scratch and hostile-repository probes fail closed

mchwang
and
claude
committed
a32e6a9
Require exact live vendor values and widen gate breach coverage

mchwang
and
claude
committed
9bd4939
Cover Codex scratch areas and read-only phases in the gate self-tests

mchwang
and
claude
committed
5504b32
Discard forbidden command output in probe denials

mchwang
and
claude
committed
49ef627
Refuse repository links that leave the checkout

mchwang
and
claude
committed
36ed738
Allow contained link cycles and resolve link targets explicitly

mchwang
and
claude
committed
f143be5
Prove each metadata-alias operation is detected on its own

mchwang
and
claude
committed
816628e

Commits on Sep 26, 2026

Refuse links in cloned Git metadata and bound the link scan per entry

mchwang
and
claude
committed
48347d6
Resolve repository links as the container kernel does

mchwang
and
claude
committed
894468d
Compare live vendor probe values without trimming

mchwang
and
claude
committed
dba3ecc