Abdessamad Derraz 95ca227bce refactor: run cores and builds in a sandbox ...

core_probe starts its worker with only the --env values, the worker clears its own environment before loading the core, and a working bubblewrap runs it with a read-only tree, no network and the user's credentials masked. The record names the isolation used. A timeout kills the whole process group. campaign.py starts core_probe, git, make and romfetch with the allowlist, make inside the same sandbox. --record refuses a folder that is not a checkout root.

2026-10-27 11:48:22 +01:00

..

campaign-finding.schema.json

feat: add the real-condition campaign runner

2026-10-27 11:38:01 +01:00

campaign-run.schema.json

feat: add the real-condition campaign runner

2026-10-27 11:38:01 +01:00

core-probe-record.schema.json

refactor: run cores and builds in a sandbox

2026-10-27 11:48:22 +01:00

database.schema.json

feat: serve each schema at its own $id

2026-10-23 10:46:05 +02:00

emulator.schema.json

feat: add the real-condition campaign runner

2026-10-27 11:38:01 +01:00

install-events.schema.json

fix: card setups, pager lines, devices, data size

2026-10-26 22:01:02 +01:00

install-manifest.schema.json

docs: describe every install manifest field

2026-10-24 00:51:13 +02:00

pack-manifest.schema.json

feat: serve each schema at its own $id

2026-10-23 10:46:05 +02:00

platform.schema.json

feat: serve each schema at its own $id

2026-10-23 10:46:05 +02:00

registry.schema.json

feat: release packs for marked platforms only

2026-10-23 17:06:46 +02:00

release.schema.json

feat: add schema_version to release.json

2026-10-23 18:52:04 +02:00

site-api-envelope.schema.json

fix: one pack answer and fuller reference data

2026-10-24 00:51:13 +02:00

stats.schema.json

feat: serve each schema at its own $id

2026-10-23 10:46:05 +02:00

target-manifest.schema.json

feat: serve each schema at its own $id

2026-10-23 10:46:05 +02:00