WHC 8efd63bb31 Sandbox: seccomp user-notify fallback for Termux and kernels without Landlock ...

- Child installs a seccomp filter with a listener; a supervisor thread
  resolves the path of write-type syscalls (cwd, dirfd, .., symlinks,
  /proc/self, /dev/stdout, both ends of rename/link) and answers
  CONTINUE or EACCES; IPv4/IPv6 sockets are refused
- Probe order Landlock -> seccomp -> none, checked in a throwaway child;
  CST_SANDBOX=landlock|seccomp|off
- curl connect failures count as sandbox refusals
- test_sandbox runs the detected sandbox and forced seccomp, with escape,
  symlink, rename, link, chmod, stdout, ENOENT, background and network cases
- Docs: platform matrix, limits (not a security boundary, Yama and
  background jobs)

2026-10-06 00:25:24 +08:00

..

compat.md

Sandbox: seccomp user-notify fallback for Termux and kernels without Landlock

2026-10-06 00:25:24 +08:00

env_openai.md

Sandbox: seccomp user-notify fallback for Termux and kernels without Landlock

2026-10-06 00:25:24 +08:00

eval_tool_cst.md

Usability pass: tool registry, TUI polish, saved keys and settings

2026-10-05 01:47:01 +08:00

plugins.md

Extensions: skills, plugins, MCP, sub-agents; configurable keys

2026-10-05 14:55:31 +08:00

README-windows.md

Initial CST-Agent: portable Linux/Termux/Windows coding agent.

2026-09-07 22:42:32 +08:00

theory_tool_cst.md

Usability pass: tool registry, TUI polish, saved keys and settings

2026-10-05 01:47:01 +08:00

windows_selftest.md

Initial CST-Agent: portable Linux/Termux/Windows coding agent.

2026-09-07 22:42:32 +08:00