Commits

Commits on Sep 29, 2026

Name the source of the existing limit in the max_pod_ops conflict error (#238)

authored
2adb16c

Commits on Sep 21, 2026

Stop pods piling up when a sample's sandbox fails to start (#250)

rasmusfaber
and
claude
authored
da48bb5
Add INSPECT_POD_RESTART_CHECK to skip the pre-op pod read in file operations (#241)

authored
db9fcbb
fix(helm): make network isolation subtractive so layered policies are not shadowed (#245)

rasmusfaber
and
dpolatajko-aisi
authored
365955b
Stop sandboxes from seeing their own Kubernetes namespace (#253)

authored
c93d85c
fix(ci): install gVisor binaries from a pinned release (#263)

dpolatajko-aisi
and
claude
authored
897df2d
Start sandboxes as soon as the cluster can schedule them (#249)

authored
3a3e005

Commits on Sep 12, 2026

fix: honour compose `command:` on the default service (#254)

apurv-1
and
dpolatajko-aisi
authored
a762e31

Commits on Sep 7, 2026

fix: skip runuser when the container is already the requested user (#242)

revmischa
and
claude
authored
7dd2c6b

Commits on Aug 27, 2026

Tests: consume inspect's portable self_check pytest suite (#205)

authored
4477e6c

Commits on Aug 20, 2026

perf: skip log formatting when the destination log level is disabled (#232)
sjawhar
authored
5fc4e04

Commits on Aug 19, 2026

fix: render service `args` with toYaml so compose `command:` survives (#236)

authored
8ffa86e

Commits on Aug 13, 2026

changelog: move post-0.13.0 entries back under Unreleased (#240)

art-dsit
and
claude
authored
1dc1579
fix: reject conflicting pod operation limits (#231)
sjawhar
authored
b776b20

Commits on Aug 12, 2026

Harden the CoreDNS sandbox sidecar (#233)

oliver-aisi
and
claude
authored
8a98e9f
chore: prepare for release (v0.13.0) (#235)
dpolatajko-aisi
authored
1225586

Commits on Aug 11, 2026

fix: verify `write_file` byte count to avoid silent truncation (#226)

samorojy
and
dpolatajko-aisi
authored
f9e46ac

Commits on Jul 28, 2026

fix: report all Helm cleanup failures (#229)

dpolatajko-aisi
and
sjawhar
authored
c5cc805
Disable sandbox service account token automount by default (#214)

ericwinsor-aisi
and
dpolatajko-aisi
authored
245d7a6

Commits on Jul 16, 2026

docs: changelog entry for pod diagnostics (#221)
RoshDSIT
authored
49561eb

Commits on Jul 15, 2026

feat: surface container crash diagnostics on Helm install failure (#202)

authored
698cac1

Commits on Jul 7, 2026

compose converter: support security_opt (seccomp) and ignore memswap_limit (#216)

authored
2b33ffc

Commits on Jul 6, 2026

Bump inspect-ai floor to >=0.3.236 (#217)

art-dsit
and
claude
authored
3150b2a
Lock agent-env chart version to the package version (#215)

art-dsit
and
claude
authored
7d2555f

Commits on Jun 25, 2026

bump version for new release (#213)
art-dsit
authored
8a5fa26
Release 0.6.0 (#212)

art-dsit
and
claude
authored
a703c2d

Commits on Jun 24, 2026

Fix/210 bypass pod deserialization (#211)

authored
a9fdaf0
fix: replace non-utf-8 outputs in exec (#209)

dpolatajko-aisi
and
art-dsit
authored
1fc831b

Commits on Jun 23, 2026

Harden allowDomains to block domain fronting (#208)
seddy-aisi
authored
96d8449
fix: recheck for container restart after failed exec (#204)

RoshDSIT
and
claude
authored
a1f38c8
Add per-service `x-inspect_k8s_sandbox.resources` extension to the compose converter (#207)

jjallaire
and
claude
authored
efbcb84

Commits on Jun 10, 2026

Propagate caller context into pod-op worker thread (fixes #200, subsumes #196 transcript fix) (#201)

authored
66a5285

Commits on Jun 3, 2026

Commits on May 28, 2026

Recover from pod replacement instead of looping on stale UID (#193)

rasmusfaber
and
art-dsit
authored
cd5162a