Issues

• Run command policy: allow an exact argv (literal elements, no glob) for a one-off approved command

  enhancement
  FootprintAI/Containarium#3708 · Filter by author hsinatfootprintai opened on Nov 13, 2026

• Run permission hook: exempt a caller's pinned, hash-matched script from Decide in command-mode runs

  enhancement
  FootprintAI/Containarium#3707 · Filter by author hsinatfootprintai opened on Nov 13, 2026

• Accept a deployer-supplied extra toolchain lock at build time

  FootprintAI/Containarium#3692 · Filter by author hsinatfootprintai opened on Nov 12, 2026

• Verify then fix: guest-reported IPs and tenant labels reach tenant attribution (#3339)

  model:sonnetneeds-decisionruntime:claudesecuritysize:M
  FootprintAI/Containarium#3690 · Filter by author hsinatfootprintai opened on Nov 12, 2026
  3

• Cluster identity is keyed by owner/name, not an immutable id (#3339): decide the migration

  model:sonnetneeds-decisionruntime:claudesecuritysize:L
  FootprintAI/Containarium#3689 · Filter by author hsinatfootprintai opened on Nov 12, 2026
  11

• Incus operation waits have no deadline: decide the wait timeout (#3341)

  model:sonnetneeds-decisionruntime:claudesecuritysize:M
  FootprintAI/Containarium#3685 · Filter by author hsinatfootprintai opened on Nov 12, 2026
  2

• Tenant-controlled reads: decide the byte cap for the shared capped reader (#3341)

  model:sonnetneeds-decisionruntime:claudesecuritysize:M
  FootprintAI/Containarium#3684 · Filter by author hsinatfootprintai opened on Nov 12, 2026
  2

• Agent-box log directory is a shared /tmp path: decide the per-user layout

  model:sonnetneeds-decisionruntime:claudesecuritysize:S
  FootprintAI/Containarium#3682 · Filter by author hsinatfootprintai opened on Nov 12, 2026

• Installer takes the tunnel binary from /tmp/containariumd: decide the source policy

  model:sonnetneeds-decisionruntime:claudesecuritysize:S
  FootprintAI/Containarium#3681 · Filter by author hsinatfootprintai opened on Nov 12, 2026

• Slides recipe workspace should be owned by the configured run user

  enhancement
  FootprintAI/Containarium#3679 · Filter by author hsinatfootprintai opened on Nov 12, 2026

• StartBoxRun: optional caller-chosen run token, returned on the run record, so a caller can identify its own run

  FootprintAI/Containarium#3668 · Filter by author hsinatfootprintai opened on Nov 12, 2026
  1

• authorized_keys replace: helper and MkdirAll follow user-owned paths

  model:sonnetruntime:claudesecuritysize:S
  FootprintAI/Containarium#3652 · Filter by author hsinatfootprintai opened on Nov 11, 2026
  3

• logs: read a box's journal and container logs in one merged stream (TailBoxLogs RPC, containarium logs)

  enhancementfeature requestsmodel:opusneeds-verificationruntime:claudesize:L
  FootprintAI/Containarium#3643 · Filter by author hsinatfootprintai opened on Nov 11, 2026
  4

• Sprint 2026-W46 (security phase-2 track): ready split items from the #3339/#3342/#3346 re-verification

  epicsecuritysprint
  FootprintAI/Containarium#3634 · Filter by author hsinatfootprintai opened on Nov 11, 2026

• security: bump Go toolchain to 1.26.11 for GO-2026-6859 (govulncheck fails)

  model:sonnetruntime:claudesecuritysize:S
  FootprintAI/Containarium#3624 · Filter by author hsinatfootprintai opened on Nov 11, 2026
  1

• deploy: commit a dev override for the dev-only daemon settings

  choresize:S
  FootprintAI/Containarium#3623 · Filter by author hsinatfootprintai opened on Nov 10, 2026
  1

• code run: opt-in daemon-API path with --run-token-file, MCP wraps it (#3581 link 2)

  enhancementmodel:fablephase-1-flowruntime:claudesize:M
  FootprintAI/Containarium#3610 · Filter by author hsinatfootprintai opened on Nov 10, 2026
  3

• box runs: typed-client StartBoxRun that carries run_token, gated on the box_run_token capability (#3581 link 1)

  enhancementmodel:fablephase-1-flowruntime:claudesize:M
  FootprintAI/Containarium#3609 · Filter by author hsinatfootprintai opened on Nov 10, 2026
  3

• Sprint 2026-W51 (run-surface completeness track): a run starts in the project directory, recipe boxes are reachable, and runs carry their own credential

  epicsize:Msprint
  FootprintAI/Containarium#3603 · Filter by author hsinatfootprintai opened on Nov 10, 2026
  9

• sentinel auto-update cannot write its download under the generated unit (ProtectSystem=strict, binary dir not in ReadWritePaths)

  bug
  FootprintAI/Containarium#3596 · Filter by author hsinatfootprintai opened on Nov 9, 2026
  1

• zfs-backup (setup-gpu-host.sh): replication can wedge permanently when a child dataset is missing on the backup pool, and the failure is silent (exit 0)

  bug
  FootprintAI/Containarium#3595 · Filter by author hsinatfootprintai opened on Nov 9, 2026

• permission hook: enforce an org-supplied command allowlist, hard denies, and start/end audit events for agent runs

  FootprintAI/Containarium#3582 · Filter by author hsinatfootprintai opened on Nov 9, 2026
  1

• box runs: re-land the per-run token file (#3574) together with its senders and readers

  choremodel:fableneeds-verificationphase-1-flowruntime:claudesize:L
  FootprintAI/Containarium#3581 · Filter by author hsinatfootprintai opened on Nov 9, 2026
  9

• toolchains: remove the CVE-2026-78661 exception for buf when upstream ships a fix (expires 2026-12-09)

  chore
  FootprintAI/Containarium#3580 · Filter by author hsinatfootprintai opened on Nov 9, 2026

• make build-caddy: pin golang.org/x/net and scan the Caddy release asset

  security
  FootprintAI/Containarium#3579 · Filter by author hsinatfootprintai opened on Nov 9, 2026