refactor(openshell-sandbox): Split `sandbox` into `process` and `network` subcrates.#1650

Merged

derekwaynecarr merged 67 commits into

NVIDIA:mainfrom

rrhubenov:refactor/split-sandbox

Jun 15, 2026

Commits on Jun 1, 2026

Commits on Jun 2, 2026

Commits on Jun 5, 2026

refactor(sandbox): move denial aggregator to orchestrator
rrhubenov
committed
refactor(supervisor-process): pull bypass monitor down from network
rrhubenov
committed
refactor(supervisor-process): derive ssh netns fd inside run_process
rrhubenov
committed
refactor(supervisor-process): derive ssh proxy url inside run_process
rrhubenov
committed
refactor(supervisor-network): take proxy bind ip directly instead of netns
rrhubenov
committed
refactor(supervisor-process): move netns ownership out of core
rrhubenov
committed
chore(sandbox): prune leaf-only deps from orchestrator manifest
rrhubenov
committed
chore(deps): prune unused deps from supervisor crates
rrhubenov
committed
fix(supervisor-network): wait for entrypoint PID before symlink probe
rrhubenov
committed
Merge remote-tracking branch 'upstream/main' into refactor/split-sandbox
rrhubenov
committed

Commits on Jun 8, 2026

Merge remote-tracking branch 'upstream/main' into refactor/split-sandbox
rrhubenov
committed

Commits on Jun 10, 2026