feat(isolation): add UID and GID isolation for evaluated agents - #87

Open

dmorosanu wants to merge 7 commits into

mainfrom

codex/uid-gid-agent-isolation

Commits on Aug 10, 2026

feat(isolation): isolate evaluated agents by UID and GID
dmorosanu
committed
7a2c59a

Commits on Aug 12, 2026

feat(isolation): make docker agent isolation best-effort, downgrading to normal mode when unsupported
dmorosanu
committed
3c14b24
fix(isolation): forward SKILLS_REPO_PATH, keep agent_judge privileged, harden downgrade and reap paths
dmorosanu
committed
6766792
fix(isolation): guard raw-path rewrite alias to absolute paths so a bare reference.file cannot corrupt mount_point
dmorosanu
committed
bcb6bb8
fix(isolation): resolve antigravity localharness via SDK and intercept via ANTIGRAVITY_HARNESS_PATH; forward CODEX_API_VERSION
dmorosanu
committed
22f2a3e
fix(isolation): give antigravity agent-owned save_dir and app_data_dir so the dropped harness child can write its state
dmorosanu
committed
d95451a

Commits on Aug 13, 2026

refactor(isolation): remove dead AGENT_USERNAME and collapse duplicated env-scrub, env-restore, home-override, and mount-skip logic
dmorosanu
committed
9ddb782