Skip to content

Navigation Menu

Appearance settings

View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

Uh oh!

There was an error while loading. Please reload this page.

Gitlawb / zero Public

Notifications You must be signed in to change notification settings
Fork 181
Star 1.7k

Code
Issues 67
Pull requests 73
Discussions
Actions
Projects
Security and quality
Insights

Additional navigation options

Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights

feat(sandbox): Windows sandbox principals (foundation for #662, does not close it) - #808

#808

Open

Vasanthdev2004 wants to merge 104 commits into

mainGitlawb/zero:mainfrom

feat/windows-sandbox-identityGitlawb/zero:feat/windows-sandbox-identityCopy head branch name to clipboard

Conversation Commits104 (104)Checks Files changed

Open

feat(sandbox): Windows sandbox principals (foundation for #662, does not close it)#808
Vasanthdev2004 wants to merge 104 commits into
mainfrom
feat/windows-sandbox-identity

Commits

Commits on Sep 11, 2026

feat(sandbox): add Windows sandbox principals
Vasanthdev2004
committed
17aa51b
feat(sandbox): use a sandbox principal for Windows command execution
Vasanthdev2004
committed
ea7c04c
test(sandbox): name the per-shell env syntax in the provisioning skip
Vasanthdev2004
committed
8dbe818
test(sandbox): cover the logon-rights and token-minting half
Vasanthdev2004
committed
273bded
feat(sandbox): provision a sandbox principal during elevated setup
Vasanthdev2004
committed
645976d
fix(sandbox): keep the restricted token when the network is denied
Vasanthdev2004
committed
3e238cc
feat(sandbox): encrypt the stored principal password to the invoking user
Vasanthdev2004
committed
0b8fcf4
fix(sandbox): surface a squatted principal name instead of falling back
Vasanthdev2004
committed
949e104
fix(sandbox): reset the password when the account already exists
Vasanthdev2004
committed
07f6492
fix(sandbox): revoke logon rights before deleting a principal
Vasanthdev2004
committed
a527ffc
fix(sandbox): refuse a squatted account name and clean up partial provisioning
Vasanthdev2004
committed
17879dc
fix(sandbox): drop the stored secret whenever provisioning fails
Vasanthdev2004
committed
17d5674
test(sandbox): check the ACE type before decoding its trustee
Vasanthdev2004
committed
e8a0642
fix(sandbox): grant delete to the principal and keep rollback able to find it
Vasanthdev2004
committed
206046b
fix(sandbox): stop setup destroying a principal it did not create
Vasanthdev2004
committed
fd27716
fix(sandbox): keep an adopted principal's logon rights on rollback
Vasanthdev2004
committed
2175366
fix(sandbox): grant the principal the runtime tree commands write to
Vasanthdev2004
committed
f0bc1a3
fix(sandbox): refuse to adopt a principal in a privileged group
Vasanthdev2004
committed
73fc1c0
fix(sandbox): materialize .git/config as a file, not a directory

Vasanthdev2004
and
claude
committed
700e749
fix(sandbox): re-check principal privilege when minting a command token

Vasanthdev2004
and
claude
committed
6ff2601
fix(sandbox): revoke stale principal ACEs before re-applying the plan

Vasanthdev2004
and
claude
committed
8a84471
fix(sandbox): revoke ACEs on teardown and key setup off the resolved root

Vasanthdev2004
and
claude
committed
227f4ed
fix(sandbox): canonicalize the workspace root on both sides, not just setup

Vasanthdev2004
and
claude
committed
c6921d4
fix(sandbox): normalize the cache root too, not just the workspace root

Vasanthdev2004
and
claude
committed
0b5950e
fix(sandbox): resolve through path segments that do not exist yet

Vasanthdev2004
and
claude
committed
8d42270
test(sandbox): assert the ancestor walk, not the old all-or-nothing contract

Vasanthdev2004
and
claude
committed
6b54ac0
fix(sandbox): close the delete-through-parent, junction-ancestor and rollback gaps

Vasanthdev2004
and
claude
committed
7e996fa
fix(sandbox): stop teardown creating a directory while naming one

Vasanthdev2004
and
claude
committed
d685d83
fix(sandbox): surface a failed stale-secret cleanup after rotation
Vasanthdev2004
committed
7070993
fix(sandbox): reject reparse ancestors before creating an ACL target
Vasanthdev2004
committed
97c8c98
fix(sandbox): keep the principal inside the Windows write jail
Vasanthdev2004
committed
949ee3d
fix(sandbox): carry the principal opt-in through the setup protocol
Vasanthdev2004
committed
f18e645
fix(sandbox): revoke principal ACEs on roots that left the policy
Vasanthdev2004
committed
cae96b2
test(sandbox): compare ACL record paths the way the plans do
Vasanthdev2004
committed
7f45a7c
fix(sandbox): stop a principal replacing .git to shed its carveouts
Vasanthdev2004
committed
bcae716
feat(sandbox): handle-relative directory create and delete on Windows
Vasanthdev2004
committed
2d5e1f7
fix(sandbox): keep the git rename guard tests portable
Vasanthdev2004
committed
c2cf7b8
fix(sandbox): bind windows ACL materialization and rollback to handles
Vasanthdev2004
committed
011c4da
fix(sandbox): reject protected metadata names that escape the write root
Vasanthdev2004
committed
6a1b456
fix(sandbox): apply the .git rename guard on a workspace that had no .git
Vasanthdev2004
committed
d2968ae
fix(sandbox): stop granting a principal read at the volume root, and report failed ACE revocation
Vasanthdev2004
committed
c3d041b
docs(sandbox): attribute the Users-group premise the volume-root fix relies on
Vasanthdev2004
committed
b555357
fix(sandbox): name the root that blocks unelevated ACL setup
Vasanthdev2004
committed
a18523a
feat(sandbox): add `zero sandbox exec` to run one command through the sandbox
Vasanthdev2004
committed
2ca6ac6
fix(sandbox): fingerprint principal grants in the setup marker
Vasanthdev2004
committed
d43362a
fix(sandbox): report an inactive principal in doctor, and finish the comment upgrade
Vasanthdev2004
committed
f96b8b2
fix(sandbox): retire the principal on opt-out, and finish teardown past a foreign secret
Vasanthdev2004
committed
05d7c2f
fix(sandbox): serialize elevated setup with a per-workspace lock
Vasanthdev2004
committed
229a6ac
fix(sandbox): address jatmn's review on the principal backend and sandbox exec
Vasanthdev2004
committed
47f26f6
fix(sandbox): keep elevated Windows setup tied to the caller's identity
Vasanthdev2004
committed
d0a0506
fix(sandbox): fail opt-out only when the principal actually survived
Vasanthdev2004
committed
8dd74e2
fix(sandbox): refuse to adopt a ZeroSandboxUsers group Zero did not create
Vasanthdev2004
committed
9cb9139
fix(sandbox): stop the principal's own SID from defeating its write jail
Vasanthdev2004
committed
8c242fc
fix(sandbox): derive the fallback runtime root instead of minting one per process
Vasanthdev2004
committed
602b21f
chore: drop a stray probe artifact from the branch
Vasanthdev2004
committed
282a29f
fix(sandbox): cover both runtime roots in the setup contract
Vasanthdev2004
committed
9fa8624
test(sandbox): make the jail aliasing assertion able to fail
Vasanthdev2004
committed
03c7783
fix(sandbox): create the runtime roots setup grants
Vasanthdev2004
committed
6e342ce
fix(sandbox): say what changed when the setup marker is rejected
Vasanthdev2004
committed
bfa40a7
fix(sandbox): derive the runtime roots where TEMP is the operator's
Vasanthdev2004
committed
18ffd02
fix(sandbox): give the principal's read roots a restricting SID
Vasanthdev2004
committed
9800065
test(sandbox): fix the workspace-root literal in the setup-args tests
Vasanthdev2004
committed
55023a9
fix(sandbox): protect the gitdir pointer in a linked worktree
Vasanthdev2004
committed
b97e744
fix(sandbox): write the principal secret through one pinned handle
Vasanthdev2004
committed
b9ba54a
fix(sandbox): report the privileges a principal launch actually needs
Vasanthdev2004
committed
81c8326
fix(sandbox): stop the principal's environment naming the caller
Vasanthdev2004
committed
2a76544
fix(sandbox): drop the unfollowable sandbox override from ACL failures
Vasanthdev2004
committed
474f6e9
fix(sandbox): stop the redirect check resolving what it checks for
Vasanthdev2004
committed
129800b
test(sandbox): compare normalized paths, not the raw input
Vasanthdev2004
committed
d736aae
feat(sandbox): give each workspace an offline and an online principal (#812)
Vasanthdev2004
committed
272acb9
fix(sandbox): bind the ACL restore to the object it snapshotted
Vasanthdev2004
committed
fffc780
fix(sandbox): name the two role inventories, and fingerprint the whole plan
Vasanthdev2004
committed
3574f62
fix(sandbox): refuse to provision a principal this caller could never launch
Vasanthdev2004
committed
d6b4e73
test(sandbox): assert nothing was created, not that a count held still
Vasanthdev2004
committed
6f0d453
fix(sandbox): keep principal provisioning closed until a launch path exists
Vasanthdev2004
committed
cd78050
test(sandbox): keep the runtime-root candidates inside test-owned storage
Vasanthdev2004
committed
89b2e6d
test(sandbox): stop the launch preflight test asserting a machine's token
Vasanthdev2004
committed
c3e5e4b
fix(sandbox): root the fallback runtime tree beneath a validated private anchor
Vasanthdev2004
committed
8da16b4
fix(sandbox): resolve the temp dir physically before proving the fallback anchor
Vasanthdev2004
committed
834c184
fix(sandbox,cli): plan the grant and its guard together, and state the tier boundary
Vasanthdev2004
committed
faa07e3
fix(sandbox): validate runtime candidates before the elevated create, not after
Vasanthdev2004
committed
2925a67
fix(sandbox): check the runtime root still carries its grant, not just its pathname
Vasanthdev2004
committed
0904d88
fix(sandbox): recheck the runtime object on the unelevated tier too
Vasanthdev2004
committed
5a43074
fix(sandbox): make the capability git guard reach a workspace that gets git later
Vasanthdev2004
committed
bd7e98c
fix(sandbox): refuse a denyRead profile instead of ACLing the volume root
Vasanthdev2004
committed
4320d08
fix(sandbox): key the read-grant refusal on the grant, not on the volume root
Vasanthdev2004
committed
7920d3b
fix(sandbox): do not synthesize a .git inside an ancestor repository
Vasanthdev2004
committed
26958ac
fix(cli): keep a specified-empty sandbox environment from inheriting
Vasanthdev2004
committed
30d3c47
test(sandbox): stop probing for privilege by mutating System32
Vasanthdev2004
committed
a8b295d
fix(sandbox): keep a linked worktree's .git typed as a file through planning
Vasanthdev2004
committed
daf58c8
fix(sandbox): stop following sandbox-controlled runtime descendants
Vasanthdev2004
committed
69c68b1
test(sandbox): drive the runtime-tree descent through its entry point
Vasanthdev2004
committed
673b84d
fix(sandbox): restore a raced leaf whose parent this run created
Vasanthdev2004
committed
9608817
test(sandbox): reproduce the raced leaf at the instant it can actually happen
Vasanthdev2004
committed
4234357
fix(cli): terminate the sandboxed command when the wrapper is cancelled
Vasanthdev2004
committed
8099409
fix(sandbox): decide the runtime base on a canonical spelling
Vasanthdev2004
committed
a186eb4
fix(cli): give a cancelled sandboxed command a graceful phase
Vasanthdev2004
committed
c887961
fix(sandbox): stop git's global options hiding the subcommand
Vasanthdev2004
committed
95c8ac6
fix(sandbox): refuse git init in a workspace inside another repository
Vasanthdev2004
committed
d376b7f
test(cli): assert the shutdown status and that nothing outlives the run
Vasanthdev2004
committed
9abab73
fix(sandbox): build the elevated secret and runtime directories no-follow
Vasanthdev2004
committed
b12b2d7
fix(sandbox): keep the injectable lstat seam through the carveout specs
Vasanthdev2004
committed
a45d400
fix(sandbox): treat only a regular .git as the worktree pointer
Vasanthdev2004
committed
8b7ffa4
fix(sandbox): remove a failed secret through the handle that created it
Vasanthdev2004
committed
a2e9558

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.