Skip to content

docs: sandbox-escape gate Entry 041 for v2.27.0 #816

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Masterplanner25 merged 1 commit into from
Oct 10, 2026
Merged

docs: sandbox-escape gate Entry 041 for v2.27.0 #816

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
27 changes: 26 additions & 1 deletion docs/runtime/SANDBOX_ESCAPE_AUDIT.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: "Sandbox Escape Audit Log"
api_version: "1.0"
last_verified: "2026-10-04"
last_verified: "2026-10-10"
schema_version: "2026-06-04"
status: current
owner: "platform-team"
Expand Down Expand Up @@ -1745,6 +1745,31 @@ inside it:**

---

## Entry 041 — 2026-10-10

**Trigger:** `v2.27.0` release tag (`sandbox-escape-linux.yml`, run `38025672648`).
**Commit:** `d5b1b46` (release PR #815's merge commit).
**Platform:** GitHub `ubuntu-latest`, native Linux containers backend.
**Image:** `python:3.11-alpine` (`SANDBOX_ESCAPE_IMAGE`), digest
`sha256:d9368b3a5ac59afea7b5d4f2e2aea0941dbf9fdee9c369c5bec00b98244bc929` — the **same** digest as
Entry 040; the upstream tag did not move between `v2.26.0` and `v2.27.0`.
**Summary:** 17 / 17 PASS — 0 FAIL — 0 SKIP (`17 passed, 4 warnings in 6.25s`)
**Artifact:** `linux-sandbox-escape-results` (`sandbox_escape_results.json`, run `38025672648`).

**Nothing inside the certified boundary moved.** `git diff v2.26.0..v2.27.0` over
`sandbox_runner.py`, `sandbox_certification.py`, `plugin_host.py` and `tests/sandbox/` is empty.

**Near the boundary, recorded so nobody reads it as inside:** the JWT library changed (#810, #814:
python-jose → `PyJWT[crypto]`; CVE-2026-85394) and `ecdsa` / `rsa` / `pyasn1` left the install. That
is the authentication path, not isolation; no sandbox control reads a token. FR-52 (#814) changed
when the plugin-load version check runs, not what loads.

**Schema:** no migration (Alembic `0020`, contract `2026-09-20`), so the `Upgrade Path Guard` passed
trivially and its negative control carried the meaning. Both were green on `d5b1b46` before the tag,
with Runtime CI, Boot Smoke (PostgreSQL) and the auth CVE audit. Publish: the `production`
environment gate was approved by the owner; PyPI's JSON API and simple index both reported `2.27.0`,
Boot Smoke on the published wheel passed on attempt 1, and the GitHub release is non-draft.

## Entry 040 — 2026-10-04

**Trigger:** `v2.26.0` release tag (`sandbox-escape-linux.yml`, run `37231274876`).
Expand Down
Loading