docs(native): host-provisioning contract + provisioning script#94

Closed

ephpm-claude[bot] wants to merge 10 commits into

mainfrom

docs-native-host-provisioning

Commits on Jun 1, 2026

docs(arch): native macOS runner design

Luther Monson
authored and
Luther Monson
committed
docs(arch): resolve open questions — Homebrew overlay, per-job keychain, static concurrency

Luther Monson
authored and
Luther Monson
committed
docs(arch): add sandbox-exec profile — network deny, port bind deny, filesystem write isolation

Luther Monson
authored and
Luther Monson
committed
docs(arch): propose 'ephemerd upgrade' in-place binary update (#86)

luthermonson
authored and
Luther Monson
committed

Commits on Jun 11, 2026

feat(native): native macOS runner mode for trusted repos

authored and
Luther Monson
committed
fix(native): harden macOS sandbox isolation and use a dedicated group
luthermonson
committed

Commits on Jun 14, 2026

fix(native): correct sandbox filesystem rules so the runner can start

authored and
Luther Monson
committed

Commits on Jun 29, 2026

fix(runner): bump embedded GHA runner 2.333.1 -> 2.335.1

authored and
Luther Monson
committed

Commits on Jun 30, 2026

fix(native): allow loopback socket bind in macOS sandbox

authored and
Luther Monson
committed

Commits on Jul 1, 2026

docs(native): document host-provisioning contract + add provisioning script

authored and
Luther Monson
committed