Huanqi Cao 8f2c7c5047 docs(sandbox): attribute the named-pipe default SD to the Win32-layer user-mode template ...

CreateNamedPipeW with NULL security attributes does not install a kernel
template: KernelBase builds the documented 5-ACE default SD in user mode
and passes it down; the kernel itself (a raw SD-null create) applies the
token default DACL. Correct the claim in both README sides and the
runner.spec pin comment, and link the MS template documentation.

2026-08-09 16:34:09 +08:00

..

acl.spec.ts

feat(sandbox): derive the windows-acl write SID per workspace, not per session

2026-08-09 10:44:35 +08:00

failure-paths.spec.ts

fix(sandbox): harden the per-session record and the ACL runner failure paths (review round v6)

2026-08-08 23:23:38 +08:00

grant-failure-paths.spec.ts

feat(sandbox): per-session windows-acl write grant with dual-mode restricting lists and a private temp subdirectory

2026-08-08 17:29:43 +08:00

grant.spec.ts

feat(sandbox): derive the windows-acl write SID per workspace, not per session

2026-08-09 10:44:35 +08:00

probe.spec.ts

feat(sandbox): derive the windows-acl write SID per workspace, not per session

2026-08-09 10:44:35 +08:00

provider-chain.spec.ts

fix(sandbox): harden the per-session record and the ACL runner failure paths (review round v6)

2026-08-08 23:23:38 +08:00

quote.spec.ts

fix(sandbox): address the ACL backend review findings — quoting, DACL merge+lock, failure paths

2026-08-08 14:32:01 +08:00

runner.spec.ts

docs(sandbox): attribute the named-pipe default SD to the Win32-layer user-mode template

2026-08-09 16:34:09 +08:00

workspace-sid.spec.ts

feat(sandbox): derive the windows-acl write SID per workspace, not per session

2026-08-09 10:44:35 +08:00