Flow D — Lambda MicroVM Agent Sandbox (separate df-run-lambda; MicroVM-native suspend/resume) - #41

Merged

elamaran11 merged 68 commits into

dark-factory-autonomous-agent-coding-patternfrom

flow-d-lambda-microvm-sandbox

Aug 4, 2026

Commits on Jul 29, 2026

docs(flow-d): add Lambda MicroVM substrate diagram doc
elamaran11
committed
c61d8a2
docs(flow-d): add Flow D section + TOC/flows-table entries to dark-factory README
elamaran11
committed
a7e4530
feat(flow-d): add self-managed ack-lambdamicrovms controller addon (disabled)
elamaran11
committed
46a16a7
feat(flow-d): add KRO MicrovmSandbox RGD tying all MicroVM primitives
elamaran11
committed
7ea85c4
feat(flow-d): add lambda-microvm SandboxTemplate + bridge (the RuntimeClass shim)
elamaran11
committed
7390cf6
feat(flow-d): add dormant microvm block to hub agent-sandbox overlay
elamaran11
committed
8f6a081

Commits on Jul 30, 2026

Commits on Jul 31, 2026

Commits on Aug 1, 2026

Merge commit '47b8908c91d87747c722d78d83782e216797000f' into flow-d-lambda-microvm-sandbox
Elamaran Shanmugam
committed
c3ac0c6
feat(flow-d): re-apply df-run orchestration onto reverted #32 (old/working structure)
Elamaran Shanmugam
committed
ba514ac

Commits on Aug 3, 2026

fix(flow-d): sync-wave the RGD before its MicrovmSandbox instance
Elamaran Shanmugam
committed
1e7227d
fix(agent-sandbox): allow coder DNS egress to public resolvers
Elamaran Shanmugam
committed
8b81ed1
fix(dark-factory): retain completed workflows 7d (was 1h)
Elamaran Shanmugam
committed
dfdca56
fix(flow-d): use kro.run apiGroup + grant KRO graph child RBAC
Elamaran Shanmugam
committed
aaaaff6
fix(flow-d): quote operands in microvm-suspend when-expression
Elamaran Shanmugam
committed
70c2fdc
fix(dark-factory): default microvmSuspend off (Flow D only)
Elamaran Shanmugam
committed
ee5d6ff
fix(flow-d): scope controller iam:PassRole by target ARN, drop service condition
Elamaran Shanmugam
committed
82daaa1
fix(flow-d): controller needs lambda:PassNetworkConnector for image build
Elamaran Shanmugam
committed
8c9a08d
fix(flow-d): point codeArtifactUri at the RGD-created bucket
Elamaran Shanmugam
committed
e32a08d
fix(flow-d): name the bridge container 'coder' for claim-injection parity
Elamaran Shanmugam
committed
556e7c7
fix(flow-d): allow bridge egress to the K8s API server
Elamaran Shanmugam
committed
6a97fed
fix(flow-d): bridge/lifecycle image needs aws-cli v2 (has lambda-microvms)
Elamaran Shanmugam
committed
df957cd
fix(flow-d): hub overlay bridgeImage → aws-cli v2 (was pinning alpine/k8s)
Elamaran Shanmugam
committed
8a16250
fix(flow-d): allow bridge egress to EKS Pod Identity endpoint
Elamaran Shanmugam
committed
2cebef5
fix(flow-d): bridge SANDBOX_NAME from downward API (was df-<issue> mismatch)
Elamaran Shanmugam
committed
2c7738d
fix(flow-d): re-enable microvmSuspend (hub runs both substrates)
Elamaran Shanmugam
committed
7911579
docs(flow-d): design for running the coder inside the MicroVM
Elamaran Shanmugam
committed
e56dd91
feat(flow-d): lambda-coder — Bedrock-direct + /run hook wrapper
Elamaran Shanmugam
committed
27ee2b5
feat(flow-d): bridge passes runHookPayload (issue ctx + gh token) to RunMicrovm
Elamaran Shanmugam
committed
7369d1b
fix(flow-d): build runHookPayload with python3, not node
Elamaran Shanmugam
committed
6e7070b
fix(flow-d): single-line python3 payload builder (YAML block-scalar fix)
Elamaran Shanmugam
committed
72d8501
docs(flow-d): record in-VM build attempt + confirmed /run-hook blocker
Elamaran Shanmugam
committed
cfcb258
feat(flow-d): bridge creates Microvm CR + payload Secret (fires /run)
Elamaran Shanmugam
committed
f0e12fd
docs(flow-d): Microvm CR path reconciles + VM runs, /run hook still silent
Elamaran Shanmugam
committed
00195a5
docs(flow-d): E2E run #106 report — chain works to /run, 2 gaps isolated
Elamaran Shanmugam
committed
d0bc733

Commits on Aug 4, 2026

feat(flow-d): bridge drives /run + runtime CloudWatch logs + ingress connector
Elamaran Shanmugam
committed
cc6d33c
fix(flow-d): grant lambda:CreateMicrovmAuthToken (bridge drives /run)
Elamaran Shanmugam
committed
601a0c3
feat(flow-d): observable coder — /status endpoint + bridge polls it
Elamaran Shanmugam
committed
9ff9018
chore(flow-d): bump codeArtifactUri to -r2 to force image rebuild
Elamaran Shanmugam
committed
426d069
fix(flow-d): minimal hook-server (drop /status) + artifact r3
Elamaran Shanmugam
committed
8e18fb4
feat(flow-d): /logs endpoint + capture coder output to file (observability)
Elamaran Shanmugam
committed
a84cb38
fix(flow-d): set WORKSPACE=/tmp/workspace (coder crashed EACCES on /workspace)
Elamaran Shanmugam
committed
d48d707
fix(flow-d): df-iterate routes fix round to originating substrate
Elamaran Shanmugam
committed
7c2f950
fix(flow-d): remove microvm-suspend from df-run DAG; bridge owns suspend
Elamaran Shanmugam
committed
63526e5
docs(flow-d): substrate benchmark + diagrams (Kata vs Lambda MicroVM)
Elamaran Shanmugam
committed
405f2a1
fix(flow-d): bump bridge memory 128Mi→1Gi (was OOMKilled mid fix-round)
Elamaran Shanmugam
committed
8089bc9
fix(flow-d): forward df-iterate note into the MicroVM coder
Elamaran Shanmugam
committed
3ec7fb3
fix(flow-d): fresh MicroVM per fix round (terminate stale suspended VM)
Elamaran Shanmugam
committed
4b088b8
fix(flow-d): real CRD-driven suspend/resume across the fix loop
Elamaran Shanmugam
committed
879347e
fix(flow-d): keep VM on suspend — annotation selector + Sandbox-existence teardown guard
Elamaran Shanmugam
committed
d9bed02
fix(flow-d): one Sandbox per VM — stable claim naming by issue-number
Elamaran Shanmugam
committed
8148300
refactor(flow-d): separate df-run-lambda; restore df-run to certified Kata
Elamaran Shanmugam
committed
b05e9ff
feat(flow-d): route darkfactory-lambda → df-run-lambda + workflow IAM/RBAC
Elamaran Shanmugam
committed
d73ef79
docs(flow-d): update benchmark + diagrams for separate df-run-lambda
Elamaran Shanmugam
committed
c69b3ac
fix(df-merge): only count agent findings on the CURRENT head sha
Elamaran Shanmugam
committed
809cbae
fix(df-merge): match inline findings by original_commit_id (exclude carried-forward)
Elamaran Shanmugam
committed
2457dfa