feat(sandbox): Enforce network_mode allowlist on docker#785

Open

Yiminnn wants to merge 29 commits into

mainfrom

feat/network-mode-enforcement

Commits on Jun 15, 2026

feat(sandbox): enforce network_mode allowlist on docker (ENG-219)
Yiminnn
committed
feat: wildcard allowed_hosts + model lane for restrictive docker egress
Yiminnn
committed
docs: add network-access prior-art/credits page + cross-links
Yiminnn
committed

Commits on Jun 16, 2026

fix(daytona): fail closed when block-all egress leaks (ENG-263)
Yiminnn
committed
fix(litellm): fail closed when usage proxy unavailable under a restrictive policy (ENG-263)
Yiminnn
committed
fix(docker): install-before-lockdown via non-destructive relock (ENG-263)
Yiminnn
committed
fix(daytona): actually enforce no-network (gate lift + reliable egress probe) (ENG-263)
Yiminnn
committed
Merge origin/main into feat/network-mode-enforcement
Bingran You
committed
Merge remote-tracking branch 'pub/feat/network-mode-enforcement' into feat/network-mode-enforcement
Yiminnn
committed
fix: sort imports in test_network_runtime (ruff I001, ENG-263)
Yiminnn
committed
style: ruff format test_network_runtime (ENG-263)
Yiminnn
committed
fix: _lock_down_network tolerates mock/non-async sandboxes (ENG-263)
Yiminnn
committed
fix(docker): fail closed if relock_network lockdown didn't take effect (greptile P1)
Yiminnn
committed
fix(egress): rewrite plain-HTTP requests to origin-form (greptile P2 #1)
Yiminnn
committed
style: ruff format after origin-form rewrite (ENG-263)
Yiminnn
committed
fix(network): make restrictive-docker allowlist reach the provider over HTTPS
Yiminnn
committed

Commits on Jun 17, 2026

Commits on Jul 6, 2026

Merge main and harden network-mode enforcement
bingran-you
committed

Commits on Jul 10, 2026

Commits on Jul 11, 2026

Merge main into network-mode enforcement
bingran-you
committed

Commits on Jul 13, 2026