Issues

• Host callback channel for programmatic tool calling (PTC) in contained code

  Issue-FeatureNeeds-Triage
  microsoft/mxc#1447 · Filter by author kenchris opened on Oct 7, 2026

• Bubblewrap backend: defence-in-depth hardening (tracking)

  Issue-FeatureNeeds-Triage
  microsoft/mxc#1446 · Filter by author kenchris opened on Oct 7, 2026

• Bubblewrap: protect files that run later inside writable grants

  Issue-FeatureNeeds-Triage
  microsoft/mxc#1445 · Filter by author kenchris opened on Oct 7, 2026
  1

• Bubblewrap: use --new-session when stdio is not a PTY

  Issue-FeatureNeeds-Triage
  microsoft/mxc#1444 · Filter by author kenchris opened on Oct 7, 2026

• Bubblewrap: add a seccomp default-deny profile

  Issue-FeatureNeeds-Triage
  microsoft/mxc#1443 · Filter by author kenchris opened on Oct 7, 2026

• IsolationSession: a second deprovision reports success instead of stale_id

  Backend-IsolationSessionIssue-BugOS-WindowsPriority2
  Bug

  microsoft/mxc#1429 · Filter by author theelliotm opened on Oct 6, 2026
  

• Align and reorganize current MXC container policy documentation

  Issue-DocsRelease v1.0
  Task

  microsoft/mxc#1389 · Filter by author bbonaby opened on Oct 5, 2026
  

• Bubblewrap  FirewallEnforced / ProxyOnly  network setup races with short-lived sandboxed processes —  slirp4netns / nsenter  fail with  /proc/<pid>/ns/net: No such file or directory

  Backend-BubblewrapIssue-BugOS-LinuxPriority2
  Bug

  microsoft/mxc#1378 · Filter by author franckspike opened on Oct 2, 2026
  

• Hyperlight: opt-in persistent sessions with checkpoint export and restore

  Backend-VMIssue-Feature
  Feature

  microsoft/mxc#1374 · Filter by author antsok opened on Oct 2, 2026

• Allow mapping a host file source to a different destination path in the sandbox

  Backend-IsolationSessionBackend-MicroVMBackend-ProcessContainerBackend-SeatbeltBackend-WSLCIssue-Feature
  Feature

  microsoft/mxc#1366 · Filter by author caarlos0 opened on Oct 1, 2026
  1

• concurrent_grant_revoke_never_corrupts_the_store is flaky

  Backend-ProcessContainerIssue-BugOS-LinuxOS-WindowsPriority2
  Bug

  microsoft/mxc#1365 · Filter by author RamonArjona4 opened on Oct 1, 2026
  

• [LXC] Halve the launch time of networked containers with optional removal of a duplicate ARP check

  Backend-BubblewrapBackend-LXCIssue-FeatureOS-Linux
  Feature

  microsoft/mxc#1357 · Filter by author theelliotm opened on Sep 30, 2026

• [Cross-backend] Relative process.cwd is resolved against the host process's working directory

  Issue-BugNeeds-TriageOS-LinuxOS-MacOSOS-Windows
  Bug

  microsoft/mxc#1299 · Filter by author MGudgin opened on Sep 27, 2026

• Add network into capture denials

  Backend-ProcessContainerIssue-TaskOS-Windows
  Task

  microsoft/mxc#1286 · Filter by author richiemsft opened on Sep 25, 2026
  

• Seatbelt: support native name and Unix-socket path exclusions without filesystem scans

  Area-SchemaBackend-SeatbeltIn-PRIssue-FeatureOS-MacOS
  Feature

  microsoft/mxc#1277 · Filter by author 0xmmo opened on Sep 25, 2026

• mxc-sdk: diagnostic.js runs a PATH-resolved whoami at import time, even with diagnostics off

  Area-Node-SDKIssue-BugOS-WindowsPriority2
  Bug

  microsoft/mxc#1265 · Filter by author Ninozzz95 opened on Sep 24, 2026
  

• Support container-scoped CA roots for BaseContainer proxy workloads

  Area-SchemaIssue-FeatureOS-Windows
  Feature

  microsoft/mxc#1262 · Filter by author caarlos0 opened on Sep 24, 2026
  

• processcontainer: egress deny + hostLoopback deny hangs asyncio servers — intra-container loopback (socketpair) is blocked

  Backend-ProcessContainerIssue-BugOS-WindowsPriority2
  Bug

  microsoft/mxc#1261 · Filter by author nitinkothwal opened on Sep 24, 2026
  

• processcontainer: support device-class capabilities (e.g. webcam) — capability strings are always hashed via DeriveCapabilitySidsFromName

  Area-SchemaBackend-ProcessContainerIssue-FeatureOS-Windows
  Feature

  microsoft/mxc#1260 · Filter by author nitinkothwal opened on Sep 24, 2026

• Integration surface for checkpoint/resume across hosts

  Area-DotNet-SDKArea-Node-SDKArea-Rust-SDKArea-SchemaIssue-BugPriority2
  Bug

  microsoft/mxc#1172 · Filter by author juliushill42 opened on Sep 15, 2026
  1

  

• Support of smolvm backend

  Backend-VMIssue-Feature
  Feature

  microsoft/mxc#1117 · Filter by author ohault opened on Sep 5, 2026

• ProcessContainer: MSYS2/Cygwin runtimes (git-bash) cannot initialize — NtCreateDirectoryObject(\BaseNamedObjects\...) denied

  Backend-ProcessContainerIssue-FeatureOS-Windows
  Feature

  microsoft/mxc#1061 · Filter by author SiamAbdullah opened on Aug 28, 2026
  4

• apple-containers support

  Area-SchemaBackend-VMIssue-FeatureOS-MacOS
  Feature

  microsoft/mxc#958 · Filter by author richiemsft opened on Aug 19, 2026
  1

• New containment backend: macOS hardware isolation via Apple Virtualization.framework (VZ Linux microVM)

  Area-SchemaBackend-MicroVMIssue-FeatureOS-MacOS
  Feature

  microsoft/mxc#927 · Filter by author adamwynne opened on Aug 17, 2026
  3

• Remove ETL files from captureDenials

  Backend-ProcessContainerIssue-FeatureOS-Windows
  Feature

  microsoft/mxc#826 · Filter by author richiemsft opened on Aug 12, 2026
  1