All pull requests

Pull requests

• [Seatbelt] Explicitly denied path no longer leaks metadata

  #1439·Elliot (theelliotm) opened Oct 7, 2026Contributor·4 of 8 tasks·

  ·
  1

  4

  

• chore(deps): bump the github-actions group with 2 updates

  dependenciesgithub_actions
  #1434·dependabot[bot] opened Oct 7, 2026Bot·

  ·
  2

• Close backend validation coverage gaps

  #1431·Elliot (theelliotm) opened Oct 6, 2026Contributor·3 of 8 tasks·

  ·
  15

  

• [WSLC] (2/2) Admit concurrent execs and refuse a busy container

  #1428·Soham Das (SohamDas2021) opened Oct 6, 2026Contributor·2/2·3 of 8 tasks·

  ·
  5

• docs: describe WFP denial capture

  #1420·Richie Gomez (richiemsft) opened Oct 6, 2026Contributor·4 of 8 tasks·

  ·
  1

• fix: route captured network decisions through Tessera

  #1419·Richie Gomez (richiemsft) opened Oct 6, 2026Contributor·3 of 8 tasks·

  ·
  1

• feat: decode WFP Learning Mode network events

  #1418·Richie Gomez (richiemsft) opened Oct 6, 2026Contributor·4 of 8 tasks·

  ·
  1

• feat: prefer option-aware Learning Mode trace startup

  #1417·Richie Gomez (richiemsft) opened Oct 6, 2026Contributor·4 of 8 tasks·

  ·
  3

• Document supported sandbox policy contracts

  #1416·Gudge (MGudgin) opened Oct 6, 2026Member·

  ·
  17

• Complete V1.Dev exact-JSON SDK APIs

  #1412·Gudge (MGudgin) opened Oct 6, 2026Member·

  ·
  40

• [WSLC] (1/2) Run the state-aware daemon's exec off the single worker thread

  #1407·Soham Das (SohamDas2021) opened Oct 6, 2026Contributor·1/2·3 of 8 tasks·

  ·
  10

• Scope verbose diagnostics to Learning Mode events

  #1396·Jacob Dereje (jacobdereje-msft) opened Oct 5, 2026·

  ·
  15

• Add COM diagnostics to Learning Mode

  #1395·Jacob Dereje (jacobdereje-msft) opened Oct 5, 2026·

  ·
  5

• Fix ProcessContainer environment block sort lint

  #1387·Gudge (MGudgin) opened Oct 5, 2026Member·

  ·
  2

• ProcessContainer: let an identity-less proxy run under PSEC 1.0

  Needs-Attention
  #1373·Carlos Alexandro Becker (caarlos0) opened Oct 2, 2026Collaborator·3 of 8 tasks·

  ·
  16

  

• [IsolationSession] One bundle builder and one suite runner for ADO, GitHub, and the OS lab

  Needs-Author-Feedback
  #1359·Dan Legg (danlegg) opened Sep 30, 2026Contributor·

  ·
  4

  

• docs: add MXC Policy Store feature spec

  Needs-Attention
  #1309·Chaz Gordish (ChazGo) opened Sep 28, 2026·2 of 8 tasks·

  ·
  39

  

• [Seatbelt] Add deniedPathNames and deniedUnixSocketPaths

  #1278·mo moustafa (0xmmo) opened Sep 25, 2026·8 tasks·

  ·
  1

  4

• Publish the v0.9 MicroVM backend contract with NVX internally

  Needs-Author-Feedback
  #1223·Huzaifa Danish (huzaifa-d) opened Sep 21, 2026Contributor·2 of 3 tasks·

  ·
  95