Repository navigation

open ssh into the VM for a remote MCP client - #34

Merged

glslang merged 22 commits into

mainfrom

claude/agent-sandbox-vm-setup-ubpye7

Aug 21, 2026

Merged

open ssh into the VM for a remote MCP client#34
glslang merged 22 commits into
mainfrom
claude/agent-sandbox-vm-setup-ubpye7

Commits on Aug 21, 2026
- open ssh into the VM for a remote MCP client
  
  glslang
  and
  claude
  committed
  67b86db
- never lose the record of what setup changed
  
  glslang
  and
  claude
  committed
  7d85c17
- make the ACL, the port match and the group check mean what they say
  
  glslang
  and
  claude
  committed
  5bdb839
- stop guessing, and put the ACL back too
  
  glslang
  and
  claude
  committed
  00a8972
- print the address, not its first character
  
  glslang
  and
  claude
  committed
  8c7bc0d
- escape the printed command for the client shell
  
  glslang
  and
  claude
  committed
  c431dc5
- leave the machine's own files and record alone
  
  glslang
  and
  claude
  committed
  6b15c6e
- retire a component from the record once it is back
  
  glslang
  and
  claude
  committed
  d22c0ac
- keep the bytes, the record and the identity honest
  
  glslang
  and
  claude
  committed
  4adc98a
- do not report a boundary the firewall did not accept
  
  glslang
  and
  claude
  committed
  16fed00
- check what a blanket rule reaches instead of assuming
  
  glslang
  and
  claude
  committed
  e8fc54e
- document what the last commit changed
  
  glslang
  and
  claude
  committed
  e45d56d
- do not fail a run over a rule that widens nothing
  
  glslang
  and
  claude
  committed
  8d49dd8
- narrow rules, never widen them
  
  glslang
  and
  claude
  committed
  1fb1a8b
- own only the rules this run actually changed
  
  glslang
  and
  claude
  committed
  e4cb523
- give a changed rule back to whoever changed it
  
  glslang
  and
  claude
  committed
  06c5187
- keep the rollback record true after a rerun or a retry
  claude
  committed
  9ead5d5
- replace five rollback implementations with one ledger
  claude
  committed
  66cb048
- merge only the fields a rerun actually wrote
  claude
  committed
  752f7ac
- close access before handing the firewall back, and own fields not components
  claude
  committed
  63a3ebe
- enforce the boundary before listening, and treat a rule's scope as one thing
  claude
  committed
  ca86b30
- put the record on disk before the change, and never publish a half-set scope
  claude
  committed
  0bb33d2

Commits

Commits on Aug 21, 2026