gstack

0 Fork 0

mirror of https://github.com/garrytan/gstack.git synced 2026-10-31 14:06:50 +01:00

Files

T

garrytan 950cff358a I1: run Codex paid slices on a host-run job where bubblewrap can start

Docker's default seccomp/AppArmor profiles and the Ubuntu 24.04 host's
kernel.apparmor_restrict_unprivileged_userns=1 keep Codex's bubblewrap
sandbox from starting in a job container, so every Codex command failed.
The planner now packs Codex shards into their own slices (plan.codexSlices,
validated against the entries); evals-periodic runs those slices on a new
host-run job that lifts the host restriction and runs the same CI image
with seccomp and AppArmor unconfined. Artifact names match eval-slices,
so the report reconciles one manifest. Gate plans have no Codex slices.

2026-10-03 23:22:56 +00:00

actions

v1.89.1.0 fix: remove continuous checkpoint commits (#2970 )

2026-09-24 17:27:14 -04:00

docker

v1.91.16.0 fix: safe installs and upgrades, skills start everywhere, truthful completion (parallel wave) (#3014 )

2026-10-03 07:54:09 -07:00

scripts

v1.91.12.0 v1.91.12.0: audit fix wave, ~11-minute paid eval lanes, eval reliability policy (#2999 )

2026-10-01 13:55:16 -07:00

workflows

I1: run Codex paid slices on a host-run job where bubblewrap can start