gstack

0 Fork 0

mirror of https://github.com/garrytan/gstack.git synced 2026-10-31 14:06:50 +01:00

Files

T

garrytan ec97187d96 I1: run paid eval containers with seccomp unconfined so Codex's sandbox can start

Docker's default seccomp profile blocks the user namespaces bubblewrap needs,
so every Codex command in a paid eval failed with 'bwrap: No permissions to
create a new namespace' (codex-review-findings, run 37151477069). Reproduced
in the CI image locally: default profile fails, seccomp=unconfined runs the
command. The runner stays non-root.

2026-10-03 22:23:57 +00:00

actions

v1.89.1.0 fix: remove continuous checkpoint commits (#2970 )

2026-09-24 17:27:14 -04:00

docker

v1.91.16.0 fix: safe installs and upgrades, skills start everywhere, truthful completion (parallel wave) (#3014 )

2026-10-03 07:54:09 -07:00

scripts

v1.91.12.0 v1.91.12.0: audit fix wave, ~11-minute paid eval lanes, eval reliability policy (#2999 )

2026-10-01 13:55:16 -07:00

workflows

I1: run paid eval containers with seccomp unconfined so Codex's sandbox can start