codex/restricted-docker-agent AGit
main
Implements roadmap milestone 2: separate agent binary, authenticated HMAC private API, timestamp and nonce replay defense, bounded bodies and timeouts, canonical allowed-root enforcement, authenticated durable registry, Docker socket health, disk checks, main-application client, Compose hardening, documentation, and negative tests. All Go, race, vet, staticcheck, golangci-lint, specification, Compose, CGO-disabled, Docker-socket, and diff validations passed.
No dependencies set.
The note is not visible to the blocked user.
tony
Implements roadmap milestone 2: separate agent binary, authenticated HMAC private API, timestamp and nonce replay defense, bounded bodies and timeouts, canonical allowed-root enforcement, authenticated durable registry, Docker socket health, disk checks, main-application client, Compose hardening, documentation, and negative tests. All Go, race, vet, staticcheck, golangci-lint, specification, Compose, CGO-disabled, Docker-socket, and diff validations passed.