fix(docker): harness isolation via COPY/PRUNE + GRADE-OUTSIDE. Close the criteria/grader leak - #88

Draft

CarlesUIPath wants to merge 12 commits into

mainfrom

fix/docker-isolation-copy-prune

Commits on Aug 6, 2026

feat(docker): harness isolation via COPY/PRUNE + GRADE-OUTSIDE — close the criteria/grader leak

CarlesUIPath
and
claude
committed
0cab1e5

Commits on Aug 7, 2026

Commits on Aug 10, 2026

fix(docker): narrow grade-outside overlap guard from containment to content test

CarlesUIPath
and
claude
committed
57e802f
fix(docker): make sandbox venv creation idempotent across in-place re-runs

CarlesUIPath
and
claude
committed
5137f76
fix(docker): isolate host-side regrade grader execution from agent-controlled env

CarlesUIPath
and
claude
committed
8dbab08

Commits on Aug 11, 2026

fix(docker): harden host-side regrade grader env + guard completeness

CarlesUIPath
and
claude
committed
e01b7d0
Merge remote-tracking branch 'origin/main' into fix/docker-isolation-copy-prune

CarlesUIPath
and
claude
committed
34a5006
test(docker): align agent_safe_dump invariant test with the host-only field strip

CarlesUIPath
and
claude
committed
7bc1d82
fix(docker): keep Windows subprocess essentials in the grader allowlist

CarlesUIPath
and
claude
committed
27a8c73