didericis c3f55357cc test(smolmachines): verify Linux sandbox escape gate + fix platform check ...

Empirical verification on NixOS/Linux with /dev/kvm + smolvm 1.4.7:

  1. DB path confirmed: ~/.local/share/smolvm/server/smolvm.db exists,
     schema matches (vms table, data BLOB with allowed_cidrs JSON field).

  2. smolvm 1.4.7 still silently drops --allow-cidr with --from
     (allowed_cidrs=None in DB after create). force_allowlist patch
     is still necessary and correct.

  3. All 5 sandbox-escape attacks blocked with BOT_BOTTLE_BACKEND=smolmachines
     on Linux: hostname/IP allowlist, HTTP DLP, DNS exfil, git-gate gitleaks.

Changes:
- test_sandbox_escape: remove darwin-only guard; allow linux too
- contrib/claude/Dockerfile: add dnsutils (dig) for attack 4 DNS test

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-07-09 00:49:04 -04:00

..

__init__.py

refactor(agent_provider): introduce AgentProvider ABC + contrib plugins

2026-06-03 21:38:13 -04:00

agent_provider.py

feat(cli): add headless launch mode for orchestrators

2026-06-30 15:08:14 -04:00

Dockerfile

test(smolmachines): verify Linux sandbox escape gate + fix platform check

2026-07-09 00:49:04 -04:00