All pull requests

Pull requests

• feat(policy): support Cedar in development builds

  #5006·drew opened Oct 28, 2026Collaborator·2/2·6 of 7 tasks·

  ·
  1

  2

• chore(build): add opt-in development feature bundles

  #5005·drew opened Oct 28, 2026Collaborator·1/2·5 tasks done·

  ·
  2

• fix(network): align destination checks for direct connections

  test:e2e
  #5004·johntmyers opened Oct 28, 2026Collaborator·2 of 3 tasks·

  ·
  1

• chore(deps): bump rustls from 0.23.45 to 0.23.46 in /examples/supervisor-middleware-content-guard

  dependenciesrusttest:e2e
  #4998·dependabot[bot] opened Oct 28, 2026Bot·

  ·
  4

• fix(sdk/go): set up Listen tunnels in parallel

  #4995·ericcurtin opened Oct 28, 2026Contributor·4 of 6 tasks·

  ·
  1

  2

• feat(examples): add Cedar policies and demos

  #4991·drew opened Oct 28, 2026Collaborator·2/2·7 tasks done·

  ·
  1

  2

• fix(ci): make stable release publication retryable

  #4986·matthewgrossman opened Oct 27, 2026Member·6 of 7 tasks·

  ·
  4

• fix(e2e): make shared supervisor harness work with gateway TLS

  test:e2e
  #4984·FrostGod opened Oct 27, 2026Collaborator·4 of 6 tasks·

  ·
  4

• fix(server): defer reconciliation during sandbox lifecycle operations

  test:e2e
  #4983·TaylorMutch opened Oct 27, 2026Collaborator·6 tasks done·

  ·
  1

  1

• fix(supervisor): add configurable log directory

  #4982·ericcurtin opened Oct 27, 2026Contributor·5 of 6 tasks·

  ·
  1

  2

• revert(ci): remove temporary v0.1.6 protobuf exception

  #4978·TaylorMutch opened Oct 27, 2026Collaborator·8 tasks done·

  ·
  1

• fix(supervisor): render and detach full-screen TTY main processes correctly

  #4974·pimlock opened Oct 27, 2026Collaborator·4 of 5 tasks·

  ·
  1

• fix(ci): track Trivy image alerts by stable release lane

  #4971·SDAChess opened Oct 27, 2026Member·5 tasks done·

  ·
  2

• fix(cli): accept allow-encoded-slash in policy update

  #4968·ericcurtin opened Oct 27, 2026Contributor·4 of 6 tasks·

  ·
  1

  2

• feat(auth): add discovery-only readers and workspace scopes

  #4964·TaylorMutch opened Oct 27, 2026Collaborator·9 tasks done·

  ·
  2

• feat(auth): authenticate gateway-mediated application requests

  #4963·TaylorMutch opened Oct 27, 2026Collaborator·10 tasks done·

  ·
  2

• feat(sdk/go): add service discovery snapshots, watches, and scopes

  #4958·TaylorMutch opened Oct 27, 2026Collaborator·9 tasks done·

  ·
  1

• feat(proxy): add discovery-driven application TLS passthrough

  #4957·TaylorMutch opened Oct 27, 2026Collaborator·9 tasks done·

  ·
  2

• feat(services): publish authoritative application origins

  #4956·TaylorMutch opened Oct 27, 2026Collaborator·9 tasks done·

  ·
  2

• fix(server): consistent sandbox access after the main process exits

  #4950·pimlock opened Oct 27, 2026Collaborator·5 tasks done·

  ·
  1

  1

• ci(review): move unaccepted PRs back to draft

  #4948·purp opened Oct 27, 2026Collaborator·4 tasks done·

  ·
  2

• fix(core): resolve git rerun paths so worktree builds stay fresh

  #4947·pimlock opened Oct 27, 2026Collaborator·3 of 5 tasks·

  ·

• feat(gateway): expose workspace service route snapshots and watches

  #4941·TaylorMutch opened Oct 26, 2026Collaborator·3/3·9 tasks done·

  ·
  1

  2

• feat(supervisor): advertise accepted application route installations

  #4940·TaylorMutch opened Oct 26, 2026Collaborator·2/3·9 tasks done·

  ·
  1

  2

• feat(supervisor): add independent application listener and endpoints

  #4936·TaylorMutch opened Oct 26, 2026Collaborator·1/3·8 tasks done·

  ·
  1

  2