Devika Verma 0bb74aae24 OpenShell: keep a session's private folder under the state dir, not /tmp (OPE-208) ...

Copied credentials (and the policy file) went into tempfile.mkdtemp() under /tmp and
were bind-mounted into the sandbox. NVIDIA's installer runs the gateway as a systemd
user service with PrivateTmp=true, so the gateway has its own empty /tmp: the mount
source "does not exist" for it and every session with a shared credential failed to
create. Verified through /proc/<gateway pid>/mountinfo and /proc/<pid>/root/tmp.

The folder is now `<state dir>/sandbox-runtime/ow-openshell-<pid>-<random>/`: on the
real filesystem, owner-only, and a SIBLING of `sandbox/`, never a child, because
`sandbox/` is mounted read-only into every sandbox for the runner and copied keys must
not be readable from another session's sandbox. The server pid in the name lets the
registry's reap sweep the folders of a dead server, which /tmp used to do on its own.

2026-09-27 14:26:14 +05:30

..

assets

README: add how-it-works diagram from the website

2026-07-23 09:29:00 -07:00

approval-guidance.md

Document approval context and refine Advanced disclosure

2026-09-20 19:36:09 -07:00

config.example.toml

Docs: OpenShell sandboxes, a README tier and bullet, and the config example

2026-09-24 18:04:27 -05:00

openshell.md

OpenShell: keep a session's private folder under the state dir, not /tmp (OPE-208)

2026-09-27 14:26:14 +05:30

remote-machines.md

CLI: join and up at the top level; one spelling per command

2026-09-18 21:58:37 -07:00

team-board-evidence.md

Make team coordination event driven and quiet

2026-09-21 06:02:41 -07:00