2707 configurable uid gid range/ebusto - #2737

Closed

ebusto wants to merge 9 commits into

NVIDIA:mainfrom

ebusto:2707-configurable-uid-gid-range/ebusto

Commits on Aug 17, 2026

feat(gateway): make sandbox UID/GID minima configurable
ebusto
committed
657df24
Ensure the supervisor is using the same limits.
ebusto
committed
c243ae0
fix(gateway): honor identity limits on policy merge and proposals
ebusto
committed
a2e1664
fix(gateway): gate default policy-safety helper to tests
ebusto
committed
df3c8ed
fix(policy): satisfy clippy on sandbox identity limits
ebusto
committed
497bc09
fix(gateway): avoid clippy similar_names on identity limits
ebusto
committed
c218a0a
feat(vm): honor gateway sandbox UID/GID minima
ebusto
committed
95a210f
feat(k8s): honor gateway sandbox UID/GID minima
ebusto
committed
ba73e97
test(k8s): prove resolved identity 500/30 survives render
ebusto
committed
b2a3dd7