OXYGENHUB

Changes up to # 077a65242359 +3 touching docs/m0.md · 19

See as swimlanes (independent work side by side)

077a65242359898d8967ed32f416ba4678d3ed58947c49052f7b195ae0a4d186+412808f9f76943fa503d58ab9a24fb477121f64dc5eb29a05cd2036526ebdf67+788f57e4d266164f75b969437ceb07a7a54c36b1f5b0627f9429b5b3151027f6+c3db750ed96ee23293fcab12bdc9f768f85a79df5841cdb0b82106e1a07f0729 has 4 heads. The graph shows their union; heads are marked.
Syscall tier: network "loopback" allows IPv4 and IPv6 sockets
Andy McCall ·
◈ cc462b56fbbb
Prune build caches before they are kept
Andy McCall via agent:claude@andymccall agent ·
◈ 077a65242359
Build caches for the syscall tier
Andy McCall via agent:claude@andymccall agent ·
◈ 2594278f49b2
Allow-listed egress over vsock: network "egress" { allow "host"... }
Andy McCall via Claude Code agent ·
✔ ea81796bb757
feat(runner): restarts cost no job (closes #49, closes #50)
Andy McCall ·
✔ 89171fca079c
The syscall tier: jobs without KVM
Andy McCall ·
✔ ea56c56eaf90
Architecture awareness: image manifests, arch on a sandbox, archs on the claim
Andy McCall ·
✔ 1abadd4a2fa6
A job's identity: identity blocks name an audience and a mount path
Andy McCall ·
✔ 720eb8191059
Secrets mount as files: secret blocks, the claim's secrets, flow-init writes them
Andy McCall ·
✔ e2c125610f43
A claim carries the hub's variables for the job
Andy McCall ·
✔ c58efc6a74db
Stop a job when its run is cancelled
Andy McCall ·
✔ 280ef951d193
Register runners with a token; describe them in claims
Andy McCall ·
✔ f98a8f7881e0
Job artifacts: output declarations, extraction and upload
Andy McCall ·
✔ a67b97e9a717
Runners sign their receipts
Andy McCall ·
✔ 47c1d64dec8a
Sandbox env, and an image's own environment
Andy McCall ·
✔ a72abeeedd78
Guest /dev/fd links; jobs are told what they build
Andy McCall ·
✔ c4285535b03a
Build image for Rust and Node jobs (images/rust: toolchain, rustfmt, clippy, Node 24, vendored crates, offline cargo); flow-init finds the program in the job's PATH (glibc's execvpe used PID 1's own); network "loopback" in M0
Andy McCall ·
✔ eb5c4db673e5
Ephemeral scratch mounts in M0: ephemeral://tmpfs and ephemeral://disk (a sparse disk per job), checked targets and sizes, in the canonical job and the receipt; flow-init mounts them for the job's user; make deploy-runner
Andy McCall ·
✔ fc10d9e80383
OxygenFlow M0: pipeline parser and canonical job graph, receipts, the runner API types, flow-init, the Firecracker tier, flow check, run, rootfs import and runner
Andy McCall ·
✔ e0918b887850