feat(isolation): define the RFC 0012 boundary contract

[drew]

Summary

Define the RFC 0012 Isolation Backend contract that lets the supervisor operate a sandbox without depending on Docker, Podman, Kubernetes, or VM details.

Each sandbox launch now has a distinct session identity. Authentication is required, but the public interface does not expose TLS, JWT, gRPC, or transport types. General application UDP remains out of scope; TCP and DNS are mediated by the supervisor.

Related Issue

Part of #1737.

Changes

• Define backend-neutral lifecycle, process, identity, TCP, and DNS contracts.
• Add a validated SandboxSessionId and bind it to SandboxContext.
• Require authenticated attach and fail-closed confirmation before the agent starts.
• Require process ownership, binary identity, network mediation, and driver-owned containment.
• Keep transport and authentication mechanisms behind the interface.

Testing

• mise run pre-commit
• Full unit and E2E validation delegated to remote CI

Checklist

• Follows Conventional Commits
• Authored commits are signed off (DCO)

Stack

1. feat(isolation): define the RFC 0012 boundary contract #2941 — Isolation Backend contract (this PR)
2. feat(isolation): add boundary protocol and Linux primitives #2942 — OpenShell Sandbox Protocol and Linux primitives
3. feat(isolation): split supervisor and sandbox runtimes #3151 — supervisor and sandbox runtimes
4. feat(vm): run the supervisor outside the guest workload #2945 — VM driver
5. feat(docker): isolate workloads behind the host supervisor #2965 — Docker driver
6. feat(kubernetes): add proxy-pod isolation topology #3144 — Kubernetes proxy-pod driver
7. feat(podman): isolate workloads behind the host supervisor #3230 — Podman driver
8. perf(isolation): add TCP and DNS benchmark harnesses #3229 — performance harnesses

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

[copy-pr-bot]

Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually.

Contributors can view more details about this message here.

[github-actions]

Label test:e2e applied for a5dc6db. Open the existing run and click Re-run all jobs to execute with the label set. The run will execute the standard E2E suite after building the required gateway and supervisor images once. The matching required CI gate status on this PR will flip green automatically once the run finishes.

[drew]

/ok to test

[drew]

/ok to test

[drew]

/ok to test