winagent-sandbox-mcp.git - Windows-native MCP agent sandbox for Ollama with LPAC, NTFS ACL, Job Objects, and WFP.

Age	Commit message (Collapse)	Author
2026-08-11	Require task-specific tool evidence	tanaka takashi

2026-08-11	Use capable local model for release verification	tanaka takashi

2026-08-11	Anchor planner tasks to exact request values	tanaka takashi

2026-08-11	Audit and align v1 runtime design	tanaka takashi

2026-08-09	fix(e2e): prevent persistent PATH pollution	tanaka takashi
	Operational E2E assigned a unique fixture directory to DOTNET_CLI_HOME before invoking the .NET SDK. The SDK first-run configurator consequently persisted each fixture .dotnet/tools directory into the interactive user PATH, producing 25 stale agent-mcp-operational-e2e entries and a 5,087-character PATH. Set DOTNET_ADD_GLOBAL_TOOLS_TO_PATH=false for the complete E2E process tree, restore its previous process value in finally, and fail the E2E if the persistent user PATH differs after execution. Recovery removed only the 25 verified AppData/Local/Temp/agent-mcp-operational-e2e entries from the isaza user PATH. The original Environment registry key is backed up under ignored artifacts/recovery. All 27 unrelated entries were retained in their original order. Verification: PowerShell parse errors 0; isolated .NET SDK 10.0.301 first-run probe completed with persistent PATH unchanged.
2026-08-09	feat: AI Agent Sandbox MCP Server v1を実装	tanaka takashi
	Specifications、Design、ImplementationPlanの優先順位を整理し、単一Task実行モデル、typed option優先、設定可能なresource上限、local Ollamaを必須とするRelease Gateを文書化。 .NET 10/C# 14の5 production project、3 test project、E2E Clientを構築。typed YAML、en/ja locale、fixed/user prompt、stdioおよびloopback限定Streamable HTTP、agent_run/agent_status、Session、Ollama text/tool/Vision、TaskGraphとtoken accountingを実装。 Windows sandboxとしてfixed AppContainer、canonical/reparse検査、能力別ACL、path+SHA-256 executable approval、child-process restriction、Job Object、task journal、atomic file transaction、crash recoveryを実装。WFPのIPv4/IPv6 default denyとexact allow、dynamic session、temporary loopback exemption、管理者/BFE診断を追加。 Security/Recovery test、MCP/Ollama integration test、stdio/HTTP Operational E2E、Release Bundle生成・checksum・manifest・fresh extraction検査を追加。Requirement TraceabilityとPhase 0〜11の進捗、初回セットアップ可能なREADMEを整備。 Debug/Release/publish/objをrepository rootのbuild/へ集約し、旧project-local bin/objへの依存を除去。artifacts/とbuild/をGit管理外に設定し、clean checkoutでもsolution buildからE2E Clientまで生成可能にした。