[DO NOT MERGE] execution runtime architecture - sandboxing prototype - #5740

Draft

habdelra wants to merge 93 commits into

mainfrom

codex/boxel-execution-runtime-architecture

Commits on Aug 5, 2026

Document Boxel execution runtime architecture
christse
committed
7b038bd
WIP: build Boxel execution runtime foundation
christse
committed
093538b
Implement Phase 2 Boxel execution runtimes
christse
committed
3d56625
WIP: checkpoint Boxel execution runtime parity
christse
committed
c630781
Add execution-runtime parity plan and protocol-first replan

christse
and
claude
committed
63f3ba2
Restore bundler-safe module evaluation and delete dead runtime code

christse
and
claude
committed
f46bec1
Add the Boxel rendering protocol spec (v1 draft)

christse
and
claude
committed
0708311
Resolve @percy/ember to its browser module under Vite

christse
and
claude
committed
1766355

Commits on Aug 6, 2026

Enforce the semantic protocol at record and bundle admission

christse
and
claude
committed
8187c1c
Collapse the three Boxel projection builders into one Host pipeline

christse
and
claude
committed
6ec089e
Confine the vendored currency data to the loader shim

christse
and
claude
committed
e8c77cf
Stand up the rendering-protocol conformance machinery

christse
and
claude
committed
5a9a3f4
Expose isolated as a queryable prerendered HTML format

authored and
christse
committed
1c9e6fd
Fix the semantic and sandbox failures behind cross-tier render divergence

christse
and
claude
committed
b5d493f
Add the sandbox HMR extraction dossier

christse
and
claude
committed
ebc1c6a
Add the volatile-execution direction plan

christse
and
claude
committed
07119d5
Make volatile promotion one-way for the session

christse
and
claude
committed
f967f52
Land the second cross-tier fix wave from real-card comparison

christse
and
claude
committed
2932570
Carry theme, relationship, and Sandbox-lifecycle parity across the boundary

christse
and
claude
committed
a1d7cb9
Ratchet the rendering-protocol conformance coverage and audit frozen-branch parity

christse
and
claude
committed
2fdb282
Hold the Sandbox child's first render until its viewport has real geometry

christse
and
claude
committed
e639b4c
Give the Sandbox tier vite-like source volatility (RP-18)

christse
and
claude
committed
81ed1a0
Repair the RP-8 and RP-4.4 conformance tests against real execution

christse
and
claude
committed
5a71470
Promote actively-edited cards to volatile execution (RP-19)

christse
and
claude
committed
4cff46a
Log Sandbox process creation parent-side to expose remint loops

christse
and
claude
committed
0b93ef4
Fix the Sandbox height lifecycle and make the prerender placeholder instant

christse
and
claude
committed
5f386e9
Restore the operator-mode DOM contract and un-wedge stack close

christse
and
claude
committed
fc64577
Guard the intrinsic-height reporter against post-teardown callbacks

christse
and
claude
committed
6b2a33e
Restore private-realm images inside the Sandbox via a bounded media lane

christse
and
claude
committed
03f9ef8
Make @model a live read-through projection — main's sync, through the boundary

christse
and
claude
committed
54ee1cd

Commits on Aug 7, 2026

Express main's path-not-value pattern through portals, writes, and settle

christse
and
claude
committed
e04f612
Centralize the child-format cascade and the root DOM-contract stamp

christse
and
claude
committed
a54f9aa
Deliver parent-side mutations to a mounted Sandbox child (RP-20.5 updateInstance)

christse
and
claude
committed
a60c3db
Capsule component args are paths: the authored instance survives every arg change

christse
and
claude
committed
e27612e
Fix the three pre-existing render-record parity failures via main's own reads

christse
and
claude
committed
2a46dde
Make the scoped-css confinement test assert confinement, not a Chrome detail

christse
and
claude
committed
92a44fd
Fix the typing-continuity harness artifact: provide the permissions context

christse
and
claude
committed
5aefe7d
Audit which host surfaces route through the execution tiers

christse
and
claude
committed
bdeed03
Close two confinement/routing correctness holes: RP-6.5 and shim modules

christse
and
claude
committed
b71892a
Surface Sandbox failures instead of blanking, and unblock materialize in the child

christse
and
claude
committed
3ebf326
Clamp tall intrinsic height reports instead of rejecting them

christse
and
claude
committed
975e5f7
RP-6.3: edit renders host-side unless the module authors an in-place editor

christse
and
claude
committed
dfc06bb
Pin RP-6.3 edit routing end-to-end in the rp-sandbox suite

christse
and
claude
committed
198e19a
RP-20.6: the Sandbox write leg — child edits propagate to the parent store

christse
and
claude
committed
83723e8
RP-9.1 across the Sandbox boundary: push the permissions context snapshot

christse
and
claude
committed
10d8221
RP-6.3/RP-20.3 doc debt: state the edit-tier rule as principle, not example

christse
and
claude
committed
0ef07cf
RP-21: entitlement is orthogonal to containment

christse
and
claude
committed
a2bc498
RP-21: add the informative capability matrix (Capsule vs Sandbox)

christse
and
claude
committed
6bc52ba
Add the layered reviewer's guide for the execution runtime as built

christse
and
claude
committed
72f2375
Expand the reviewer's guide: full explanations in plain technical English

christse
and
claude
committed
d80b7c2
Reviewer's guide: cut prose, let code carry the explanation

christse
and
claude
committed
825da21
Record the foreign-framework probes as out-of-scope architectural checks

christse
and
claude
committed
a941180
Restore the card box contract that main gives for free (RP-9.9)

christse
and
claude
committed
e2fd5e9

Commits on Aug 9, 2026

Commits on Aug 10, 2026

test(host): expand real-browser compatibility smoke
christse
committed
89c55eb
fix(host): separate sandbox load and connect deadlines
christse
committed
0ac00d8

Commits on Aug 11, 2026

Allow exact BXL prototype import in sandbox
christse
committed
4c55c33
Strengthen sandbox compatibility and smoke coverage
christse
committed
6530523
Optimize execution runtime hot paths
christse
committed
211f003
Harden execution runtime lifecycle
christse
committed
8389a52
Reuse Sandbox iframe across edit toggles
christse
committed
652dabe
Document execution runtime retention and smoke evidence
christse
committed
f59e24e
test(host): add execution-runtime boundary probes and a getComponent escape PoC

habdelra
and
claude
committed
548a0a8
Harden execution runtime boundaries after review
christse
committed
ff31b17
Merge main to unblock execution runtime preview
christse
committed
3b7f700
Adapt execution runtime to current main APIs
christse
committed
b099e65
Fix hosted sandbox runtime previews
christse
committed
59ca638
Skip host store setup in sandbox child
christse
committed
b507696
Fix transient sandbox source auth failures
christse
committed
f94b650
Allow Google Fonts in sandbox runtime
christse
committed
38fe0e6

Commits on Aug 12, 2026

Fix Host test environment root ownership
christse
committed
4668c8e
Fix execution runtime lifecycle and rendering
christse
committed
e1ce2f0
Exercise Host regressions through Direct RP
christse
committed
dd72b77
Record real-card execution smoke evidence
christse
committed
6d78619
Settle executable generations before RP updates
christse
committed
35f876d
Align allocated surface integration contract
christse
committed
116fd84
Align getComponent escape test with RP isolation
christse
committed
471cb3c
Retry public realm reads after stale auth
christse
committed
47c53c0
Merge main into execution runtime architecture
christse
committed
4c10243
Handle rejected refreshed tokens on public reads
christse
committed
16aef58
Document Capsule Glimmer DOM boundary
christse
committed
347deba
Document Capsule admission boundaries
christse
committed
9e59c96
Support opaque-origin Sandbox fallback
christse
committed
2cfcd55
Fix RP continuity and boundary failures
christse
committed
fc5bf89
Stop factory runs when shared agent transport dies
christse
committed
4285a0c
Avoid unused classification for Direct RP
christse
committed
528b797
Fix RP relationship and lifecycle regressions
christse
committed
fb8cde0
Keep RP generations stable across loader resets
christse
committed
2eba0bc

Commits on Aug 13, 2026

Avoid serialized boundary work for Direct RP
christse
committed
1314098