Pull requests

• chore(deps): bump the github-actions group across 1 directory with 5 updates

  dependenciesgithub_actions
  #1542·dependabot[bot] opened Oct 21, 2026Bot·

  ·
  2

• [Bubblewrap] Fix terminal isolation and startup cancellation

  #1541·Soham Das (SohamDas2021) opened Oct 20, 2026Contributor·3 of 8 tasks·

  ·
  1

  2

• NVX Phase 3: Streaming and Container Lifecycle

  #1539·Huzaifa Danish (huzaifa-d) opened Oct 20, 2026Contributor·3/3·2 of 8 tasks·

  ·
  1

• NVX Phase 2: Policy Support and Image Selection

  #1538·Huzaifa Danish (huzaifa-d) opened Oct 20, 2026Contributor·2/3·2 of 8 tasks·

  ·
  1

• Define the feature contribution and spec review process

  Copilot-Instructions
  #1534·Branden Bonaby (bbonaby) opened Oct 20, 2026Collaborator·3 of 11 tasks·

  ·
  3

• [Seatbelt] Fix symlink and parent-traversal policy enforcement

  #1531·Elliot (theelliotm) opened Oct 19, 2026Contributor·3 of 8 tasks·

  ·
  5

  

• [Bubblewrap] Restrict socket address families and io_uring with an always-on seccomp filter

  #1529·Soham Das (SohamDas2021) opened Oct 19, 2026Contributor·3 of 8 tasks·

  ·
  6

• NVX Phase 1: Minimal Signed MicroVM integration

  #1528·Huzaifa Danish (huzaifa-d) opened Oct 19, 2026Contributor·1/3·3 of 8 tasks·

  ·
  6

• [Bubblewrap] Fork bwrap from a process-lifetime thread

  #1526·Keith Mattix II (keithmattix) opened Oct 19, 2026·6 of 8 tasks·

  ·
  1

  3

• feat(sdk): expose retained Windows query process handles

  #1524·Vineeth Sai Narajala (vineethsai7) opened Oct 18, 2026·

  ·
  7

• Guard more effectively against stdout truncation

  #1520·Dom Giandinoto (daamenik) opened Oct 16, 2026Contributor·8 tasks·

  ·
  11

• bwrap: Add the option to skip the procfs mount

  #1508·Wes Turner (westurner) opened Oct 15, 2026·2 of 8 tasks·

  ·
  5

• IsolationSession test bundle: ship test_scripts/lib/LoopbackAnchor.ps1

  #1501·Dan Legg (danlegg) opened Oct 14, 2026Contributor·

  ·
  6

• Add per-run resource limits, priority, and resource usage

  #1499·Carmine Paolino (crmne) opened Oct 14, 2026·3 of 8 tasks·

  ·
  1

  2

• docs: propose the Policy Store requirements resolver

  #1483·Chaz Gordish (ChazGo) opened Oct 13, 2026·2 of 8 tasks·

  ·
  4

• Emit errors and warnings as structured ScriptResponse JSON

  Needs-Attention
  #1482·Elliot (theelliotm) opened Oct 13, 2026Contributor·4 of 8 tasks·

  ·
  1

  89

  

• require opt-in for PowerShell whole-drive read access

  #1463·Matt Van Horn (mvanhorn) opened Oct 10, 2026·2 of 8 tasks·

  ·
  1

  8

• Fix stdin relay for pipes in IsoSession

  #1450·Dom Giandinoto (daamenik) opened Oct 8, 2026Contributor·2 of 8 tasks·

  ·
  8

• feat: NVX integration design doc

  Needs-Attention
  #1448·Huzaifa Danish (huzaifa-d) opened Oct 7, 2026Contributor·2 of 8 tasks·

  ·
  144

  

• Consume published IsolationSession SDK NuGet package

  Needs-Author-Feedback
  #1440·Dan Legg (danlegg) opened Oct 7, 2026Contributor·4 of 8 tasks·

  ·
  58

  

• Complete V1.Dev exact-JSON SDK APIs

  #1412·Gudge (MGudgin) opened Oct 6, 2026Member·

  ·
  54

• [IsolationSession] One bundle builder and one suite runner for ADO, GitHub, and the OS lab

  Needs-Author-Feedback
  #1359·Dan Legg (danlegg) opened Sep 30, 2026Contributor·

  ·
  4

  

• [Seatbelt] Add deniedPathNames and deniedUnixSocketPaths

  #1278·mo moustafa (0xmmo) opened Sep 25, 2026·8 tasks·

  ·
  1

  4