feat(picod): implement two-stage secure initialization to isolate sandbox sessions#352

Open

Abhinav-kodes wants to merge 14 commits into

volcano-sh:mainfrom

Abhinav-kodes:feat/picod-two-stage-init

Commits on May 25, 2026

feat: implement two-stage secure initialization for PicoD
Abhinav-kodes
committed
refractor: comments
Abhinav-kodes
committed
chore: add missing license header to bootstrap_auth.go
Abhinav-kodes
committed
fix: address review feedback and fix lint
Abhinav-kodes
committed
fix: persist SessionPrivateKey to store to allow Router JWT signing
Abhinav-kodes
committed
fix: address remaining review feedback from gemini bot
Abhinav-kodes
committed
fix: safely assert cached private key type to satisfy errcheck
Abhinav-kodes
committed
fix: address code review feedback for key cache leak and iss verification
Abhinav-kodes
committed
trigger ci
Abhinav-kodes
committed
feat(picod): implement secure initialization improvements and persist bootstrap keys
Abhinav-kodes
committed
fix(workloadmanager): resolve golangci-lint/gosec warnings in tests and fix comment typo
Abhinav-kodes
committed
feat(store): isolate session private key persistence from SandboxInfo
Abhinav-kodes
committed
docs(router): update jwt cache eviction documentation to reflect random eviction
Abhinav-kodes
committed
fix: address review feedback regarding env var fallback and migration docs
Abhinav-kodes
committed