Issues

• Spec change: §9.3 refuses org.opencontainers.image.created even when derived from SOURCE_DATE_EPOCH

  specification
  docker/sandbox-kit-spec#99 · Filter by author cdupuis opened on Oct 1, 2026

• Spec change: com.docker.sandbox/host-mount@1, a runtime-owned host directory shared across a Kit's sandboxes

  specification
  docker/sandbox-kit-spec#96 · Filter by author cdupuis opened on Sep 30, 2026
  1

• Runtime floor omits su, which lifecycle startup hooks require

  bug
  docker/sandbox-kit-spec#88 · Filter by author imearc opened on Sep 30, 2026
  1

  

• [spec] gate: let a runtime delegate §7.4 approval to an external policy decision point

  investigationspecification
  docker/sandbox-kit-spec#64 · Filter by author alexolivier opened on Sep 25, 2026
  2