Skip to content

Publish v0.9 with stable WSLC support - #1187

Open
Gudge (MGudgin) wants to merge 1 commit into
mainfrom
user/gudge/version_specific_config_parsers_phase12_wslc_graduation
Open

Gudge (MGudgin) wants to merge 1 commit into
mainfrom
user/gudge/version_specific_config_parsers_phase12_wslc_graduation

Conversation

@MGudgin

@MGudgin Gudge (MGudgin) commented Sep 16, 2026

Copy link
Copy Markdown
Member

📖 Description

Publishes the exact v0.9 configuration contract with stable IsolationSession
and WSLC support, opens v0.10 as the sole development contract, and removes
runtime dependence on the rolling v0.9 model.

Details

  • Publish immutable v0.9 schema and generated TypeScript contract artifacts.
  • Graduate IsolationSession and WSLC from runtime experimental authorization.
  • Route configuration through exact contracts and version-specific adapters.
  • Keep WSLC one-shot and lifecycle requests on the published v0.9 contract.
  • Validate Node output against exact v0.10 plus the published v0.9 WSLC shape.
  • Cover v0.10 ProcessContainer filesystem enumeration in fixtures and adapters.
  • Align backend E2E expectations with exact parsing and policy validation.
  • Move other development-backend tests and playground requests to exact v0.10.
  • Protect published registry and stable-schema history from mutation.

Tests

  • Rust formatting, exact-contract, adapter, WSLC, IsolationSession, and LXC
    tests passed.
  • WSLC/IsolationSession feature checks and Clippy passed for the executor,
    engine, Rust SDK, and FFI.
  • Node build, unit tests, and integration type-check passed.
  • The playground build passed.
  • All 81 versioning tests and exact codegen/parity/config gates passed; 363
    repository configs validated against five registered exact schemas.
  • Both PowerShell E2E harnesses parsed successfully.
  • Live IsolationSession skipped because the probe reported unavailable. Live
    WSLC provisioning was unavailable because the host lacks the required WSL
    package; the updated dry-run immutable-network policy assertion passed.
Microsoft Reviewers: Open in CodeFlow

@MGudgin
Gudge (MGudgin) requested review from a team and a balanced review from Copilot September 16, 2026 22:02
@MGudgin
Gudge (MGudgin) requested a review from a team as a code owner September 16, 2026 22:02
@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

@microsoft-github-policy-service microsoft-github-policy-service Bot added the Copilot-Instructions PR modifies Copilot instruction files (.github/copilot-instructions.md or .github/instructions/) label Sep 16, 2026
@MGudgin
Gudge (MGudgin) added this pull request to stack #1191 September 16, 2026 22:04
Comment thread tests/scripts/run_isolation_session_tests.ps1 Outdated

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟡 Changes recommended

One or more issues must be addressed before approval.

Get a fresh assessment by requesting another Copilot review.

Review effort: Lite (auto)
Findings: 1 High severity · 3 Medium severity

Note

Copilot is running an experiment and ran this review at Lite.

Open (4)
What changed in this PR

Publishes the exact v0.9 contract, graduates WSLC, and opens v0.10 for development-only features.

Changes:

  • Adds published v0.9 contracts, schemas, adapters, and generated SDK artifacts.
  • Removes runtime experimental authorization for stable WSLC and IsolationSession.
  • Updates SDKs, documentation, scripts, and fixtures.
File Description
tests/​scripts/​run_wslc_state_aware_tests.ps1 Updated as part of this pull request.
tests/​scripts/​run_wslc_proxy_test.ps1 Updated as part of this pull request.
tests/​scripts/​run_wslc_object_test.ps1 Updated as part of this pull request.
tests/​scripts/​run_wslc_dotdot_alias_test.ps1 Updated as part of this pull request.
tests/​scripts/​run_wslc_all_tests.ps1 Updated as part of this pull request.
tests/​scripts/​run_isolation_session_tests.ps1 Updated as part of this pull request.
tests/​policy/​state-aware-wslc-provision.json Updated as part of this pull request.
tests/​policy/​request-wslc.json Updated as part of this pull request.
tests/​policy/​request-process-container.json Updated as part of this pull request.
tests/​policy/​request-directional-network.json Updated as part of this pull request.
tests/​examples/​wslc_hello_world.json Updated as part of this pull request.
tests/​examples/​28_telemetry_enabled.json Updated as part of this pull request.
tests/​examples/​10_windows_sandbox_network_isolated.json Updated as part of this pull request.
tests/​examples/​09_windows_sandbox_hello_world.json Updated as part of this pull request.
tests/​configs/​wslc_timeout.json Updated as part of this pull request.
tests/​configs/​wslc_tar_import_rootfs.json Updated as part of this pull request.
tests/​configs/​wslc_tar_import_docker_save.json Updated as part of this pull request.
tests/​configs/​wslc_stderr.json Updated as part of this pull request.
tests/​configs/​wslc_state_aware_provision.json Updated as part of this pull request.
tests/​configs/​wslc_state_aware_provision_with_filesystem.json Updated as part of this pull request.
tests/​configs/​wslc_state_aware_provision_rejected_proxy.json Updated as part of this pull request.
tests/​configs/​wslc_state_aware_provision_rejected_hosts.json Updated as part of this pull request.
tests/​configs/​wslc_state_aware_provision_rejected_denied.json Updated as part of this pull request.
tests/​configs/​wslc_state_aware_provision_bridged.json Updated as part of this pull request.
tests/​configs/​wslc_state_aware_exec_proxy.json Updated as part of this pull request.
tests/​configs/​wslc_readonly_mount.json Updated as part of this pull request.
tests/​configs/​wslc_python_stdlib.json Updated as part of this pull request.
tests/​configs/​wslc_python_hello.json Updated as part of this pull request.
tests/​configs/​wslc_port_mapping_tcp.json Updated as part of this pull request.
tests/​configs/​wslc_port_mapping_multiple.json Updated as part of this pull request.
tests/​configs/​wslc_network_proxy.json Updated as part of this pull request.
tests/​configs/​wslc_network_isolated.json Updated as part of this pull request.
tests/​configs/​wslc_most_specific_denied_parent.json Updated as part of this pull request.
tests/​configs/​wslc_large_output.json Updated as part of this pull request.
tests/​configs/​wslc_filesystem.json Updated as part of this pull request.
tests/​configs/​wslc_filesystem_object.json Updated as part of this pull request.
tests/​configs/​wslc_exit_code.json Updated as part of this pull request.
tests/​configs/​wslc_env_vars.json Updated as part of this pull request.
tests/​configs/​wslc_destroy_on_exit_true.json Updated as part of this pull request.
tests/​configs/​wslc_destroy_on_exit_false_rejected.json Updated as part of this pull request.
tests/​configs/​wslc_denied_masking.json Updated as part of this pull request.
tests/​configs/​wslc_denied_dotdot_alias.json Updated as part of this pull request.
tests/​configs/​wslc_custom_registry.json Updated as part of this pull request.
tests/​configs/​wslc_custom_registry_quay.json Updated as part of this pull request.
tests/​configs/​wslc_custom_registry_ghcr.json Updated as part of this pull request.
tests/​configs/​windows_sandbox_timeout.json Updated as part of this pull request.
tests/​configs/​windows_sandbox_stderr.json Updated as part of this pull request.
tests/​configs/​windows_sandbox_powershell.json Updated as part of this pull request.
tests/​configs/​windows_sandbox_powershell_env.json Updated as part of this pull request.
tests/​configs/​windows_sandbox_exit_code.json Updated as part of this pull request.
tests/​configs/​windows_sandbox_echo.json Updated as part of this pull request.
tests/​configs/​windows_sandbox_custom_timeout.json Updated as part of this pull request.
tests/​configs/​microvm_timeout.json Updated as part of this pull request.
tests/​configs/​microvm_timeout_linux.json Updated as part of this pull request.
tests/​configs/​microvm_stdlib.json Updated as part of this pull request.
tests/​configs/​microvm_stdlib_linux.json Updated as part of this pull request.
tests/​configs/​microvm_network.json Updated as part of this pull request.
tests/​configs/​microvm_network_linux.json Updated as part of this pull request.
tests/​configs/​microvm_multiline.json Updated as part of this pull request.
tests/​configs/​microvm_multiline_linux.json Updated as part of this pull request.
tests/​configs/​microvm_large_output.json Updated as part of this pull request.
tests/​configs/​microvm_large_output_linux.json Updated as part of this pull request.
tests/​configs/​microvm_hello.json Updated as part of this pull request.
tests/​configs/​microvm_hello_linux.json Updated as part of this pull request.
tests/​configs/​microvm_exit_code.json Updated as part of this pull request.
tests/​configs/​microvm_exit_code_linux.json Updated as part of this pull request.
tests/​configs/​microvm_error.json Updated as part of this pull request.
tests/​configs/​microvm_error_linux.json Updated as part of this pull request.
tests/​configs/​isolation_session_state_aware_provision_appid.json Updated as part of this pull request.
tests/​configs/​isolation_session_state_aware_provision_appid_too_long.json Updated as part of this pull request.
tests/​configs/​isolation_session_state_aware_provision_appid_empty.json Updated as part of this pull request.
tests/​configs/​isolation_session_state_aware_provision_appid_control.json Updated as part of this pull request.
tests/​configs/​isolation_session_one_shot_stray_config_rejected.json Updated as part of this pull request.
tests/​configs/​isolation_session_configid_rejected.json Updated as part of this pull request.
tests/​configs/​hyperlight_timeout.json Updated as part of this pull request.
tests/​configs/​hyperlight_pandas.json Updated as part of this pull request.
tests/​configs/​hyperlight_networking.json Updated as part of this pull request.
tests/​configs/​hyperlight_networking_blocked.json Updated as part of this pull request.
tests/​configs/​hyperlight_hello.json Updated as part of this pull request.
tests/​configs/​hyperlight_fs.json Updated as part of this pull request.
tests/​configs/​hyperlight_exit_code.json Updated as part of this pull request.
tests/​configs/​experimental_hello_processcontainer.json Updated as part of this pull request.
tests/​configs/​experimental_hello_lxc.json Updated as part of this pull request.
tests/​configs/​basic_windows_sandbox.json Updated as part of this pull request.
src/​ffi/​mxc_ffi/​src/​request.rs Updated as part of this pull request.
src/​ffi/​mxc_ffi/​Cargo.toml Updated as part of this pull request.
src/​core/​wxc_common/​src/​wire.rs Updated as part of this pull request.
src/​core/​wxc_common/​src/​state_aware_dispatch.rs Updated as part of this pull request.
src/​core/​wxc_common/​src/​models.rs Updated as part of this pull request.
src/​core/​wxc_common/​src/​diagnostic.rs Updated as part of this pull request.
src/​core/​wxc_common/​src/​config_contract_adapters/​v0_9/​state_aware_tests/​stop.rs Updated as part of this pull request.
src/​core/​wxc_common/​src/​config_contract_adapters/​v0_9/​state_aware_tests/​start.rs Updated as part of this pull request.
src/​core/​wxc_common/​src/​config_contract_adapters/​v0_9/​state_aware_tests/​mod.rs Updated as part of this pull request.
src/​core/​wxc_common/​src/​config_contract_adapters/​v0_9/​state_aware_tests/​deprovision.rs Updated as part of this pull request.
src/​core/​wxc_common/​src/​config_contract_adapters/​v0_9/​one_shot_tests/​mod.rs Updated as part of this pull request.
src/​core/​wxc_common/​src/​config_contract_adapters/​v0_9/​one_shot_tests/​isolation_session.rs Updated as part of this pull request.
src/​core/​wxc_common/​src/​config_contract_adapters/​v0_9/​one_shot_tests/​common.rs Updated as part of this pull request.
src/​core/​wxc_common/​src/​config_contract_adapters/​mod.rs Updated as part of this pull request.
src/​core/​wxc_common/​src/​config_contract_adapters/​dev/​one_shot_tests/​common.rs Updated as part of this pull request.
src/​core/​wxc_common/​src/​config_contract_adapters/​dev/​mod.rs Updated as part of this pull request.
src/​core/​wxc_common/​src/​config_contract_adapters/​dev/​common.rs Updated as part of this pull request.
src/​core/​mxc-sdk/​Cargo.toml Updated as part of this pull request.
src/​core/​mxc_engine/​src/​policy/​network.rs Updated as part of this pull request.
src/​core/​mxc_engine/​src/​policy/​exact/​v0_9.rs Updated as part of this pull request.
src/​core/​mxc_engine/​src/​policy/​exact/​v0_8.rs Updated as part of this pull request.
src/​core/​mxc_engine/​src/​policy/​exact/​v0_7.rs Updated as part of this pull request.
src/​core/​mxc_engine/​src/​policy/​exact/​v0_6.rs Updated as part of this pull request.
src/​core/​mxc_engine/​src/​policy/​exact/​mod.rs Updated as part of this pull request.
src/​core/​mxc_engine/​src/​platform.rs Updated as part of this pull request.
src/​core/​mxc_engine/​Cargo.toml Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​version_boundaries/​containment.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​version_boundaries/​compatibility.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​state_aware/​stop.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​state_aware/​start.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​state_aware/​provision/​mod.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​state_aware/​exec.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​state_aware/​deprovision.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​network.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​fixtures/​one_shot/​valid/​wslc.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​fixtures/​one_shot/​valid/​experimental.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​fixtures/​one_shot/​valid/​annotations.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​fixtures/​one_shot/​invalid/​wslc_port_out_of_range.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​fixtures/​one_shot/​invalid/​port_out_of_range.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​fixtures/​one_shot/​invalid/​isolation_session_runtime_proxy.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​fixtures/​one_shot/​invalid/​isolation_session_partial_network.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​fixtures/​one_shot/​invalid/​isolation_session_mixed_network.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​fixtures/​one_shot/​invalid/​isolation_session_missing_network.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​fixtures/​one_shot/​invalid/​isolation_session_missing_egress.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​fixtures/​one_shot/​invalid/​isolation_session_ingress_deny.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​fixtures/​one_shot/​invalid/​isolation_session_host_loopback_deny.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​fixtures/​one_shot/​invalid/​isolation_session_empty_network.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​fixtures/​one_shot/​invalid/​isolation_session_egress_deny.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​fixtures/​one_shot/​invalid/​isolation_session_egress_deny_rules.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​fixtures/​one_shot/​invalid/​isolation_session_egress_allow_rules.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​fixtures/​isolation_session_provision/​valid/​directional_network_with_app_id.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​fixtures.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​experimental.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​enums.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha/​common.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_9_0_alpha.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​state_aware/​provision/​mod.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​state_aware/​common.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​state_aware.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​wslc_provision/​valid/​minimal.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​wslc_provision/​valid/​directional_network.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​wslc_provision/​invalid/​runtime_proxy.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​wslc_provision/​invalid/​foreign_sandbox_id.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​windows_sandbox_provision/​valid/​minimal.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​windows_sandbox_provision/​invalid/​foreign_network.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​stop/​valid/​minimal.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​stop/​invalid/​unknown_field.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​start/​valid/​minimal.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​start/​invalid/​foreign_process.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​valid/​seatbelt_minimal.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​valid/​seatbelt_complete.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​valid/​proxy_url.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​valid/​minimal.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​valid/​macos_sandbox_alias.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​valid/​isolation_session_directional_network.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​valid/​experimental.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​valid/​empty_optional_objects.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​valid/​app_container_alias.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​valid/​annotations.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​unknown_root_field.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​unknown_nested_field.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​seatbelt_unknown_field.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​seatbelt_launch_method_removed.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​proxy_localhost.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​proxy_builtin.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​port_out_of_range.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​isolation_session_runtime_proxy.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​isolation_session_partial_network.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​isolation_session_mixed_network.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​isolation_session_missing_network.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​isolation_session_missing_egress.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​isolation_session_legacy_network.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​isolation_session_ingress_deny.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​isolation_session_host_loopback_deny.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​isolation_session_empty_network.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​isolation_session_egress_deny.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​isolation_session_egress_deny_rules.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​isolation_session_egress_allow_rules.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​incomplete_lxc.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​duplicate_seatbelt_alias.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​duplicate_process_container_alias.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​capability_with_comma.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​capability_permissive_learning_mode_reserved.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​one_shot/​invalid/​capability_learning_mode_logging_reserved.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​isolation_session_provision/​valid/​minimal.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​isolation_session_provision/​valid/​directional_network.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​isolation_session_provision/​valid/​directional_network_with_app_id.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​isolation_session_provision/​invalid/​missing_network.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​isolation_session_provision/​invalid/​empty_network.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​exec/​valid/​runtime_proxy.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​exec/​valid/​minimal.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​exec/​invalid/​missing_process.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​exec/​invalid/​legacy_proxy.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​deprovision/​valid/​minimal.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​fixtures/​deprovision/​invalid/​foreign_containment.json Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​experimental.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha/​common.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​tests/​v0_10_0_alpha.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​src/​published/​v0_9_0_alpha/​state_aware/​stop.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​src/​published/​v0_9_0_alpha/​state_aware/​start.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​src/​published/​v0_9_0_alpha/​state_aware/​provision/​mod.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​src/​published/​v0_9_0_alpha/​state_aware/​deprovision.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​src/​published/​mod.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​src/​dev/​state_aware/​stop.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​src/​dev/​state_aware/​start.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​src/​dev/​state_aware/​provision/​wslc.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​src/​dev/​state_aware/​provision/​windows_sandbox.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​src/​dev/​state_aware/​provision/​mod.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​src/​dev/​state_aware/​provision/​containment.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​src/​dev/​state_aware/​mod.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​src/​dev/​state_aware/​exec.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​src/​dev/​state_aware/​deprovision.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​src/​dev/​one_shot.rs Updated as part of this pull request.
src/​core/​mxc_config_contract/​src/​dev/​experimental.rs Updated as part of this pull request.
src/​backends/​wslc/​common/​src/​wsl_container_runner.rs Updated as part of this pull request.
src/​backends/​wslc/​common/​src/​state_aware.rs Updated as part of this pull request.
src/​backends/​wslc/​common/​src/​policy.rs Updated as part of this pull request.
src/​backends/​wslc/​common/​src/​daemon_protocol.rs Updated as part of this pull request.
src/​backends/​nanvix/​runner/​src/​lib.rs Updated as part of this pull request.
sdk/​node/​tests/​unit/​wire-conformance.test.ts Updated as part of this pull request.
sdk/​node/​tests/​unit/​wire-conformance-state-aware.test.ts Updated as part of this pull request.
sdk/​node/​tests/​unit/​test-helpers.ts Updated as part of this pull request.
sdk/​node/​tests/​integration/​test-helpers.ts Updated as part of this pull request.
sdk/​node/​src/​types.ts Updated as part of this pull request.
sdk/​node/​src/​index.ts Updated as part of this pull request.
sdk/​node/​src/​helper.ts Updated as part of this pull request.
sdk/​dotnet/​Microsoft.Mxc.Sdk/​SchemaVersions.cs Updated as part of this pull request.
sdk/​dotnet/​Microsoft.Mxc.Sdk/​SandboxRequest.cs Updated as part of this pull request.
sdk/​dotnet/​Microsoft.Mxc.Sdk/​MxcSandbox.cs Updated as part of this pull request.
sdk/​dotnet/​Microsoft.Mxc.Sdk.Tests/​MxcSandboxIsolationSessionE2ETests.cs Updated as part of this pull request.
sdk/​dotnet/​Microsoft.Mxc.Sdk.Sample/​Program.cs Updated as part of this pull request.
scripts/​versioning/​validate-configs.js Updated as part of this pull request.
scripts/​versioning/​config-validation-exemptions.json Updated as part of this pull request.
scripts/​versioning/​check-schema-versions.js Updated as part of this pull request.
scripts/​check-dotnet-api-parity.js Updated as part of this pull request.
schemas/​schema-version.json Updated as part of this pull request.
schemas/​dev/​mxc-config.schema.0.10.0-dev.json Updated as part of this pull request.
README.md Updated as part of this pull request.
docs/​wsl/​wslc-state-aware.md Updated as part of this pull request.
docs/​windows-sandbox/​windows-sandbox.md Updated as part of this pull request.
docs/​windows-sandbox/​windows-sandbox-reference.md Updated as part of this pull request.
docs/​telemetry/​telemetry.md Updated as part of this pull request.
docs/​linux-wsl-roadmap-june-2026.md Updated as part of this pull request.
.gitattributes Updated as part of this pull request.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread tests/scripts/run_wslc_state_aware_tests.ps1
Comment thread tests/configs/wslc_state_aware_exec_proxy.json Outdated
Comment thread tests/configs/wslc_state_aware_provision.json Outdated
Comment thread tests/configs/wslc_timeout.json Outdated
Copilot AI review requested due to automatic review settings September 17, 2026 16:51
@MGudgin
Gudge (MGudgin) force-pushed the user/gudge/version_specific_config_parsers_phase12_wslc_graduation branch from ef52be4 to 11f53b3 Compare September 17, 2026 16:51

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟡 Changes recommended

Unresolved v0.9 version-routing and contract-coverage issues remain, including a critical Windows Sandbox path leak.

Get a fresh assessment by requesting another Copilot review.

Review effort: Lite (auto)
Findings: 2 High severity · 4 Medium severity

Note

Copilot is running an experiment and ran this review at Lite.

Open (6)

Comment thread sdk/node/tests/unit/wire-conformance-state-aware.test.ts Outdated
Copilot AI review requested due to automatic review settings September 17, 2026 17:05
@MGudgin
Gudge (MGudgin) force-pushed the user/gudge/version_specific_config_parsers_phase12_wslc_graduation branch from 11f53b3 to cdc68b1 Compare September 17, 2026 17:05
@MGudgin
Gudge (MGudgin) force-pushed the user/gudge/version_specific_config_parsers_phase12_wslc_graduation branch from cdc68b1 to eb88b09 Compare September 17, 2026 17:12

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟡 Changes recommended

One or more issues must be addressed before approval.

Get a fresh assessment by requesting another Copilot review.

Review effort: Lite (auto)
Findings: 4 High severity · 1 Medium severity

Note

Copilot is running an experiment and ran this review at Lite.

Open (5)
Resolved since last review (3)

Comment thread src/ffi/mxc_ffi/src/request.rs Outdated
Comment thread tests/scripts/run_isolation_session_tests.ps1 Outdated
Copilot AI review requested due to automatic review settings September 17, 2026 17:17

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟡 Changes recommended

Unresolved critical v0.9 lifecycle/backend compatibility and additional migration/test consistency issues remain.

Get a fresh assessment by requesting another Copilot review.

Review effort: Lite (auto)
Findings: 5 High severity · 1 Medium severity

Note

Copilot is running an experiment and ran this review at Lite.

Open (6)

Copilot AI review requested due to automatic review settings September 17, 2026 17:38
@MGudgin
Gudge (MGudgin) force-pushed the user/gudge/version_specific_config_parsers_phase12_wslc_graduation branch from eb88b09 to 9a5e2bc Compare September 17, 2026 17:38

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟡 Changes recommended

Moderate issues remain in FFI containment handling and the WSLC wire-conformance oracle, with documentation nits also outstanding.

Get a fresh assessment by requesting another Copilot review.

Review effort: Lite (auto)
Findings: 5 High severity · 1 Medium severity · 1 Low severity

Note

Copilot is running an experiment and ran this review at Lite.

Open (7)

Comment thread README.md
Copilot AI review requested due to automatic review settings September 17, 2026 18:14
@MGudgin
Gudge (MGudgin) force-pushed the user/gudge/version_specific_config_parsers_phase12_wslc_graduation branch from 9a5e2bc to a92f669 Compare September 17, 2026 18:14

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🔵 Needs a closer look

Resolve the stable IsolationSession experimental-flag identity issue and update the playground’s raw-backend version.

Review effort: Lite (auto)
Findings: None

Note

Copilot is running an experiment and ran this review at Lite.

Resolved since last review (7)

@MGudgin

Copy link
Copy Markdown
Member Author

CI status on a92f6698:

  • Every GitHub Actions build, lint, unit/integration, Hyperlight, MicroVM, LXC, versioning, and language-specific CodeQL analysis job passed.
  • The aggregate GitHub Advanced Security check remains red because it reports two existing open main code-scanning alerts (23 and 25) as new at src/core/wxc/src/main.rs and src/core/wxc_common/src/state_aware_dispatch.rs.
  • The check itself notes that alerts not introduced by the PR may be detected because the change is large. Rebasing the single commit onto current origin/main did not clear the baseline classification.

No unrelated security suppression or behavior change was added to this publication PR. The remaining red check needs GitHub Advanced Security baseline/dismissal triage.

Copilot AI review requested due to automatic review settings September 18, 2026 18:10
@MGudgin
Gudge (MGudgin) force-pushed the user/gudge/version_specific_config_parsers_phase12_wslc_graduation branch from a92f669 to 94fa0c9 Compare September 18, 2026 18:10
@MGudgin
Gudge (MGudgin) force-pushed the user/gudge/version_specific_config_parsers_phase12_wslc_graduation branch from 94fa0c9 to d8cab42 Compare September 18, 2026 18:14

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🔵 Needs a closer look

It publishes an immutable cross-language contract and graduates a backend whose live runtime E2E suite was not executed.

Review effort: Balanced
Findings: 1 Low severity

Open (1)

Comment thread docs/linux-wsl-roadmap-june-2026.md Outdated
Copilot AI review requested due to automatic review settings September 18, 2026 18:15

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🔵 Needs a closer look

Publishing an immutable contract across runtime, SDK, schema, and backend boundaries warrants final human validation despite extensive coverage.

Review effort: Balanced
Findings: 2 Low severity

Open (2)

Comment thread sdk/node/tests/unit/wire-conformance.test.ts
Gudge (MGudgin) pushed a commit that referenced this pull request Sep 18, 2026
This PR updates the version-aware execution plans with the finalized non-WSLC
stack and the remaining WSLC-inclusive rebuild work.

Details

* Record the final #1184 through #1186 tips, topology, validation, and review
  status.
* Document the #1187 through #1189 base and topology problems and the required
  one-commit restack sequence.
* List the semantic and code-generation fixes that must be ported while
  preserving stable v0.9 WSLC behavior.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 075defa1-7450-47ec-a6d8-953c69d509ee
Generated-with: gpt-5.6-sol
This PR publishes the exact v0.9 configuration contract with stable
IsolationSession and WSLC support, opens v0.10 as the sole development
contract, and removes runtime dependence on the rolling v0.9 model.

Details

* Publish immutable v0.9 schema and generated TypeScript contract artifacts.
* Graduate IsolationSession and WSLC from runtime experimental authorization.
* Route configuration through exact contracts and version-specific adapters.
* Keep WSLC one-shot and lifecycle requests on the published v0.9 contract.
* Validate Node output against exact v0.10 plus the published v0.9 WSLC shape.
* Cover v0.10 ProcessContainer filesystem enumeration in fixtures and adapters.
* Align backend E2E expectations with exact parsing and policy validation.
* Move other development-backend tests and playground requests to exact v0.10.
* Protect published registry and stable-schema history from mutation.

Tests

* Rust formatting, exact-contract, adapter, WSLC, IsolationSession, and LXC
  tests passed.
* WSLC/IsolationSession feature checks and Clippy passed for the executor,
  engine, Rust SDK, and FFI.
* Node build, unit tests, and integration type-check passed.
* The playground build passed.
* All 81 versioning tests and exact codegen/parity/config gates passed; 363
  repository configs validated against five registered exact schemas.
* Both PowerShell E2E harnesses parsed successfully.
* Live IsolationSession skipped because the probe reported unavailable. Live
  WSLC provisioning was unavailable because the host lacks the required WSL
  package; the updated dry-run immutable-network policy assertion passed.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 075defa1-7450-47ec-a6d8-953c69d509ee
Generated-with: gpt-5.6-sol
Copilot AI review requested due to automatic review settings September 18, 2026 21:08
@MGudgin
Gudge (MGudgin) force-pushed the user/gudge/version_specific_config_parsers_phase12_wslc_graduation branch from d8cab42 to a174106 Compare September 18, 2026 21:08

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🔵 Needs a closer look

It publishes an immutable cross-language contract and changes backend authorization while live WSLC and IsolationSession validation was unavailable.

Review effort: Balanced
Findings: None

Resolved since last review (2)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Copilot-Instructions PR modifies Copilot instruction files (.github/copilot-instructions.md or .github/instructions/)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants