[ML] Add Sandbox2 security integration for PyTorch inference - #2873

Draft

valeriy42 wants to merge 93 commits into

elastic:mainfrom

valeriy42:enhancement/sandbox2

Commits on Oct 28, 2025

Commits on Nov 5, 2025

formatting
valeriy42
committed
b43e999
fix header
valeriy42
committed
5cd22f9

Commits on Nov 6, 2025

sandbox2 library correctly linked
valeriy42
committed
5c5a2a0
Refactor Sandbox2 policy handling in unit tests
valeriy42
committed
0fe86f5
test 1 passes without sandbox2
valeriy42
committed
9dadd42
benign model passes. policy very permissive.
valeriy42
committed
404c6b5
evil model generator
valeriy42
committed
878fadf
restrict policies.
valeriy42
committed
d4adb62
Refactor syscall definitions in CDetachedProcessSpawner_Linux
valeriy42
committed
d60ba2f
formatting
valeriy42
committed
fbc3c00
changelog
valeriy42
committed
9d5d2ba
patch SAPI cmake file to make Python3 dependency optional
valeriy42
committed
7506aab
Merge branch 'enhancement/sandbox2' of https://github.com/valeriy42/ml-cpp into enhancement/sandbox2
valeriy42
committed
6f49269

Commits on Nov 7, 2025

fix python checks on CI
valeriy42
committed
ac26ca6
Remove Sandbox2 security tests and add CDetachedProcessSpawner tests for Linux
valeriy42
committed
ec5cde2

Commits on Nov 20, 2025

Add syscall allowance for prlimit64 in sandbox policy
valeriy42
committed
03b1ee4

Commits on Nov 21, 2025

formatting
valeriy42
committed
b93dfec
adjust for arm64
valeriy42
committed
0594140

Commits on Nov 27, 2025

python integration test simulation works
valeriy42
committed
c77ebb6

Commits on Dec 9, 2025

java IT works again
valeriy42
committed
fa8f99d
formatting
valeriy42
committed
8dc9905
Fix CI build failures
valeriy42
committed
d853920

Commits on Jul 17, 2026

Commits on Jul 18, 2026

Commits on Jul 19, 2026

[ML] Fix Sandbox2 spawner allowlist, PID tracking, and termination logging
valeriy42
committed
0a56df5

Commits on Jul 21, 2026

[ML] Allow glibc futex ops needed for concurrent pytorch_inference

valeriy42
authored and
valeriy
committed
d9a856d
[ML] Disarm Sandbox2 wall-time/CPU limits for the long-lived pytorch_inference daemon

valeriy42
authored and
valeriy
committed
569f8cc
[ML] Fix clang-format violations in Sandbox2 spawner and test

valeriy42
authored and
valeriy
committed
0d89fc4
formatting
valeriy42
committed
facd362

Commits on Jul 22, 2026

Commits on Jul 23, 2026

[ML] Improve Sandbox2 production observability and logging
valeriy42
committed
786cdeb
[ML] Honour --disableSandbox kill switch in pytorch_inference spawner
valeriy42
committed
ef21959
[ML] Correct Main.cc comment about pytorch_inference sandbox routing
valeriy42
committed
63d8850
[ML] Strip --disableSandbox on non-Linux spawners
valeriy42
committed
634182f
[ML] Point Sandbox2 startup failures at sandbox_enabled kill switch
valeriy42
committed
f153159
formatting
valeriy42
committed
7c9623c

Commits on Jul 27, 2026

[ML] Fix unit test failures from spawn failure reason and seccomp test pairing
valeriy42
committed
6fcdecd

Commits on Jul 28, 2026

Merge branch 'main' of https://github.com/elastic/ml-cpp into enhancement/sandbox2
valeriy42
committed
ab46fc8

Commits on Aug 19, 2026

[ML] Relocate Sandbox2 to MlSandbox and address PR #2873 review
valeriy42
committed
3dc4a56
formatting
valeriy42
committed
3d96e50
[ML] Address Jan's PR #2873 review nits
valeriy42
committed
6f57661
formatting
valeriy42
committed
bf83cda
[ML] Fix Sandbox2 CI: set ML_SANDBOX2_EXPECT, link zlib, add Windows stub
valeriy42
committed
f0bdcf6
[ML] Fix Sandbox2 CI regressions from MlSandbox restructure
valeriy42
committed
eeb52ab
[ML] Fix Sandbox2 zlib link without touching sandbox2 ALIAS
valeriy42
committed
45c1dae

Commits on Aug 20, 2026

Commits on Sep 3, 2026

Commits on Sep 7, 2026

Commits on Sep 8, 2026

[ML] Harden Sandbox2 spawn exception-safety and enforced-coverage gate
valeriy42
committed
338e1b3
formatting
valeriy42
committed
17ff410
[ML] Fix stale CPytorchInferenceSandboxPolicy_Linux.cc cross-references
valeriy42
committed
db5b14a