From 340633ee75a5d208473fa6fce35f707415d40f8e Mon Sep 17 00:00:00 2001 From: Pedro Henrique Penna Date: Sat, 10 Oct 2026 17:04:41 -0300 Subject: [PATCH] doc: add the managed sandbox lifecycle to the responsibility map The component responsibility map named the NVX sandbox launcher and the aci_edge_sandboxes backends but not the NVX CLI's managed sandbox lifecycle, which #476 made serialize its transitions per state directory. Assign its state, fail-closed transitions, per-start control capability, and OpenVMM process identification to that component. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- doc/design/code-ownership-map.md | 1 + 1 file changed, 1 insertion(+) diff --git a/doc/design/code-ownership-map.md b/doc/design/code-ownership-map.md index 856145b3..dbea8436 100644 --- a/doc/design/code-ownership-map.md +++ b/doc/design/code-ownership-map.md @@ -27,6 +27,7 @@ contracts between them. | Backend CPU contracts and snapshot clocks | KVM, MSHV, and WHP backends | | Guest-visible CPU profiles: the pinned catalog, `--cpu-profile` selection, host profiles and the `auto` fallback, backend support and restore checks, and CPU fingerprints | OpenVMM CPU-profile catalog, with the shared time-ABI layer that builds each VM's effective CPUID | | Layered sandbox launch and kernel features | NVX sandbox launcher and microVM kernel configuration | +| Managed `sandbox` lifecycle of the NVX CLI: per-sandbox state, fail-closed provision, start, stop, and deprovision transitions that take effect one at a time per sandbox while `exec` runs beside them, the control capability that each start generates and hands to OpenVMM, and identification of the running OpenVMM process | NVX managed sandbox lifecycle and its control-session client | | Host shares of `run` and `sandbox`: one share attached directly or several as aggregate children, their pre-launch checks, and the `nvx_share=` tokens that place each child in the guest | NVX launcher | | Structured egress-policy files and their translation to OpenVMM egress rules | NVX launcher's egress-policy compiler | | Edge sandbox lifecycle API, request validation, backend capabilities, and the serializable contract model | NVX `aci_edge_sandboxes` crate and its data-model crate |