feat(mxc): add Windows ETW-to-OCSF audit trail - #1

Open

araza008 wants to merge 32 commits into

jamieknvidia:jamiek/mxc-driver-mainfrom

araza008:akberr/etw-to-ocsf

Commits on Aug 12, 2026

feat(driver): add MXC compute driver for Windows isolation sessions

pkhodade-NV
authored and
jamieknvidia
committed
9fbd256
wip(mxc): checkpoint hung-agent work (recon, policy_map embed, A1 wiring, demo artifacts)
jamieknvidia
committed
6f00649
test(mxc): fix lifecycle and policy unit-test compile drift
jamieknvidia
committed
6072f23
fix(mxc): downgrade missing sandbox_token to debug log
jamieknvidia
committed
c78544a
fix(mxc): keep sandbox Ready after a successful one-shot agent exec
jamieknvidia
committed
e4230b3
feat(mxc): add processContainer backend for default-deny enforcement
jamieknvidia
committed
e4aed16
refactor(driver-mxc): embed policy mapper as a module; remove standalone crate

gburachas
authored and
jamieknvidia
committed
2860a6d
feat(driver-mxc): implement lossless split_policy for proxy-delegated egress

gburachas
authored and
jamieknvidia
committed
4b63f90
feat(driver-mxc): implement Pattern-C governed-egress split through the policy seam

gburachas
authored and
jamieknvidia
committed
76957ff
fix(driver-mxc): emit MXC network.proxy as {localhost: port}

gburachas
authored and
jamieknvidia
committed
0737e99
fix(driver-mxc): serialize isolation_session stop/deprovision as unit variants

gburachas
authored and
jamieknvidia
committed
ac2a363
test(driver-mxc): add Tier-0 mapper coverage matrix with schema drift guard

gburachas
authored and
jamieknvidia
committed
0118a86
feat(driver-mxc): inject agent_env into sandbox process.env
jamieknvidia
committed
8aec2a8
test(driver-mxc): avoid unsafe env mutation in resolve_agent_env test
jamieknvidia
committed
dd764cf
fix(mxc): adapt MXC driver to current GitHub OpenShell API
jamieknvidia
committed
a374f59
feat(server): wire the MXC compute driver into the gateway on Windows
jamieknvidia
committed
df93c04
fix(driver-mxc): implement GetGatewayListenerRequirements for #2496 base
jamieknvidia
committed
9ca59af
test(driver-mxc): add probe-gated real wxc-exec test lane (no mocks)

gburachas
authored and
jamieknvidia
committed
7beadcb

Commits on Aug 20, 2026

Commits on Aug 26, 2026

feat(mxc): ETW->OCSF audit consumer + Windows OCSF JSONL parity (cp6 P1)

jamieknvidia
authored and
araza008
committed
0b6bd6a
feat(mxc): map remaining Sandboxing ETW events to OCSF

jamieknvidia
authored and
araza008
committed
7d2185e
fix(mxc): seed ETW attribution under registry lock + Device tests

jamieknvidia
authored and
araza008
committed
701d7a9
fix(mxc-etw): buffer+replay racing events and harden attribution keys

jamieknvidia
authored and
araza008
committed
0acff39
docs(mxc-etw): note cmd_line is captured raw with no privacy filtering

jamieknvidia
authored and
araza008
committed
6aa0e0d
fix(mxc-etw): open ETW trace on caller thread so start_session reports real status

jamieknvidia
authored and
araza008
committed
557faca
fix(mxc-etw): guard pending-event replay against PID recycling

jamieknvidia
authored and
araza008
committed
195caf5
fix(mxc-etw): surface unexpected ProcessTrace termination (review #4)

jamieknvidia
authored and
araza008
committed
bacca60
feat(mxc-ocsf): add ETW->OCSF audit-trail example kit; fix proxy-configured message

jamieknvidia
authored and
araza008
committed
e44669a
feat(mxc-ocsf): clearer audit report + client-safe run-ocsf-audit.ps1

jamieknvidia
authored and
araza008
committed
cd7d034

Navigation Menu

feat(mxc): add Windows ETW-to-OCSF audit trail - #1

feat(mxc): add Windows ETW-to-OCSF audit trail#1
araza008 wants to merge 32 commits into
jamieknvidia:jamiek/mxc-driver-mainfrom
araza008:akberr/etw-to-ocsf

Commits on Aug 12, 2026

feat(driver): add MXC compute driver for Windows isolation sessions

wip(mxc): checkpoint hung-agent work (recon, policy_map embed, A1 wiring, demo artifacts)

test(mxc): fix lifecycle and policy unit-test compile drift

fix(mxc): downgrade missing sandbox_token to debug log

fix(mxc): keep sandbox Ready after a successful one-shot agent exec

feat(mxc): add processContainer backend for default-deny enforcement

refactor(driver-mxc): embed policy mapper as a module; remove standalone crate

feat(driver-mxc): implement lossless split_policy for proxy-delegated egress

feat(driver-mxc): implement Pattern-C governed-egress split through the policy seam

fix(driver-mxc): emit MXC network.proxy as {localhost: port}

fix(driver-mxc): serialize isolation_session stop/deprovision as unit variants

test(driver-mxc): add Tier-0 mapper coverage matrix with schema drift guard

feat(driver-mxc): inject agent_env into sandbox process.env

test(driver-mxc): avoid unsafe env mutation in resolve_agent_env test

fix(mxc): adapt MXC driver to current GitHub OpenShell API

feat(server): wire the MXC compute driver into the gateway on Windows

fix(driver-mxc): implement GetGatewayListenerRequirements for #2496 base

test(driver-mxc): add probe-gated real wxc-exec test lane (no mocks)

Commits on Aug 20, 2026

fix(driver-mxc): address PR review feedback

chore(driver-mxc): merge main and resolve conflicts

chore(driver-mxc): integrate compiled driver registry

chore(driver-mxc): merge canonical main process

Commits on Aug 26, 2026

feat(mxc): ETW->OCSF audit consumer + Windows OCSF JSONL parity (cp6 P1)

feat(mxc): map remaining Sandboxing ETW events to OCSF

fix(mxc): seed ETW attribution under registry lock + Device tests

fix(mxc-etw): buffer+replay racing events and harden attribution keys

docs(mxc-etw): note cmd_line is captured raw with no privacy filtering

fix(mxc-etw): open ETW trace on caller thread so start_session reports real status

fix(mxc-etw): guard pending-event replay against PID recycling

fix(mxc-etw): surface unexpected ProcessTrace termination (review #4)

feat(mxc-ocsf): add ETW->OCSF audit-trail example kit; fix proxy-configured message

feat(mxc-ocsf): clearer audit report + client-safe run-ocsf-audit.ps1