[ML] Add Sandbox2 security integration for PyTorch inference#2873

Open

valeriy42 wants to merge 54 commits into

elastic:mainfrom

valeriy42:enhancement/sandbox2

Commits on Nov 5, 2025

Commits on Nov 6, 2025

Commits on Nov 7, 2025

Commits on Nov 20, 2025

Add syscall allowance for prlimit64 in sandbox policy
valeriy42
committed

Commits on Nov 21, 2025

Commits on Nov 27, 2025

python integration test simulation works
valeriy42
committed

Commits on Dec 9, 2025

Commits on Jul 18, 2026

[ML] Add Sandbox2 diagnostics for pytorch_inference pipe-visibility failure
valeriy42
committed
[ML] Fix diagnostics: stop redirecting the controller's stderr
valeriy42
committed
[ML] Log Sandbox2 AwaitResult for pytorch_inference diagnosis
valeriy42
committed
[ML] TEMP: narrow multi-node ES ITs to *PyTorchModelIT for faster Sandbox2 debugging
valeriy42
committed
[ML] TEMP: force minimal x86_64 PR pipeline for Sandbox2 debugging
valeriy42
committed
[ML] Allow clone3 by number so pytorch_inference threads on CI
valeriy42
committed
[ML] Remove Sandbox2 debugging scaffolding and restore full CI
valeriy42
committed

Commits on Jul 19, 2026

[ML] Fix Sandbox2 spawner allowlist, PID tracking, and termination logging
valeriy42
committed

Commits on Jul 21, 2026

[ML] Allow glibc futex ops needed for concurrent pytorch_inference

valeriy42
authored and
valeriy
committed
[ML] Disarm Sandbox2 wall-time/CPU limits for the long-lived pytorch_inference daemon

valeriy42
authored and
valeriy
committed
[ML] Fix clang-format violations in Sandbox2 spawner and test

valeriy42
authored and
valeriy
committed
formatting
valeriy42
committed