Valentin Haudiquet 5f9b2a251b docs: the ecrou specification ...

ecrou descends from ecr: the microVM runtime that survives strict snap
confinement. The founding rule (no host mounts, no namespaces, every
crossing a file or a socket) is stated with its syscall budget, sourced
from snapd's seccomp allowlist; execution model, exit-code propagation
through a private control share, kill-chain cancellation, the spike-snap
gate, and seven falsification tests round out the v1 design.

2026-10-27 21:30:13 +01:00

SPEC.md

docs: the ecrou specification

2026-10-27 21:30:13 +01:00

S

Description

Mirror of https://github.com/vhaudiquet/ecrou

344 KiB

0 Stars 1 Watchers 0 Forks

Languages

Rust 99.4%

Ruby 0.6%