hsiegeln f6b76b2d5e docs(runtime): document hardening contract and runtime override (#152) ...

Surfaces the multi-tenant container hardening contract introduced in the
prior commit so operators and integrators know what is enforced and why.

- application.yml: declare `cameleer.server.runtime.dockerruntime`
  alongside the other runtime properties (empty = auto-detect runsc).
- HOWTO.md: add the override row to the Runtime config table.
- SERVER-CAPABILITIES.md: new "Multi-Tenant Runtime Sandboxing" section
  describing the cap_drop, no-new-privileges, AppArmor, read-only rootfs,
  pids_limit, /tmp tmpfs, and runsc auto-detect contract — plus the
  on-disk state caveat that motivates issue #153.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-25 21:06:10 +02:00

.claude/rules

feat(runtime): harden tenant containers + auto-detect gVisor (#152)

2026-04-25 20:58:26 +02:00

.gitea

perf(build): faster Maven + UI + CI pipelines

2026-04-23 10:48:34 +02:00

.planning

docs(triage): close-out follow-up — all 12 parked failures resolved, 560/560 green

2026-04-21 23:45:59 +02:00

.superpowers/brainstorm

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

audit

chore: rename cameleer3 to cameleer

2026-04-15 15:28:42 +02:00

cameleer-server-app

docs(runtime): document hardening contract and runtime override (#152)

2026-04-25 21:06:10 +02:00

cameleer-server-core

fix(dirty-state): exclude live-pushed fields from deploy diff

2026-04-24 14:42:07 +02:00

deploy

fix(auth): upsert UI login user_id unprefixed (drop docker seeder workaround)

2026-04-20 18:26:03 +02:00

docs

docs(runtime): document hardening contract and runtime override (#152)

2026-04-25 21:06:10 +02:00

examples

chore: rename cameleer3 to cameleer

2026-04-15 15:28:42 +02:00

org/eclipse/elk

chore: rename cameleer3 to cameleer

2026-04-15 15:28:42 +02:00

screenshots

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

ui

Merge branch 'main' into feature/deployment-status-badge

2026-04-24 13:49:51 +02:00

.dockerignore

Add Docker build, K8s manifests, and CI/CD deploy pipeline

2026-03-12 19:01:39 +01:00

.gitattributes

Scaffold cameleer3-server project structure

2026-03-11 10:06:17 +01:00

.gitignore

chore: track .claude/rules/ and add self-maintenance instruction

2026-04-16 09:26:53 +02:00

AGENTS.md

chore(gitnexus): sync indexed symbol count

2026-04-24 09:20:25 +02:00

CLAUDE.md

chore(gitnexus): sync indexed symbol count

2026-04-24 09:20:25 +02:00

docker-compose.yml

fix(auth): upsert UI login user_id unprefixed (drop docker seeder workaround)

2026-04-20 18:26:03 +02:00

docker-entrypoint.sh

fix: import /certs/ca.pem into JVM truststore at startup

2026-04-11 11:31:26 +02:00

Dockerfile

chore(docker): full-stack docker-compose mirroring deploy/ k8s manifests

2026-04-20 15:52:24 +02:00

HOWTO.md

docs(runtime): document hardening contract and runtime override (#152)

2026-04-25 21:06:10 +02:00

openapi.json

chore: rename cameleer3 to cameleer

2026-04-15 15:28:42 +02:00

pom.xml

perf(build): faster Maven + UI + CI pipelines

2026-04-23 10:48:34 +02:00

UI_FINDINGS.md

chore: rename cameleer3 to cameleer

2026-04-15 15:28:42 +02:00

UI-CONSISTENCY-AUDIT.md

chore: rename cameleer3 to cameleer

2026-04-15 15:28:42 +02:00

Description

Observability server for Cameleer agents

26 MiB

Languages

Java 63.7%

TypeScript 28.6%

HTML 4.9%

CSS 2.7%