Skip to content

Navigation Menu

Appearance settings

View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Search code, repositories, users, issues, pull requests...

Search

Clear

Search syntax tips

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches

Use saved searches to filter your results more quickly

Name

Query

To see all available qualifiers, see our documentation.

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

rivet-dev / secure-exec Public

Notifications You must be signed in to change notification settings
Fork 17
Star 532

Code
Issues 1
Pull requests 2
Actions
Projects
Security
Insights

Additional navigation options

Code
Issues
Pull requests
Actions
Projects
Security
Insights

feat: V8 process isolation (part 1)#19

Merged

NathanFlurry merged 142 commits intomainrivet-dev/secure-exec:mainfrom

nathan/v8-process-isolation-pt1rivet-dev/secure-exec:nathan/v8-process-isolation-pt1Copy head branch name to clipboard

Mar 20, 2026

Conversation Commits142 (142)Checks Files changed

Merged

feat: V8 process isolation (part 1)#19
NathanFlurry merged 142 commits intomainfrom
nathan/v8-process-isolation-pt1

Commits

Commits on Mar 20, 2026

feat: US-001 - Scaffold Rust crate with dependencies and module stubs
NathanFlurry
committed
chore: update progress for US-001
NathanFlurry
committed
feat: US-002 - Define IPC message types as Rust structs with serde
NathanFlurry
committed
chore: update progress for US-002
NathanFlurry
committed
feat: US-003 - Implement length-prefixed MessagePack framing
NathanFlurry
committed
chore: update progress for US-003
NathanFlurry
committed
feat: US-004 - Implement V8 platform init and isolate lifecycle
NathanFlurry
committed
chore: update progress for US-004
NathanFlurry
committed
feat: US-005 - Implement UDS listener with socket path security
NathanFlurry
committed
chore: update progress for US-005
NathanFlurry
committed
feat: US-006 - Implement connection authentication handshake
NathanFlurry
committed
chore: update progress for US-006
NathanFlurry
committed
feat: US-007 - Implement session management (create/destroy)
NathanFlurry
committed
chore: update progress for US-007
NathanFlurry
committed
feat: US-008 - Implement InjectGlobals and V8 context hardening
NathanFlurry
committed
chore: update progress for US-008
NathanFlurry
committed
feat: US-009 - Implement sync-blocking bridge call host functions
NathanFlurry
committed
chore: update progress for US-009
NathanFlurry
committed
feat: US-010 - Implement async promise-returning bridge calls
NathanFlurry
committed
chore: update progress for US-010
NathanFlurry
committed
feat: US-011 - Implement CJS script compilation and execution
NathanFlurry
committed
chore: update progress for US-011
NathanFlurry
committed
feat: US-012 - Implement ESM module loading with ResolveModuleCallback
NathanFlurry
committed
chore: update progress for US-012
NathanFlurry
committed
feat: US-013 - Implement session event loop
NathanFlurry
committed
feat: US-014 - Implement streaming event dispatch (child process, HTTP)
NathanFlurry
committed
chore: update progress for US-014
NathanFlurry
committed
feat: US-015 - Implement timeout enforcement with timer thread
NathanFlurry
committed
chore: update progress for US-015
NathanFlurry
committed
feat: US-016 - Implement structured error serialization from TryCatch
NathanFlurry
committed
chore: update progress for US-016
NathanFlurry
committed
feat: US-017 - Implement FD hygiene in Rust process
NathanFlurry
committed
chore: update progress for US-017
NathanFlurry
committed
feat: US-018 - Scaffold @secure-exec/v8 npm package
NathanFlurry
committed
chore: update progress for US-018
NathanFlurry
committed
feat: US-019 - Implement JS-side IPC client with MessagePack framing
NathanFlurry
committed
chore: update progress for US-019
NathanFlurry
committed
feat: US-020 - Implement JS-side process spawning and lifecycle
NathanFlurry
committed
chore: update progress for US-020
NathanFlurry
committed
feat: US-021 - Implement JS-side session abstraction
NathanFlurry
committed
chore: update progress for US-021
NathanFlurry
committed
feat: US-022 - Update NodeExecutionDriver to use @secure-exec/v8
NathanFlurry
committed
chore: update progress for US-022
NathanFlurry
committed
feat: US-023 - Update bridge-contract.ts to remove ivm.Reference types
NathanFlurry
committed
chore: update progress for US-023
NathanFlurry
committed
feat: US-025 - Remove base64 encoding for binary transfers
NathanFlurry
committed
chore: update progress for US-025
NathanFlurry
committed
feat: US-026 - Set up platform-specific npm packages for prebuilt binaries
NathanFlurry
committed
chore: update progress for US-026
NathanFlurry
committed
feat: US-027 - Add Rust build to CI matrix

NathanFlurry
and
claude
committed
chore: update progress for US-027

NathanFlurry
and
claude
committed
feat: US-028 - Remove isolated-vm dependency

NathanFlurry
and
claude
committed
chore: update progress for US-028

NathanFlurry
and
claude
committed
feat: US-029 - Add integration tests for full IPC round-trip

NathanFlurry
and
claude
committed
chore: update progress for US-029

NathanFlurry
and
claude
committed
feat: US-030 - Add crash isolation tests

NathanFlurry
and
claude
committed
chore: update progress for US-030

NathanFlurry
and
claude
committed
feat: US-031 - Add IPC security tests

NathanFlurry
and
claude
committed
chore: update progress for US-031

NathanFlurry
and
claude
committed
feat: US-032 - Update security model documentation
NathanFlurry
committed
chore: update progress for US-032
NathanFlurry
committed
feat: US-033 - Run existing test suite against new V8 runtime
NathanFlurry
committed
chore: update progress for US-033
NathanFlurry
committed
feat: US-034 - Add V8 ValueSerializer/ValueDeserializer wrappers in bridge.rs

NathanFlurry
and
claude
committed
chore: update progress for US-034

NathanFlurry
and
claude
committed
feat: US-035 - Add binary header encoder/decoder module in Rust

NathanFlurry
and
claude
committed
chore: update progress for US-035

NathanFlurry
and
claude
committed
feat: US-036 - Add binary header encoder/decoder module in TypeScript
NathanFlurry
committed
chore: update progress for US-036
NathanFlurry
committed
feat: US-037 - Switch IPC pipeline to binary header + V8 serialization
NathanFlurry
committed
feat: US-038 - Eliminate ChannelMessageReader re-serialization

NathanFlurry
and
claude
committed
chore: update progress for US-038

NathanFlurry
and
claude
committed
feat: US-039 - Remove MessagePack dependencies and dead code
NathanFlurry
committed
chore: update progress for US-039
NathanFlurry
committed
feat: US-040 - Verify all tests pass with new serialization pipeline

NathanFlurry
and
claude
committed
chore: update progress for US-040

NathanFlurry
and
claude
committed
feat: US-041 - Add V8 code caching for bridge code compilation

NathanFlurry
and
claude
committed
chore: update progress for US-041

NathanFlurry
and
claude
committed
feat: US-042 - Cache bridge code on Rust side to skip resending over IPC

NathanFlurry
and
claude
committed
chore: update progress for US-042
NathanFlurry
committed
feat: US-043 - Improve IPC client buffer management

NathanFlurry
and
claude
committed
chore: update progress for US-043

NathanFlurry
and
claude
committed
feat: US-044 - Replace accept loop polling with poll(2)
NathanFlurry
committed
chore: update progress for US-044
NathanFlurry
committed
feat: US-045 - Remove JSON double-serialization in bridge handlers

NathanFlurry
and
claude
committed
chore: update progress for US-045

NathanFlurry
and
claude
committed
feat: US-046 - Reduce SharedWriter mutex contention with per-session buffering

NathanFlurry
and
claude
committed
chore: update progress for US-046

NathanFlurry
and
claude
committed
feat: US-047 - Batch module resolution to reduce IPC round-trips

NathanFlurry
and
claude
committed
chore: update progress for US-047

NathanFlurry
and
claude
committed
feat: US-048 - Pre-allocate V8 serialization buffers per session
NathanFlurry
committed
chore: update progress for US-048
NathanFlurry
committed
feat: US-049 - Add v8Runtime option to createNodeRuntimeDriverFactory

NathanFlurry
and
claude
committed
chore: update progress for US-049

NathanFlurry
and
claude
committed
feat: US-050 - Add process isolation integration tests
NathanFlurry
committed
chore: update progress for US-050
NathanFlurry
committed
feat: US-051 - Add process isolation documentation page

NathanFlurry
and
claude
committed
chore: update progress for US-051

NathanFlurry
and
claude
committed
feat: US-052 - Add ExternalReferences and snapshot creation/restore functions

NathanFlurry
and
claude
committed
chore: update progress for US-052

NathanFlurry
and
claude
committed
feat: US-053 - Add thread-safe SnapshotCache with LRU eviction

NathanFlurry
and
claude
committed
chore: update progress for US-053

NathanFlurry
and
claude
committed
feat: US-054 - Add WarmSnapshot IPC message type

NathanFlurry
and
claude
committed
chore: update progress for US-054

NathanFlurry
and
claude
committed
feat: US-055 - Wire SnapshotCache into session thread and connection handler

NathanFlurry
and
claude
committed
chore: update progress for US-055

NathanFlurry
and
claude
committed
feat: US-056 - Add eager snapshot warm-up on module load

NathanFlurry
and
claude
committed
chore: update progress for US-056

NathanFlurry
and
claude
committed
feat: US-057 - Add snapshot security and integration tests

NathanFlurry
and
claude
committed
chore: update progress for US-057

NathanFlurry
and
claude
committed
feat: US-058 - Record context snapshot benchmark baseline (before)

NathanFlurry
and
claude
committed
feat: US-059 - Fix setupFsFacade to use getter-based delegation

NathanFlurry
and
claude
committed
chore: update progress for US-059

NathanFlurry
and
claude
committed
feat: US-060 - Defer config-dependent bridge setup to post-restore init

NathanFlurry
and
claude
committed
chore: update progress for US-060

NathanFlurry
and
claude
committed
feat: US-069 - Fix IPC binary frame length guards and fnv1aHash (TypeScript)

NathanFlurry
and
claude
committed
feat: US-070 - Fix IPC binary frame length guards (Rust)

NathanFlurry
and
claude
committed
feat: US-071 - Add bounded IPC channels with backpressure

NathanFlurry
and
claude
committed
chore: update progress for US-071

NathanFlurry
and
claude
committed
feat: US-072 - Fix auth token comparison and socket directory security

NathanFlurry
and
claude
committed
chore: update progress for US-072

NathanFlurry
and
claude
committed
feat: US-073 - Fix call_id overflow and accept error handling
NathanFlurry
committed
chore: update progress for US-059
NathanFlurry
committed
feat: US-061 - Split composeBridgeCode into static and post-restore parts
NathanFlurry
committed
chore: update progress for US-061
NathanFlurry
committed
feat: US-062 - Add stub bridge context and registration for snapshot creation

NathanFlurry
and
claude
committed
chore: update progress for US-062

NathanFlurry
and
claude
committed
feat: US-063 - Implement context snapshot creation with fully-initialized bridge

NathanFlurry
and
claude
committed
chore: update progress for US-063

NathanFlurry
and
claude
committed
feat: US-064 - Implement context restore with bridge function replacement

NathanFlurry
and
claude
committed
chore: update progress for US-064

NathanFlurry
and
claude
committed
feat: US-065 - Wire post-restore init script through IPC

NathanFlurry
and
claude
committed
chore: update progress for US-065

NathanFlurry
and
claude
committed
feat: US-066 - Add context snapshot tests

NathanFlurry
and
claude
committed
chore: update progress for US-066

NathanFlurry
and
claude
committed
feat: US-067 - Verify context snapshot benchmark improvement (after)

NathanFlurry
and
claude
committed
feat: Docker build linux-x64 + release script platform package support
NathanFlurry
committed
release: v0.1.1-rc.1
NathanFlurry
committed
fix: use --no-frozen-lockfile in release workflow for optional platform deps
NathanFlurry
committed
fix: rename postinstall.js to .cjs for ESM package compat
NathanFlurry
committed
fix: add default export condition for CJS resolution compat
NathanFlurry
committed
release: v0.1.1-rc.2
NathanFlurry
committed

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.