mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 11:49:28 +00:00
docs/deployment.md B.1: Substrate's ateom-gvisor worker runs runsc from the release tarball named in manifests/ate-install/sandboxconfig-gvisor.yaml (gs://gvisor/releases/nightly/2026-09-02/<arch>/gvisor.tar.zstd, sha256-pinned per architecture), fetched by the atelet on the node; the node must reach it or a copied SandboxConfig must name a mirror with the same sha256. The check is the atelet's fetch line in the worker pod's logs, run by hand on the day k3s exists; labelled planned until then (design open question 3 stays open). Gates: docs only; mkdocs build --strict passed with this paragraph present in the 1.4 gate; no file a test or linter reads changed since the 1.5 gate. Co-Authored-By: Claude Fable 5.1 <[email protected]> Claude-Session: https://claude.ai/code/session_01EmM1j46qgKMh3zqD1QMwEo