feat: sandbox Lua script VMs (ADR-0027 amendment, tech-debt #25) #120

Closed

akadmin wants to merge 0 commits from feat/lua-sandbox into main

akadmin commented

2026-07-12 21:39:32 +00:00

Owner

Scene scripts are untrusted code. VMs are now created via new_sandboxed_vm:
stdlib whitelisted to MATH|STRING|TABLE|COROUTINE (base-lib dofile/loadfile
nilled), 64 MiB memory limit, and a per-tick 5M-instruction count hook so
'while true do end' disables the one script instead of hanging the fixed
tick. An engine-provided print (tagged with the entity) replaces the stdlib
one. mlua's send feature enabled (Lua: Send + Sync, ADR-0055 thread rule 1).

Roadmap item 35 (Tier 1), first sub-item.

Co-Authored-By: Claude Fable 5 noreply@anthropic.com

Scene scripts are untrusted code. VMs are now created via new_sandboxed_vm: stdlib whitelisted to MATH|STRING|TABLE|COROUTINE (base-lib dofile/loadfile nilled), 64 MiB memory limit, and a per-tick 5M-instruction count hook so 'while true do end' disables the one script instead of hanging the fixed tick. An engine-provided print (tagged with the entity) replaces the stdlib one. mlua's send feature enabled (Lua: Send + Sync, ADR-0055 thread rule 1). Roadmap item 35 (Tier 1), first sub-item. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

akadmin added 1 commit

2026-07-12 21:39:32 +00:00

feat: sandbox Lua script VMs (ADR-0027 amendment, tech-debt #25 )

CI / build (pull_request) Successful in 4m21s

Details

c7f4e1bd8f

Scene scripts are untrusted code. VMs are now created via new_sandboxed_vm:
stdlib whitelisted to MATH|STRING|TABLE|COROUTINE (base-lib dofile/loadfile
nilled), 64 MiB memory limit, and a per-tick 5M-instruction count hook so
'while true do end' disables the one script instead of hanging the fixed
tick. An engine-provided print (tagged with the entity) replaces the stdlib
one. mlua's send feature enabled (Lua: Send + Sync, ADR-0055 thread rule 1).

Roadmap item 35 (Tier 1), first sub-item.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>