fix(npc): normalize compiled topology hosts (#103)

fix(runtime): stabilize live admission boot path (#102)

Merge pull request #97 from open-cybernauts/codex/issue-94-contract-tests

Extend OpenEnv contract guardrails

Make mutation policy weights explicit

Merge pull request #99 from open-cybernauts/codex/issue-42-console

Wire console to real episode state

Make builder/runtime service semantics manifest-driven

fix(tests): patch _ensure_clean_reset_path in test_app fixture

test: add explicit OpenEnv contract conformance suite

Fix lint packaging and fail closed runtime paths (#93)

Merge remote-tracking branch 'origin/main' into codex/issue-77-20260308

Merge remote-tracking branch 'origin/main' into codex/issue-77-20260308

Merge remote-tracking branch 'origin/main' into codex/issue-77-20260308

fix(services): use Popen for daemon starts, remove fallbacks, dedup rsyslogd

Merge pull request #92 from open-cybernauts/fix/issue-58-validator-shell-sanitization

Enforce strict live admission defaults in managed runtime (#90)

validator: harden isolation probe shell construction

Enforce strict managed validator defaults with explicit offline opt-out

Merge pull request #87 from open-cybernauts/codex/issues-72-74-75

Merge pull request #89 from open-cybernauts/fix/issue-82-snapshot-admission

Merge origin/main into codex/issue-78-80-20260308

runtime: canonicalize snapshot store semantics and revalidate persisted snapshots

Merge pull request #85 from open-cybernauts/fix/issue-80-patchability-strict

Implement issues #72 #74 #75 env grounding and console scope

fix(validator): add structured exec results and strict patchability outcomes

validator: fail patchability on remediation/retest inconclusive

Merge remote-tracking branch 'origin/main' into codex/issue-79-81-20260308

Harden exploitability check expectations (#84)

fix(builder): enforce bug-family contracts and decouple payload wiring

fix(validator): harden evidence checks and fail unvalidated golden steps

Ground Red/Blue rewards and finding validation

Merge branch 'main' of https://github.com/open-cybernauts/open-range into codex/issue-sweep-20260308

fix(validator): harden mysql credential handling and prove lint packaging

fix(builder): enforce bug-family contracts and decouple payload wiring

fix(runner): ground manifest axis in reset inputs

fix(validator): sanitize reward grounding command construction

fix(runtime): preserve per-host service specs and role-aware routing

Harden TemplateOnlyBuilder difficulty bounds

Enforce mixed mutation bundles and fail-fast legality checks

Ground mutation-added vulns in real task paths

Remove hardcoded fallbacks, add snapshot-driven service lifecycle

Add episode CLI, synthetic data pipeline, NPC generalization, service manifest

Isolate runtime-backed snapshots across resets

Merge pull request #52 from open-cybernauts/feat/issue50-canonical-base-graph-policy

Tighten graph checks and trust-principal lint

Implement canonical base graph and mutation policy

Add NPC actions, synthetic data pipeline, CLI enhancements

Add live admission for rendered child snapshots

Merge upstream changes, resolve conflicts