Neil dd4baa98ed fix(cloud): security review of A6: offer and save only keys the proxy swaps; no desktop keys over SSH into a cloud workspace; orcad on a cloud VM drops carried keys ...

- 'Save as personal Cloud secret' is offered, and accepted by main, only for names the egress proxy
  swaps (a shared list the control-plane test holds equal to the proxy's); anything else would sit
  on the VM in full, so main answers not_swappable.
- SSH launches into an Orca Cloud workspace (orca-* aliases or an 'orca ssh-proxy' ProxyCommand
  surfaced through ~/.ssh/config Includes) get no desktop keys.
- Defense in depth on the VM: orcad with ORCA_IS_CLOUD=1 drops a carried keyEnv.

2026-11-10 02:37:29 -08:00

..

acceptance

docs(cloud): region/size AFTER benchmarks — wake p95 5.85 s in pdx1

2026-11-10 01:45:21 -08:00

billing

feat(cloud): one overage constant (ORCA_CLOUD_OVERAGE_CENTS_PER_HOUR, $1) for billing and the control plane; workspaces show sandbox hours, not per-workspace dollars (desktop list, phone status)

2026-11-10 01:52:05 -08:00

push

test: remove 10 low-value push durability tests (#40053)

2026-11-08 17:03:42 -08:00

relay

test: remove 154 low-value tests and redundant relay checkpoints (#39814)

2026-11-08 03:06:41 -08:00

relay-edge

relay edge: host-sent keepalive answered without waking the object (#40010)

2026-11-08 15:03:20 -08:00

relay-fence-broker

test: remove 395 low-value tests (#39568)

2026-11-07 11:20:25 -08:00

sandbox-control

fix(cloud): security review of A6: offer and save only keys the proxy swaps; no desktop keys over SSH into a cloud workspace; orcad on a cloud VM drops carried keys

2026-11-10 02:37:29 -08:00