Every commit scored for change-risk against this repo's own history, so 'elevated' means elevated here rather than on some global curve.
Needs review
48 commits sit in this repo's top risk tercile, which is 33% of the 146scored. The cut is drawn against this codebase's own history rather than a global curve, so a quiet repo still fills its top band, and here it starts at 8.9 out of 10. What pushes a commit up is size and spread together: a large change confined to one area scores below a smaller one scattered across a dozen files.
Commit categories over time, read off the subject line. Fixes carry the accent because that is the series this chart exists to show.
How this repo's commit mix shifts over time.
Ranked by change-risk, highest first. Priority is a tercile of this repo's own distribution, so a quiet repo still fills its top band.
| # | Commit | Author | When | Lines | Risk | Top driver |
|---|---|---|---|---|---|---|
| 1 | 8ebc305cfeat: implement @cellar/node SandboxAPI client | Abinash Panda | 2w ago | +4.5K -0 | 99%Elevated | more lines added than baseline |
| 2 | 423e8481feat: add sandbox gRPC APIs to Control and remote services | Abinash Pandacursorassisted | 3w ago | +3.1K -29 | 99%Elevated | more lines added than baseline |
| 3 | 077434a7chore: add Makefile and .gitignore; update Go module dependencies | Abinash Panda | 3w ago | +5.0K -2.1K | 99%Elevated | more lines added than baseline |
| 4 | bf997d49feat(sandbox): add background jobs across API, CLI, and SDKs | Abinash Panda | 2w ago | +2.6K -117 | 96%Elevated | more lines added than baseline |
| 5 | 0503f810docs: add Fumadocs documentation website | Abinash Panda | 2w ago | +2.0K -0 | 96%Elevated | more lines added than baseline |
| 6 | 3ed8fefefeat(sdk): route clients through HTTP gateway | Abinash Panda | 2w ago | +2.1K -2.9K | 96%Elevated | more lines added than baseline |
| 7 | 919f2dc0feat(egress): harden transparent proxy to E2B security model | Abinash Panda | 3w ago | +1.5K -287 | 96%Elevated | more lines added than baseline |
| 8 | bbdc4b54feat: implement Raft-based cluster management | Abinash Panda | 4w ago | +2.2K -136 | 96%Elevated | more lines added than baseline |
| 9 | 9d099842feat: setup certificate authority | Abinash Panda | 4w ago | +2.1K -0 | 96%Elevated | more lines added than baseline |
| 10 | 6f833708refactor(sdk): improve code readability and consistency | Abinash Panda | 2w ago | +1.4K -1.3K | 91%Elevated | more lines added than baseline |
| 11 | e2f9897efeat(gateway): add HTTP facade for sandbox API | Abinash Panda | 2w ago | +1.6K -2 | 91%Elevated | more lines added than baseline |
| 12 | cc9acc32feat(api): add Control node RPCs and heartbeat desired_role | Abinash Panda | 2w ago | +1.1K -61 | 91%Elevated | more lines added than baseline |
| 13 | ff50bd14feat: add SandboxAPI and API key Control protos | Abinash Panda | 2w ago | +1.0K -72 | 91%Elevated | more lines added than baseline |
| 14 | 216aded2feat: add SandboxAPI and API key Control protos | Abinash Pandacursorassisted | 2w ago | +1.0K -72 | 91%Elevated | more lines added than baseline |
| 15 | 71a31114feat: wire sandbox control plane into cellard | Abinash Pandacursorassisted | 3w ago | +1.1K -6 | 91%Elevated | more lines added than baseline |
| 16 | 6b48b5bbfeat: add sandbox scheduler and userspace egress policy | Abinash Pandacursorassisted | 3w ago | +781 -0 | 91%Elevated | more lines added than baseline |
| 17 | 06bd83f1feat(egress): add egress-gateway binary, gRPC control API, and image | Abinash Pandacursorassisted | 2w ago | +1.5K -3 | 87%Elevated | more lines added than baseline |
| 18 | 467b6521refactor(sdk): add object-oriented Go sandbox API | Abinash Panda | 2w ago | +711 -109 | 87%Elevated | more lines added than baseline |
| 19 | 4d212083feat(daemon): implement node management and local role transitions | Abinash Panda | 2w ago | +748 -33 | 87%Elevated | more lines added than baseline |
| 20 | e8a21a53feat: add Docker runsc runtime agent for sandboxes | Abinash Pandacursorassisted | 3w ago | +762 -36 | 87%Elevated | more lines added than baseline |
| 21 | b816ba67feat: add sandbox domain model and Raft persistence | Abinash Pandacursorassisted | 3w ago | +701 -24 | 87%Elevated | more lines added than baseline |
| 22 | dd316e79feat(sandbox): add blockall mode and flat network allow-list fields | Abinash Panda | 2w ago | +641 -18 | 84%Elevated | more lines added than baseline |
| 23 | 3b2517dbrefactor(egress): switch cellard to topology gateway networking | Abinash Pandacursorassisted | 2w ago | +766 -337 | 84%Elevated | more lines added than baseline |
| 24 | 2b9542c3feat: add live sandbox network policy updates | Abinash Panda | 3w ago | +782 -221 | 84%Elevated | more lines added than baseline |
| 25 | fb575f90feat: implement cellar-agent with bearer-authenticated RunCommand | Abinash Pandacursorassisted | 3w ago | +555 -0 | 84%Elevated | more lines added than baseline |
| 26 | 670b55c8feat: add cellar-agent gRPC API and build targets | Abinash Pandacursorassisted | 3w ago | +712 -12 | 84%Elevated | more lines added than baseline |
| 27 | 513c3353feat(daemon): rediscover managers and failover worker control dials | Abinash Panda | 2w ago | +413 -101 | 79%Elevated | more lines added than baseline |
| 28 | 60c95009feat(cli): enhance sandbox listing command with filtering and output options | Abinash Panda | 2w ago | +513 -16 | 79%Elevated | more lines added than baseline |
| 29 | bedb9e10feat: scaffold @cellar/node TypeScript package | Abinash Panda | 2w ago | +561 -0 | 79%Elevated | more lines added than baseline |
| 30 | 3c850d19feat: add Go client with multi-manager failover | Abinash Panda | 2w ago | +616 -0 | 79%Elevated | more lines added than baseline |
| 31 | 92f4d4fffeat: serve SandboxAPI with API key auth and leader forwarding | Abinash Panda | 2w ago | +470 -0 | 79%Elevated | more lines added than baseline |
| 32 | 9c709628feat: add Go client with multi-manager failover | Abinash Pandacursorassisted | 2w ago | +616 -0 | 79%Elevated | more lines added than baseline |
| 33 | ff0f9143feat: serve SandboxAPI with API key auth and leader forwarding | Abinash Pandacursorassisted | 2w ago | +470 -0 | 79%Elevated | more lines added than baseline |
| 34 | 29350dacfeat: inject cellar-agent into sandboxes and exec over UDS | Abinash Pandacursorassisted | 3w ago | +439 -33 | 79%Elevated | more lines added than baseline |
| 35 | bda94357docs(egress): rewrite README for newcomers and fold control into server | Abinash Panda | 2w ago | +384 -252 | 75%Elevated | more lines added than baseline |
| 36 | 6427c009feat(sdk): enhance sandbox management with new methods and readiness checks | Abinash Panda | 2w ago | +492 -72 | 75%Elevated | more lines added than baseline |
| 37 | afcd1a54feat: add Leave RPC for cluster management | Abinash Panda | 3w ago | +595 -126 | 75%Elevated | more lines added than baseline |
| 38 | 273f87bcfix: make cellard shutdown bounded and tear down local sandboxes | Abinash Pandacursorassisted | 3w ago | +481 -24 | 75%Elevated | more lines added than baseline |
| 39 | 136789f5feat: support sandbox create from a YAML file | Abinash Pandacursorassisted | 3w ago | +300 -43 | 75%Elevated | more lines added than baseline |
| 40 | 1cf4f64dfeat(grpcapi): forward heartbeats/issue to leader and advertise peers | Abinash Panda | 2w ago | +305 -28 | 71%Elevated | more lines added than baseline |
| 41 | 8fbf9e0brefactor(runtime): run sandboxes on hardened runc without guest gRPC | Abinash Panda | 2w ago | +462 -1.6K | 71%Elevated | more lines added than baseline |
| 42 | 625f815bfeat(egress): add cellard-owned /29 IPAM allocator | Abinash Pandacursorassisted | 2w ago | +344 -0 | 71%Elevated | more lines added than baseline |
| 43 | ad98c2eefeat: add Raft-backed API key storage | Abinash Panda | 2w ago | +353 -4 | 71%Elevated | more lines added than baseline |
| 44 | ee408d63feat: add Raft-backed API key storage | Abinash Pandacursorassisted | 2w ago | +353 -4 | 71%Elevated | more lines added than baseline |
| 45 | da69845afix: recreate failed sandbox containers | Abinash Pandacursorassisted | 3w ago | +288 -28 | 71%Elevated | more lines added than baseline |
| 46 | f930f089feat(install): enhance installer and documentation for macOS and Linux support | Abinash Panda | 2w ago | +339 -49 | 68%Elevated | more lines added than baseline |
| 47 | da898ec8feat: add cellar ca-cert CLI and flexible CA env loading | Abinash Panda | 2w ago | +269 -6 | 68%Elevated | more lines added than baseline |
| 48 | 254a609afeat: add cellar sandbox CLI and document usage | Abinash Pandacursorassisted | 3w ago | +348 -4 | 68%Elevated | more lines added than baseline |
| 49 | e4bcb363feat(cli): expose network allow-list, block-all, and essential-services | Abinash Panda | 2w ago | +258 -40 | 65%Typical | more lines added than baseline |
| 50 | 3183f93crefactor(egress): authenticate gateway control over TCP | Abinash Panda | 2w ago | +369 -149 | 65%Typical | more lines added than baseline |
Two views of the same model: where the cuts fall, and what commit shape lands you above them.
Every scored commit, binned on the raw 0 to 10 score rather than the percentile. Percentile ranks are uniform by construction, so that axis has no shape to draw. The dashed lines are the tercile cuts behind each row's priority pill.
The 146 most recent commits, on their own recency sample rather than the feed above: that defaults to risk-sorted, so reusing it would plot only the top tercile and call it the spread. Big and scattered is what the model penalises. Click a dot to open it.
prodioslabs/cellar has 148 commits in its history from 2 contributors, the first of them Jul 20, 2026. In the last 90 days 142 files were touched, 452 times in total, most often daemon.go. Every commit is scored for change risk from its size, spread and the history of the files it touches.
