Vouch request: quocanh261997

[quocanh261997]

What do you want to work on?

I’m working on issue #3835, which gives each sandbox a stable SSH host key and exposes its public fingerprint. The key should stay the same across restarts and change when the sandbox is deleted and recreated. The implementation and tests are in PR #4027.

Why this change?

This is a critical security requirements for ClawRT, an Nvidia internal long-running agent workflow solution in which we need a reliable way to recognize the sandbox the agents are connecting to. If its SSH key changes after a restart, remembering and checking that key becomes unreliable. Keeping it stable lets ClawRT detect an unexpected change while keeping the private key away from the sandbox workload.

Checklist

• I wrote this request myself (not AI-generated)
• I have read CONTRIBUTING.md

[purp]

/vouch

[github-actions[bot]]

@quocanh261997 has been vouched by @purp.

You can now submit pull requests to OpenShell. Welcome aboard.

Please read CONTRIBUTING.md before submitting.