kevchess15/deepseek-harness
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1
deepseek-harness/packages/sandbox
History
Tianyi Cui 17f85bdbcd docs: trim CoT leakage from post-purge prose 
Remove dead design-session citations, change narration, indexical
stamps, and review-adjacent justification found by the
dsh-trim-cot-leakage recall batteries in prose that landed after the
last purge. Bilingual README pairs are re-recorded.
2026-08-22 20:35:11 +08:00
..
sandbox release(dsh): 0.1.1-rc.2 2026-08-21 19:48:58 +08:00
sandbox-local docs: purge residual chain-of-thought leakage 2026-08-22 13:10:23 +08:00
sandbox-policy release(dsh): 0.1.1-rc.2 2026-08-21 19:48:58 +08:00
sandbox-windows-acl docs: trim CoT leakage from post-purge prose 2026-08-22 20:35:11 +08:00
README.i18n.yaml docs(i18n): localize Chinese internal links 2026-08-18 19:00:37 +08:00
README.md docs: anchor each subsystem page to its package group; make group READMEs thin tables 2026-08-09 01:32:39 +08:00
README.zh.md docs(i18n): localize Chinese internal links 2026-08-18 19:00:37 +08:00

README.md

sandbox/ — process-sandbox capability family

English | 中文

This family applies per-session confinement policy to process execution. It covers same-world subprocesses; isolated environments replace complete capability implementations instead of registering here.

Package Role ctx key
sandbox/ Defines the process-sandbox service and shared escalation vocabulary ctx.sandbox
sandbox-local/ Provides local platform confinement backends registers on ctx.sandbox
sandbox-policy/ Resolves durable per-session sandbox policy ctx.sandboxPolicy

See the sandbox decision for the capability boundary and the filesystem integration decision for cross-family policy use.

The subsystem reference — modes and enforcement, per-call policy, wrapped-argv dialects, fail-closed errors — is docs/subsystems/sandbox.md; the boundary and the cross-family phase live in the sandbox and cross-family fs sandbox Agent Notes.