History

Tianyi Cui a2d0f7f411 refactor: apply repository naming contract Apply the accepted pre-release package, service, type, directory, and role renames as one repository-wide change.		2026-08-13 00:54:38 +08:00
..
sandbox	refactor: apply repository naming contract	2026-08-13 00:54:38 +08:00
sandbox-local	refactor: apply repository naming contract	2026-08-13 00:54:38 +08:00
sandbox-policy	refactor: apply repository naming contract	2026-08-13 00:54:38 +08:00
sandbox-windows-acl	refactor: apply repository naming contract	2026-08-13 00:54:38 +08:00
README.i18n.yaml	docs: anchor each subsystem page to its package group; make group READMEs thin tables	2026-08-09 01:32:39 +08:00
README.md	docs: anchor each subsystem page to its package group; make group READMEs thin tables	2026-08-09 01:32:39 +08:00
README.zh.md	docs: anchor each subsystem page to its package group; make group READMEs thin tables	2026-08-09 01:32:39 +08:00

README.md

sandbox/ — process-sandbox capability family

English | 中文

This family applies per-session confinement policy to process execution. It covers same-world subprocesses; isolated environments replace complete capability implementations instead of registering here.

Package	Role	ctx key
`sandbox/`	Defines the process-sandbox service and shared escalation vocabulary	`ctx.sandbox`
`sandbox-local/`	Provides local platform confinement backends	registers on `ctx.sandbox`
`sandbox-policy/`	Resolves durable per-session sandbox policy	`ctx.sandboxPolicy`

See the sandbox decision for the capability boundary and the filesystem integration decision for cross-family policy use.

The subsystem reference — modes and enforcement, per-call policy, wrapped-argv dialects, fail-closed errors — is docs/subsystems/sandbox.md; the boundary and the cross-family phase live in the sandbox and cross-family fs sandbox Agent Notes.