History

Turtle c991a7cc79 docs: finish hierarchy rescan after rebase		2026-08-05 16:18:58 +08:00
..
sandbox	Merge remote-tracking branch 'origin/master' into fix/landlock-runner-failure-classification	2026-08-05 13:17:38 +08:00
sandbox-local	docs: finish hierarchy rescan after rebase	2026-08-05 16:18:58 +08:00
sandbox-policy	refactor(session): route construction through Session.create	2026-08-05 11:56:14 +08:00
README.i18n.yaml	docs: rescan rebased documentation hierarchy	2026-08-05 16:16:57 +08:00
README.md	docs: apply hierarchy across the corpus	2026-08-05 16:13:28 +08:00
README.zh.md	docs: rescan rebased documentation hierarchy	2026-08-05 16:16:57 +08:00

README.md

sandbox/ — process-sandbox capability family

English | 中文

This family applies per-session confinement policy to process execution. It covers same-world subprocesses; isolated environments replace complete capability implementations instead of registering here.

Package	Role	ctx key
`sandbox/`	Defines the process-sandbox service and shared escalation vocabulary	`ctx.sandbox`
`sandbox-local/`	Provides local platform confinement backends	registers on `ctx.sandbox`
`sandbox-policy/`	Resolves durable per-session sandbox policy	`ctx.sandboxPolicy`

See the sandbox decision for the capability boundary and the filesystem integration decision for cross-family policy use.