Process sandbox: kernel-enforced filesystem containment for shell/exec - #188

Merged

jamiepine merged 5 commits into

mainfrom

Feb 24, 2026

Commits on Feb 24, 2026

Implement OS-level sandboxing for subprocesses using bubblewrap and sandbox-exec. Update configuration to support per-agent sandbox settings, including writable paths. Enhance documentation to refl…
jamiepine
committed
4bbdd63
Merge branch 'main' into sandboxing
jamiepine
authored
36bfea0
merge main into sandboxing, resolve AgentDeps field conflicts
jamiepine
committed
cbdb245
address review feedback: sandbox and send_file hardening
jamiepine
committed
2788ba2
fix test compilation: add sandbox field to test AgentDeps constructors
jamiepine
committed
b0ae7ae