doc·config
Agent Note: The subprocess sandbox — confinement seam, native runners, escalation, and per-session modes
Path: .agents/notes/implemented/feature/2026-07-06-sandbox.mdModified: 9/2/2026Created: 7/6/2026
Location
self-organizing-library/.agents/notes/implemented/feature
Content
Loading content...
Cross-References
Agent Note: Web capability seam - stable tools over multiple providerslinkAgent Note: Web capability seam - stable tools over multiple providerslinkAgent Note: isolate bwrap from the host PID namespacelinkAgent Note: The approval seam — one-shot permission decisions over a waterfall of answererslinkAgent Note: The approval seam — one-shot permission decisions over a waterfall of answererslinkAgent Note: The approval seam — one-shot permission decisions over a waterfall of answererslinkAgent Note: 子进程沙箱——约束 seam、原生 runner、升级机制与按会话模式linkacp-agent examplelinkacp-agent examplelinkAgent Note: In-repository Landlock releaselinkAgent Note: Current sandbox policy contextlinkAgent Note: In-process subagent policy inheritance — the child starts under the parent's sandbox overridelinkAgent Note: The approval seam — one-shot permission decisions over a waterfall of answererslinkAgent Note: Cross-family file sandbox — one policy home, a sandboxed fs provider, and fs escalation paritylinkAgent Note: Evaluate landstrip before building a Windows sandbox launcherlinkAgent Note: Current sandbox policy contextlinkAgent Note: Cross-family file sandbox — one policy home, a sandboxed fs provider, and fs escalation paritylinkAgent Note: Windows sandbox rung: raw ACL restricted tokens over mxc and AppContainerlinkAgent Note: isolate bwrap from the host PID namespacelinkAgent Note: Cross-family file sandbox — one policy home, a sandboxed fs provider, and fs escalation paritylinkAgent Note: Capability seams — Service Definition / Service Provider / Consumer roleslinkBash ExecutorlinkAgent Note: The approval seam — one-shot permission decisions over a waterfall of answererslinkAgent Note: Event-sourced sessions with derived message historylinkAgent Note: Remove synthetic turns for log-only eventslinkAgent Note: Interception extension points — the typed-Decision surface a hook programs againstlinkAgent Note: 子进程沙箱——约束 seam、原生 runner、升级机制与按会话模式linkAgent Note: Cross-family file sandbox — one policy home, a sandboxed fs provider, and fs escalation paritylinkAgent Note: Cross-family file sandbox — one policy home, a sandboxed fs provider, and fs escalation paritylinkAgent Note: Windows sandbox rung: raw ACL restricted tokens over mxc and AppContainerlinkAgent Note: In-repository Landlock releaselinkAgent Note: Evaluate landstrip before building a Windows sandbox launcherlinkAgent Note: Evaluate landstrip before building a Windows sandbox launcherlinkPermission PresetslinkBash Executorlink@deepseek-ai/dsh-permission-presetslink@deepseek-ai/dsh-user-approvallinksandbox/ — process-sandbox capability familylinksandbox/ — process-sandbox capability familylink@deepseek-ai/dsh-sandbox-locallinkdsh-sandbox-policy — the sandbox policy home (ctx.sandboxPolicy)link@deepseek-ai/dsh-sandboxlink@deepseek-ai/dsh-tool-bashlink@deepseek-ai/dsh-tool-bashlink
52e04b734e1bfce5