packages/sandbox/README.md

# sandbox/ — process-sandbox capability family

English | [中文](README.zh.md)

This family applies per-session confinement policy to process execution. It covers same-world subprocesses; isolated environments replace complete capability implementations instead of registering here.

| Package | Role | ctx key |
|---|---|---|
| [`sandbox/`](sandbox/README.md) | Defines the process-sandbox service and shared escalation vocabulary | `ctx.sandbox` |
| [`sandbox-local/`](sandbox-local/README.md) | Provides local platform confinement backends | registers on `ctx.sandbox` |
| [`sandbox-policy/`](sandbox-policy/README.md) | Resolves durable per-session sandbox policy | `ctx.sandboxPolicy` |

See the [sandbox decision](../../.agents/notes/implemented/feature/2026-07-06-sandbox.md) for the capability boundary and the [filesystem integration decision](../../.agents/notes/implemented/feature/2026-07-14-cross-family-fs-sandbox.md) for cross-family policy use.

The subsystem reference — modes and enforcement, per-call policy, wrapped-argv dialects, fail-closed errors — is [docs/subsystems/sandbox.md](../../docs/subsystems/sandbox.md); the boundary and the cross-family phase live in the [sandbox](../../.agents/notes/implemented/feature/2026-07-06-sandbox.md) and [cross-family fs sandbox](../../.agents/notes/implemented/feature/2026-07-14-cross-family-fs-sandbox.md) Agent Notes.
feat(sandbox): the confinement seam and the per-platform native runner chains 2026-07-09 15:42:37 +08:00			`# sandbox/ — process-sandbox capability family`

docs: translate remaining READMEs 2026-07-26 05:03:53 +08:00			`English \| [中文](README.zh.md)`

docs: apply hierarchy across the corpus 2026-08-04 00:54:19 +08:00			`This family applies per-session confinement policy to process execution. It covers same-world subprocesses; isolated environments replace complete capability implementations instead of registering here.`
feat(sandbox): the confinement seam and the per-platform native runner chains 2026-07-09 15:42:37 +08:00
			`\| Package \| Role \| ctx key \|`
			`\|---\|---\|---\|`
docs: apply hierarchy across the corpus 2026-08-04 00:54:19 +08:00			\| [`sandbox/`](sandbox/README.md) \| Defines the process-sandbox service and shared escalation vocabulary \| `ctx.sandbox` \|
			\| [`sandbox-local/`](sandbox-local/README.md) \| Provides local platform confinement backends \| registers on `ctx.sandbox` \|
			\| [`sandbox-policy/`](sandbox-policy/README.md) \| Resolves durable per-session sandbox policy \| `ctx.sandboxPolicy` \|
feat(sandbox): the confinement seam and the per-platform native runner chains 2026-07-09 15:42:37 +08:00
docs: apply hierarchy across the corpus 2026-08-04 00:54:19 +08:00			`See the [sandbox decision](../../.agents/notes/implemented/feature/2026-07-06-sandbox.md) for the capability boundary and the [filesystem integration decision](../../.agents/notes/implemented/feature/2026-07-14-cross-family-fs-sandbox.md) for cross-family policy use.`
docs: anchor each subsystem page to its package group; make group READMEs thin tables 2026-08-02 05:54:15 +08:00
			`The subsystem reference — modes and enforcement, per-call policy, wrapped-argv dialects, fail-closed errors — is [docs/subsystems/sandbox.md](../../docs/subsystems/sandbox.md); the boundary and the cross-family phase live in the [sandbox](../../.agents/notes/implemented/feature/2026-07-06-sandbox.md) and [cross-family fs sandbox](../../.agents/notes/implemented/feature/2026-07-14-cross-family-fs-sandbox.md) Agent Notes.`