coulomb/sand-boxer
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add bounded stdin to owner execution
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a06def-6490-7033-8448-2eab2d12ed44
This commit is contained in:
tegwick 2026-09-04 22:30:11 +02:00
parent fd9297810c
commit b6655d8859
15 changed files with 74 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

5
docs/meta-framework.md
View file

@ -225,6 +225,11 @@ sand-boxer commits to:
workspace validation, sanitized environment, bounded duration/output, and no
host-checkout or alternate-extension fallback
Owner execution also accepts up to 1,000,000 UTF-8 bytes of `stdin_text`. It is
delivered only to the child process and excluded from results and lifecycle
events, allowing a harness to create prompt/task files inside the sandbox
without putting their content in argv or writing through the host workspace.
sand-boxer does **not** provide intent-aware egress filtering in v1.
---