sand-boxer/registry/capabilities/execution.sandbox-provision.md

id	name	summary	owner	status	domain	tags	maturity	external_evidence	discovery	availability	relations	evidence	consumer_guidance
capability.execution.sandbox-provision	Sandbox establishment and lifecycle	Profiles, extensions, provision, checkpoints, TTL teardown and telemetry.	sand-boxer	draft	infotech	sandbox isolation provision e2e agentic execution profile security netkingdom framework-reuse	discovery availability current target confidence rationale D5 D6 high Charter (INTENT.md), meta-framework spec, extension SDK, integration docs, and research synthesis. Capability indexed in registry/. current target confidence rationale A5 A5 high Source interface assessed 2026-10-14: Profiles, extensions, provision, checkpoints, TTL teardown and telemetry. Availability describes the delivery form, not production acceptance. Backend-specific guarantees; a created sandbox alone proves no credential isolation.	completeness reliability level name confidence basis satisfied_expectations broken_expectations out_of_scope_expectations C5 Mature high scope_vs_intent_and_consumer_expectations profile-based create/destroy/snapshot/restore via CLI TTL extend and expire/reap (SAND-WP-0009) E2B and Modal cloud adapters with BYOK (SAND-WP-0010) State Hub lifecycle events on transitions wise-validator and the-custodian migration arc complete extension SDK with compose-ssh, vm-packer attach, saas-stub, e2b, modal sandboxer01 dedicated host not live (CoulombCore interim) agent harness and tool orchestration (glas-harness) e2e test semantics (wise-validator) level confidence basis R0 low No longitudinal reliability assessment available.	intent includes excludes use_cases Profiles, extensions, provision, checkpoints, TTL teardown and telemetry Profiles, extensions, provision, checkpoints, TTL teardown and telemetry Backend-specific guarantees; a created sandbox alone proves no credential isolation U11: Agent executes an attributable bounded task and supplies supervision evidence U14: Framework adopter validates and reuses selected contracts, tools and reference compositions	current_level target_level current_artifacts consumption_modes A5 A5 SCOPE.md README.md containerized service CLI	related_to capability.security.iam-tooling-suite	documentation SCOPE.md README.md	recommended_for not_recommended_for known_limitations Agent executes an attributable bounded task and supplies supervision evidence Framework adopter validates and reuses selected contracts, tools and reference compositions Backend-specific guarantees; a created sandbox alone proves no credential isolation Backend-specific guarantees; a created sandbox alone proves no credential isolation 2026-10-14 architecture review estimates operational maturity separately; a registry entry does not authorize execution or establish deployment.

Sandbox establishment and lifecycle

Profiles, extensions, provision, checkpoints, TTL teardown and telemetry.

Reuse boundary

Backend-specific guarantees; a created sandbox alone proves no credential isolation.

Supported use cases

• U11: Agent executes an attributable bounded task and supplies supervision evidence
• U14: Framework adopter validates and reuses selected contracts, tools and reference compositions

Evidence and integration

• SCOPE.md
• README.md

Assessment: CUST-WP-0081, 2026-10-14. Relations identify interfaces to compose; they do not certify native integration. Existing external evidence levels are retained where present. New entries use conservative C1/R0 until consumer assessment exists.