coulomb/sand-boxer
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Sandboxing for agentic coding facility
51 commits 1 branch 0 tags 370 KiB
Find a file
tegwick d2186e8ac8
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
Add SAND-WP-0013: bubblewrap local-exec extension 
First local, same-host, kernel-namespace-only sandbox extension --
every current self-hosted extension requires an SSH hop plus a
container runtime or VM. Also the first extension able to actually
enforce the network.default: deny every profile already declares.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-26 12:29:04 +02:00
.claude/rules docs: workplan-first agent guidance prose (CUST-WP-0055 T04) 2026-07-08 16:35:49 +02:00
.forgejo/workflows Add Forgejo CI smoke workflow (enablement template) 2026-07-08 12:37:53 +02:00
docs feat: Packer build orchestration (SAND-WP-0012) 2026-06-24 12:56:32 +02:00
e2e Finish SAND-WP-0003: wise-validator extraction workplan 2026-06-23 21:37:08 +02:00
extensions feat: Packer build orchestration (SAND-WP-0012) 2026-06-24 12:56:32 +02:00
history docs: add workplans SAND-WP-0010–0012 for remaining gaps 2026-06-24 12:47:08 +02:00
profiles chore(CORE-WP-0007): retire haskell-build VM profile 2026-07-08 12:48:04 +02:00
registry feat: cloud adapters E2B/Modal and billing export (SAND-WP-0010) 2026-06-24 12:50:19 +02:00
research docs: charter meta-framework vision, research, and SAND-WP-0002 2026-06-22 21:32:32 +02:00
scripts feat: reachability and consumer profiles (SAND-WP-0011) 2026-06-24 12:54:27 +02:00
src/sandboxer feat: Packer build orchestration (SAND-WP-0012) 2026-06-24 12:56:32 +02:00
tests feat: Packer build orchestration (SAND-WP-0012) 2026-06-24 12:56:32 +02:00
workplans Add SAND-WP-0013: bubblewrap local-exec extension 2026-07-26 12:29:04 +02:00
.custodian-brief.md chore(consistency): sync task status from DB [auto] 2026-06-24 12:57:32 +02:00
.gitignore Initial commit 2026-06-21 21:00:12 +00:00
.repo-classification.yaml feat: TTL enforcement and operational hardening (SAND-WP-0009) 2026-06-24 12:44:04 +02:00
AGENTS.md Regenerate agent instructions from state-hub templates (CUST-WP-0055 T01) 2026-07-08 14:50:36 +02:00
CLAUDE.md docs: charter meta-framework vision, research, and SAND-WP-0002 2026-06-22 21:32:32 +02:00
INTENT.md docs: workplan-first agent guidance prose (CUST-WP-0055 T04) 2026-07-08 16:35:49 +02:00
LICENSE Initial commit 2026-06-21 21:00:12 +00:00
Makefile Finish SAND-WP-0002: remote smoke, podman-compose, HTTP stub 2026-06-23 16:52:29 +02:00
pyproject.toml Finish SAND-WP-0002: remote smoke, podman-compose, HTTP stub 2026-06-23 16:52:29 +02:00
README.md Update README.md 2026-06-21 21:00:33 +00:00
SCOPE.md docs: workplan-first agent guidance prose (CUST-WP-0055 T04) 2026-07-08 16:35:49 +02:00
uv.lock Finish SAND-WP-0002: remote smoke, podman-compose, HTTP stub 2026-06-23 16:52:29 +02:00

README.md

Sandboxing for agentic coding facility