Docs
Gateway service runbook
Sandboxing

Sandboxing

Scope

This page is a placeholder generated from the official source file structure.

What to verify

  • TODO: Add prerequisites and validation checklist.

Outline (from official headings)

  • What gets sandboxed
  • Modes
  • Scope
  • Workspace access
  • Custom bind mounts
  • Images + setup
  • setupCommand (one-time container setup)
  • Tool policy + escape hatches
  • Multi-agent overrides
  • Minimal enable example
  • Related docs

Further reading

  • Official source file: gateway/sandboxing.md
Sandbox vs Tool Policy vs ElevatedSecurity πŸ”’