Sandbox

Repository

Description

Turn an explicit access profile into the strongest confinement a supported host can prove.

Where it fits

Sandbox is useful on its own. Use it whenever a Go application needs to run a process with explicit filesystem, network, environment, and operating-system restrictions. The process does not need to be an agent or use any other Looprig module.

Within Looprig, Sandbox integrates with Harness and Tools. Harness can apply a sandbox profile to session-owned processes, while process-based tools use the resulting executor to enforce the permitted access at the operating-system boundary. Sandbox defines the confinement boundary; Harness decides when work may run, gates decide whether it should run, and tools describe the requested operation.

Dependencies

None.

Dependents

None.