II.
HarnessHardeningGuidance overview
Reference · liveharness-hardening:subprocess-sandbox
Subprocess sandbox policy guidance overview
Inspect the raw attributes, linked wiki pages, and inbound or outbound graph edges for harness-hardening:subprocess-sandbox.
Attributes
displayName
Subprocess sandbox policy guidance
guidance
Run agent subprocesses with workspace-write sandbox policy; deny network egress except to advertised tool servers.
appliesTo
agent-session
severity
recommended
Outgoing edges
hardening_guidance_applies_to1
- topic:agent-session-management·TopicAgent Session Management
Incoming edges
None.