II.
Layer overview
Reference · livelayer:9-sandbox
Sandbox overview
Inspect the raw attributes, linked wiki pages, and inbound or outbound graph edges for layer:9-sandbox.
Attributes
displayName
Sandbox
position
9
path
surfacing
scope
Policy-enforcement perimeter around execution and side effects.
summary
The sandbox layer constrains `Execution`: filesystem allow/deny lists,
network allow/deny lists, binary allow/deny lists, environment and secret
scope, audit-log policy, and policy evaluation point (pre-call,
continuous, or post-call attestation). Coarse posture is captured by
filesystemPolicy and networkPolicy enums. Realized by `Sandbox` nodes.
responsibilities
- Enforce filesystem, network, binary, secret, and environment policy.
- Record audit evidence and policy decisions around side effects.
- Define approval, escalation, and attestation boundaries for execution.
examples
- Read-only filesystem, workspace-write mode, network-disabled mode.
- Binary allow list, secret scope, approval-required command policy.
- Container, VM, OS sandbox, or hosted policy engine.
fitNotes
Custom-agent frameworks may leave sandboxing entirely to the embedding
host. Production tools should model this layer explicitly even when users
only see a simple approval prompt.
Outgoing edges
None.
Incoming edges
documents14
- page:agent-generate-universal-agentic-stack-orientation·PageUniversal Agentic Stack Orientation
- page:agent-generate-universal-agentic-stack-builder-fit·PageBuilder and Product Fit
- page:agent-generate-universal-agentic-stack-landscape-diagram·PageUniversal Agentic Stack Landscape Diagram
- page:agent-generate-universal-agentic-stack-placement-checklist·PagePlacement Checklist
- page:agent-generate-universal-agentic-stack-worked-examples·PageWorked Examples
- page:agent-generate-universal-agentic-stack-common-confusions·PageCommon Confusions
- page:agent-generate-universal-agentic-stack-reading-paths·PageReading Paths
- page:agent-generate-universal-agentic-stack-comparison-matrix·PageComparison Matrix
- page:agent-generate-universal-agentic-stack-review-template·PageReview Template
- page:agent-generate-universal-agentic-stack-faq·PageFAQ
- page:agent-generate-universal-agentic-stack·PageUniversal Agentic Stack
- page:agent-generate-universal-agentic-stack-layers·PageUniversal Agentic Stack Layers
- page:agent-generate-universal-agentic-stack-source-map·PageUniversal Agentic Stack Source Map
- page:views-agent-stack-tower·PageAgent Stack Tower
realizes6
- sandbox:codex-read-only·SandboxCodex read-only sandbox
- sandbox:codex-workspace-write·SandboxCodex workspace-write sandbox
- sandbox:codex-danger-full-access·SandboxCodex danger-full-access sandbox
- sandbox:default-container·SandboxDefault container sandbox
- sandbox:read-only-air-gapped·SandboxRead-only air-gapped sandbox
- sandbox:permissive-developer·SandboxPermissive developer sandbox