OpenBox Sandbox 0.1.0

OpenBox Sandbox 0.1.0

Runs one authorized command in an isolated sandbox, behind a loopback-only mTLS
service.

Platforms: macOS arm64, Linux x86_64 · OpenShell: locked release 0.0.88, sha256-verified

Start

curl -fL -O https://github.com/OpenBox-AI/openbox-sandbox/releases/download/v0.1.0/obs-darwin-arm64
curl -fL -O https://github.com/OpenBox-AI/openbox-sandbox/releases/download/v0.1.0/SHA256SUMS
shasum -a 256 -c SHA256SUMS 2>/dev/null | grep obs-darwin-arm64
chmod +x obs-darwin-arm64 && mv obs-darwin-arm64 obs
./obs provision

Check the file before you rename it. On Linux, use obs-linux-x86_64 and
sha256sum -c SHA256SUMS.

Run modes

Command	Behavior
obs provision	Runs in this terminal. Ctrl-C drains, then stops it.
obs provision --detach	Runs in the background, in its own process group.
obs provision --systemd	Linux only. systemd restarts it after a failure.

Provisioning writes ~/.config/openbox-sandbox/agent.env, the boundary contract
for an SDK client.

Assets

Purpose	Files
Launcher	obs-darwin-arm64 obs-linux-x86_64
Service	openbox-sandbox-darwin-arm64 openbox-sandbox-linux-x86_64
Policy templates	policy-allow-network-dev.yaml policy-deny-network-dev.yaml
OpenShell images (optional)	prepared-vm-cache-darwin-arm64.tar.gz prepared-vm-cache-linux-x86_64.tar.gz
Manifest	SHA256SUMS