You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
sandbox: with tools.bash.sandbox enabled, commands that use the network (downloading dependencies, calling a local service) now need network.connect, e.g. [443], or network.all.
Features
doctor: report whether bash runs in the sandbox (9ec02cd)
install: verify the archive's build provenance (842cb9f)
mcp: annotate read-only totems for MCP hosts (3fec9e7)
sandbox: a global sandbox no project can turn off (77afc81)
sandbox: close TCP by default under the bash sandbox (d682c47)
