10 Sandbox

10 Sandbox

Source: docs/design/10-sandbox.md

Selection (D27)

Platform	Default	Enhanced
macOS / Linux	srt	Lima (macOS) / rootless Podman (Linux)
Windows	Private WSL2 distro (enhanced-style from the start, D15)

Default srt rules

Generated from current grants: allow workdir + approved paths; deny app data; network policy; caches as configured. Rules refresh when permissions change (revoke → interrupt, D78).

Git remotes (D31)

Remote git operations run outside the sandbox via core, each time with user confirmation.

Prerequisites

Windows: one admin enable of WSL2 + reboot (Win10 19041+ / 11). Linux: may need a one-time sudo to relax user namespaces.