Three-layer sandboxing: 1. --append-system-prompt with SANDBOX boundary instructions 2. PROMPT.md templates include SANDBOX BOUNDARY (HARD LIMIT) section 3. Agent starts in src/ with only cloned repo visible Agents are instructed to reject absolute paths, cd .., and any file operations outside the repository. Violations cause work rejection. Co-Authored-By: Virgil <virgil@lethean.io> |
||
|---|---|---|
| .. | ||
| agentic | ||
| brain | ||
| jobrunner | ||
| lifecycle | ||
| loop | ||
| orchestrator | ||
| plugin | ||
| workspace | ||