agent/pkg
Snider da1c45b4df feat: sandbox dispatched agents to workspace directory
Three-layer sandboxing:
1. --append-system-prompt with SANDBOX boundary instructions
2. PROMPT.md templates include SANDBOX BOUNDARY (HARD LIMIT) section
3. Agent starts in src/ with only cloned repo visible

Agents are instructed to reject absolute paths, cd .., and any
file operations outside the repository. Violations cause work rejection.

Co-Authored-By: Virgil <virgil@lethean.io>
2026-03-17 04:12:54 +00:00
..
agentic feat: sandbox dispatched agents to workspace directory 2026-03-17 04:12:54 +00:00
brain refactor: replace fmt.Errorf/os.* with go-io/go-log conventions 2026-03-16 21:48:31 +00:00
jobrunner refactor: replace fmt.Errorf/os.* with go-io/go-log conventions 2026-03-16 21:48:31 +00:00
lifecycle refactor: replace fmt.Errorf/os.* with go-io/go-log conventions 2026-03-16 21:48:31 +00:00
loop refactor: replace fmt.Errorf/os.* with go-io/go-log conventions 2026-03-16 21:48:31 +00:00
orchestrator refactor: replace fmt.Errorf/os.* with go-io/go-log conventions 2026-03-16 21:48:31 +00:00
plugin test: add Claude plugin contract verification suite 2026-03-06 16:06:05 +00:00
workspace test: add contract verification for php-devops wishlist 2026-03-06 15:30:30 +00:00