Three-layer sandboxing: 1. --append-system-prompt with SANDBOX boundary instructions 2. PROMPT.md templates include SANDBOX BOUNDARY (HARD LIMIT) section 3. Agent starts in src/ with only cloned repo visible Agents are instructed to reject absolute paths, cd .., and any file operations outside the repository. Violations cause work rejection. Co-Authored-By: Virgil <virgil@lethean.io> |
||
|---|---|---|
| .. | ||
| dispatch.go | ||
| epic.go | ||
| events.go | ||
| ingest.go | ||
| plan.go | ||
| pr.go | ||
| prep.go | ||
| queue.go | ||
| resume.go | ||
| scan.go | ||
| status.go | ||