Skip to content

fix(adversary): isolate sandbox agents - #35

Merged
ematipico merged 1 commit into
mainfrom
fix/sandbox-permissions
Sep 15, 2026
Merged

ematipico merged 1 commit into
mainfrom
fix/sandbox-permissions

Conversation

@ematipico

Copy link
Copy Markdown
Member

Summary

  • align the Sandbox SDK and container image on 0.12.5
  • run adversary shell and filesystem mutations as an unprivileged user
  • confine blue and purple file access and keep the source patch root-owned
  • capture agent-controlled Git state without root execution

Validation

  • pnpm test
  • pnpm check:types
  • pnpm exec biome check .
  • pnpm build

@ematipico
ematipico merged commit d73fc87 into main Sep 15, 2026
1 check passed
@ematipico
ematipico deleted the fix/sandbox-permissions branch September 15, 2026 16:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant