Sandbox welcomes focused changes that preserve its trust boundaries and small default footprint.
- Open an issue or design note for protocol, schema, isolation, or authentication changes.
- Keep user-facing binaries limited to
sandbox,sandboxd, andsandbox-mcpunless a new process boundary is justified. - Put security decisions in the controller/runtime, not only in CLI validation or prompt text.
- Add tests for policy bypasses, failure recovery, and boundary values.
- Run formatting, Clippy with warnings denied, all tests, and the skill validator.
- Update docs and the feature-status table without presenting roadmap work as implemented.
Use conventional commits when practical. Never commit tokens, agent transcripts, production output, database dumps, private images, or credentials.
All contributions are licensed under Apache-2.0.