sandbox-hardening

name	sandbox-hardening
description	Use when changing shell execution, filesystem writes, path permissions, network access, bubblewrap policies, worktree isolation, secret redaction, approval modes, or CI/headless execution safety.

Sandbox Hardening

Prefer layered defenses.

Steps

1. Identify the action risk.
2. Resolve permission: allow, ask, or deny.
3. Check path scope before execution.
4. Apply worktree isolation for edits.
5. Use bubblewrap on Linux when enabled.
6. Redact secrets in logs.
7. Add tests for deny and ask paths.

Sensitive defaults

Deny .env*, private keys, token caches, SSH material, and cloud secrets unless the user explicitly overrides.