| name | sandbox-hardening |
| description | Use when changing shell execution, filesystem writes, path permissions, network access, bubblewrap policies, worktree isolation, secret redaction, approval modes, or CI/headless execution safety. |
Sandbox Hardening
Prefer layered defenses.
Steps
- Identify the action risk.
- Resolve permission: allow, ask, or deny.
- Check path scope before execution.
- Apply worktree isolation for edits.
- Use bubblewrap on Linux when enabled.
- Redact secrets in logs.
- Add tests for deny and ask paths.
Sensitive defaults
Deny .env*, private keys, token caches, SSH material, and cloud secrets unless the user explicitly overrides.