Infrastructure · Primitives
Sandbox
Isolation boundary
Definition
Mechanism
An isolated execution environment that restricts side effects.
Invariants
- No effect crosses the isolation boundary except through a declared channel.
- Resources consumed inside are bounded independently of the enclosing system.
Risks
Failure modes
Unconstrained vector permits escape from the isolation boundary.
Resource exhaustion within the sandbox affects the enclosing system.
Caution
Escape vectors may exist in unaudited system call surfaces.
Relationships
Root pattern: builds on nothing in this library.
Used by
References
Society
Isolate agent execution with resource limits and egress controls
Active verification query
Mind
A virtualized execution
Execute external tool and observe result
Reference