feat(sandbox): attach Docker Compose networks and fail closed on sandbox config errors by jkyberneees · Pull Request #334 · BackendStack21/odek

feat(sandbox): treat sandbox config errors as fatal instead of falling back to host

jkyberneees

committed

6311af0

feat(sandbox): fail closed on invalid network modes with lenient escape hatch

jkyberneees

committed

9ac683b

feat(sandbox): default pids limit, init and nosuid tmpfs with effective posture surfaces

jkyberneees

committed

86284cf

refactor(sandbox): build sandbox config from one shared helper

jkyberneees

committed

4103b01

feat(sandbox): digest-pinned default image with dependabot and supply-chain checks

jkyberneees

committed

2e07bf4

feat(sandbox): attach sandbox to validated user-defined docker networks

jkyberneees

committed

884676f

feat(sandbox): resolve compose project networks via --sandbox-compose

jkyberneees

committed

183c7a2

feat(sandbox): bind network approvals to network ids and narrow sub-agent networks

jkyberneees

committed

673e7e7

feat(sandbox): tell the agent its sandbox environment and document network modes

jkyberneees

committed

3aa58ab

fix(sandbox): list compose service aliases as sandbox service DNS names

jkyberneees

and

claude

committed

e9939ac

fix(sandbox): describe attached networks instead of reporting network none

jkyberneees

and

claude

committed

7570ca0

fix(sandbox): hold container setup to the approved project network IDs

jkyberneees

and

claude

committed

a5d757a

docs(sandbox): document network flags, the agent's environment block and the pinned image

jkyberneees

and

claude

committed

2c3f065

docs(agents): run Docker-gated sandbox tests with DOCKER_HOST on Docker Desktop

jkyberneees

and

claude

committed

f3ce3d0

fix(sandbox): attach a network only when inspect returns the requested name

jkyberneees

and

claude

committed

1f4dbd5

fix(sandbox): treat image and container start failures as config errors when Docker answers

jkyberneees

and

claude

committed

28abeed

fix(sandbox): list Docker-reported network and service names as untrusted data

jkyberneees

and

claude

committed

1e2d0bc

fix(sandbox): read the default image from the embedded Dockerfile

jkyberneees

and

claude

committed

c435d50

fix(sandbox): give sandboxed sub-agents the execution-environment block

jkyberneees

and

claude

committed

5ccf777

docs(sandbox): state precisely how sub-agents narrow attached networks

jkyberneees

and

claude

committed

705241b

fix(sandbox): keep the implicit fallback for image pull failures

jkyberneees

and

claude

committed

303a349

fix(sandbox): wrap Docker-reported names as external data without an ingest

jkyberneees

and

claude

committed

c7f83a4

Navigation Menu

Repository navigation

feat(sandbox): attach Docker Compose networks and fail closed on sandbox config errors - #334

feat(sandbox): attach Docker Compose networks and fail closed on sandbox config errors#334
jkyberneees merged 22 commits into
mainfrom
feat/sandbox-networks

Commits on Oct 25, 2026

feat(sandbox): treat sandbox config errors as fatal instead of falling back to host

feat(sandbox): fail closed on invalid network modes with lenient escape hatch

feat(sandbox): default pids limit, init and nosuid tmpfs with effective posture surfaces

refactor(sandbox): build sandbox config from one shared helper

feat(sandbox): digest-pinned default image with dependabot and supply-chain checks

feat(sandbox): attach sandbox to validated user-defined docker networks

feat(sandbox): resolve compose project networks via --sandbox-compose

feat(sandbox): bind network approvals to network ids and narrow sub-agent networks

feat(sandbox): tell the agent its sandbox environment and document network modes

fix(sandbox): list compose service aliases as sandbox service DNS names

fix(sandbox): describe attached networks instead of reporting network none

fix(sandbox): hold container setup to the approved project network IDs

docs(sandbox): document network flags, the agent's environment block and the pinned image

docs(agents): run Docker-gated sandbox tests with DOCKER_HOST on Docker Desktop

fix(sandbox): attach a network only when inspect returns the requested name

fix(sandbox): treat image and container start failures as config errors when Docker answers

fix(sandbox): list Docker-reported network and service names as untrusted data

fix(sandbox): read the default image from the embedded Dockerfile

fix(sandbox): give sandboxed sub-agents the execution-environment block

docs(sandbox): state precisely how sub-agents narrow attached networks

fix(sandbox): keep the implicit fallback for image pull failures

fix(sandbox): wrap Docker-reported names as external data without an ingest