Struct SandboxPolicy 

pub struct SandboxPolicy {
    pub allowed_paths: Vec<AllowedPath>,
    pub allow_network: bool,
    pub network_rules: Vec<NetworkRule>,
    pub allow_process_spawn: bool,
    pub env: HashMap<String, String>,
}

Available on crate feature sandbox only.

A declarative sandbox policy describing allowed operations.

Constructed via SandboxPolicyBuilder. Defaults to deny-all when no permissions are granted.

Network Access

Network access has two levels of control:

1. Binary (allow_network): When true, all network access is allowed. When false, all network is blocked. Works on all platforms.

2. Domain allowlist (network_rules): When allow_network is false but network_rules is non-empty, only the specified domains/ports are allowed. Only enforced on macOS (Seatbelt supports domain-level filtering). On Linux and Windows, non-empty network_rules with allow_network = false results in all network being blocked — the rules are ignored with a tracing::warn.

Example

use adk_sandbox::sandbox::SandboxPolicyBuilder;

// Allow only OpenAI API access
let policy = SandboxPolicyBuilder::new()
    .allow_read("/usr/lib")
    .allow_domain("api.openai.com", &[443])
    .allow_domain("cdn.openai.com", &[443])
    .env("PATH", "/usr/bin")
    .build();

assert!(!policy.allow_network); // full network is denied
assert_eq!(policy.network_rules.len(), 2); // but 2 domains are allowed

Fields

allowed_paths: Vec<AllowedPath>

Filesystem paths the process may access.

allow_network: bool

Whether the process may access the network (all domains/ports).

network_rules: Vec<NetworkRule>

Per-domain network allowlist. Only used when allow_network is false. Only enforced on macOS (Seatbelt). Linux/Windows ignore these rules and fall back to binary network control.

allow_process_spawn: bool

Whether the process may spawn child processes.

env: HashMap<String, String>

Environment variables passed to the sandboxed process.

Trait Implementations

impl Clone for SandboxPolicy

fn clone(&self) -> SandboxPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SandboxPolicy

fn deserialize<__D>( __deserializer: __D, ) -> Result<SandboxPolicy, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for SandboxPolicy

fn eq(&self, other: &SandboxPolicy) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for SandboxPolicy

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SandboxPolicy