Struct SandboxPolicy 

pub struct SandboxPolicy {
    pub allowed_paths: Vec<AllowedPath>,
    pub allow_network: bool,
    pub network_rules: Vec<NetworkRule>,
    pub allow_process_spawn: bool,
    pub env: HashMap<String, String>,
}

Available on crate feature sandbox only.

A declarative sandbox policy describing allowed operations.

Constructed via SandboxPolicyBuilder. Defaults to deny-all when no permissions are granted.

Network Access

Network access has two levels of control:

1. Binary (allow_network): When true, all network access is allowed. When false, all network is blocked. Works on all platforms.

2. Domain allowlist (network_rules): recorded for callers and future enforcers, but not enforced on any platform. Non-empty network_rules with allow_network = false block all network access — the rules are ignored with a tracing::warn. This fails closed.

Example

use adk_sandbox::sandbox::SandboxPolicyBuilder;

// Records the intended domains; all network stays blocked because no
// enforcer can filter by domain.
let policy = SandboxPolicyBuilder::new()
    .allow_read("/usr/lib")
    .allow_domain("api.openai.com", &[443])
    .allow_domain("cdn.openai.com", &[443])
    .env("PATH", "/usr/bin")
    .build();

assert!(!policy.allow_network); // full network is denied
assert_eq!(policy.network_rules.len(), 2); // but 2 domains are allowed

Fields

allowed_paths: Vec<AllowedPath>

Filesystem paths the process may access.

allow_network: bool

Whether the process may access the network (all domains/ports).

network_rules: Vec<NetworkRule>

Per-domain network allowlist. Not enforced on any platform: with allow_network = false these rules are ignored and all network access is blocked.

allow_process_spawn: bool

Whether the process may create child processes.

When false, replacing the process image with execve remains allowed but creating a new process is refused:

Enforcer	Mechanism
Seatbelt (macOS)	process-fork is not granted
bubblewrap (Linux)	seccomp filter failing fork, vfork, and non-thread clone (x86-64 and AArch64)
AppContainer (Windows)	Not implemented

A shell running more than one external command forks, so sh -c scripts usually need this enabled.

env: HashMap<String, String>

Environment variables passed to the sandboxed process.

Trait Implementations

impl Clone for SandboxPolicy

fn clone(&self) -> SandboxPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SandboxPolicy

fn deserialize<__D>( __deserializer: __D, ) -> Result<SandboxPolicy, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for SandboxPolicy

fn eq(&self, other: &SandboxPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for SandboxPolicy

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SandboxPolicy