Module environment 

Public environment namespace. Use it for data-only helpers that lower portable environment policy into core isolation contracts. Environment profile helpers layered over the core isolation contract. These builders are data-only: they produce core ExecutionEnvironment values, isolation sidecars, and network policy DTOs without starting containers, opening sockets, or configuring host firewalls.

Structs

AgentWorkspaceEnvironment

Lowered toolkit environment profile.

AgentWorkspaceEnvironmentProfile

Builder for common isolated agent workspace environments.

EgressAllowlist

Data-only builder for deterministic egress allowlists.

EgressTarget

One canonical egress target requested for an isolated environment. The value is policy intent, not proof that a runtime has enforced it.

Enums

EgressProtocol

Transport/application hint for an environment egress target. Selecting a protocol is data-only; concrete enforcement belongs to the registered isolation runtime adapter.

EnvironmentRuntime

Well-known toolkit runtime refs for common environment profiles.