Module sandbox_capability 

Sandbox capabilities: what the manager mints and the agent verifies.

Lives here because both sides need identical rules, and a mismatch between minting and verification is a security bug that only shows up as “it works” until it does not.

A capability is scoped to one sandbox and one operation class. Provider ids and hostnames are guessable, so neither is authorisation.

Structs

SandboxCapabilityClaims

The claims an agent checks before doing anything.

SandboxSessionIdentity

What the agent knows about itself, established at sandbox start.

Enums

SandboxOperationClass

What a capability permits. Deliberately coarse: a class, not a method list, so adding a method cannot silently widen an already-minted capability.