Expand description
Sandboxed execution for untrusted WebAssembly.
Boxwren runs a guest inside Wasmtime with deny-by-default limits.
Reuse an Engine across runs. Each RunRequest gets its own store,
fuel budget, memory cap, and wall-clock deadline.
Re-exports§
pub use hooks::PolicyDeny;pub use hooks::Preflight;
Modules§
- hooks
- Optional admission hooks. Policy belongs to Keywarden; Boxwren only asks whether a run may start.
Structs§
- DirGrant
- Engine
- Process-wide Wasmtime engine. Reuse it across runs.
- EnvGrant
- Event
- Grants
- What this run may touch. Empty means deny.
- Kill
Handle - Stops one run. Other runs on the same engine keep their own deadlines.
- Limits
- Resource caps for a single run. Defaults deny the guest room to run away, and grant it no filesystem, network, or environment access.
- NetGrant
- A network destination the guest may reach.
- Report
- Outcome of one run. Stable as JSON schema version 1.
- RunRequest
- One execution of untrusted code.
Enums§
- Decision
- Entry
- What to invoke after the module is instantiated.
- Error
- Failures of the embedder’s request, before a guest report exists.
- Event
Kind - NetTarget
- Status