agnosai 1.1.0

Provider-agnostic AI orchestration framework
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35

//! Tool execution isolation — WASM, process, and OCI sandboxing.
//!
//! Untrusted tool code runs inside a sandbox. Two backends are implemented:
//!
//! - **WASM** (wasmtime) — memory-isolated, fuel-limited, no filesystem/network
//! - **Python subprocess** — stdin/stdout JSON protocol with timeout and kill-on-drop
//!
//! All subprocess-based sandboxes (Python, Process) strip dangerous environment
//! variables before spawning child processes. See [`SANITIZED_ENV_VARS`].

/// Environment variables removed from child processes to prevent library injection.
///
/// These are stripped from every subprocess spawned by the Python and Process sandboxes.
pub const SANITIZED_ENV_VARS: &[&str] = &[
    "LD_PRELOAD",
    "LD_LIBRARY_PATH",
    "DYLD_INSERT_LIBRARIES",
    "DYLD_LIBRARY_PATH",
];

#[cfg(feature = "kavach")]
pub mod kavach_bridge;
pub mod manager;
pub mod oci;
pub mod policy;
pub mod process;
pub mod python;
pub mod wasm;

pub use manager::{SandboxManager, SandboxManagerConfig, SandboxResult};
pub use oci::{OciSandbox, OciSandboxConfig};
pub use policy::{IsolationLevel, SandboxPolicy};
pub use process::{ProcessResult, ProcessSandbox, ProcessSandboxConfig};
pub use python::PythonSandbox;
pub use wasm::{WasmModule, WasmResult, WasmSandbox};