> ⚠️ **Independent project**
>
> Cageforge is not affiliated with, sponsored by, or endorsed by OpenAI. This
> crate adapts sandbox boundary ideas from open-source OpenAI Codex into an
> independent library API and contains no copied Codex source.
This crate is a supporting component of the [`cageforge`](https://crates.io/crates/cageforge) crate, a cross-platform Rust sandbox for AI agents and untrusted code.
# cageforge-bwrap
`cageforge-bwrap` builds the official upstream Bubblewrap executable used as
the bundled Linux resource for Cageforge and provides the reviewed
architecture-specific bytes to `cageforge-linux`. It keeps the Bubblewrap
implementation separate from Cageforge's Apache-2.0 Rust crates.
The source snapshot is Bubblewrap `0.11.2` at commit
`1b80120ef26a28e065e67f89bfef873f13bdd317`. Its original LGPL-2.0-or-later
notices are retained under `vendor/bubblewrap/`. The standalone license text
is also available at `licenses/bubblewrap-COPYING` in this crate.
The `build-from-source` feature is the release-builder mode. On Linux it
requires a C compiler, `pkg-config`, and the development files for `libcap`.
Set `CAGEFORGE_BWRAP_SOURCE_DIR` to build from another reviewed Bubblewrap
source checkout; otherwise the pinned vendor snapshot is used. This mode is
used by Cageforge's native CI and release tooling.
The `embedded` feature supplies the prebuilt target resource selected by
`target_arch`; it does not invoke a C compiler. The supported Linux resources
are built independently for `x86_64` and `aarch64`, then included in the
published package together with their SHA-256 manifests. `cageforge-linux`
materializes and validates the selected bytes privately before using them as a
fallback for a compatible system Bubblewrap executable.
The `cageforge-linux/bundled-bubblewrap` feature enables `embedded`, so an
application does not need a local C toolchain or a separate staging step for
the bundled mode. The embedded executable still has the host's normal Linux
runtime and kernel prerequisites; embedding only removes the build-time
Bubblewrap toolchain requirement.