Skip to main content

noether_engine/executor/
isolation.rs

1//! Re-export of the [`noether_isolation`] crate.
2//!
3//! The isolation primitives used to live here. They were extracted
4//! into their own crate in v0.7.1 so downstream consumers that want
5//! the sandbox primitive without pulling in all of `noether-engine`
6//! (agentspec's trust-enforcement path, the standalone
7//! `noether-sandbox` binary, future language bindings) can depend on
8//! `noether-isolation` directly.
9//!
10//! Existing callers that reach through `noether_engine::executor::isolation`
11//! keep working via this re-export — nothing here is new API, only a
12//! new location. See the [`noether_isolation`] crate docs for the
13//! authoritative source.
14
15pub use noether_isolation::{
16    build_bwrap_command, find_bwrap, IsolationBackend, IsolationError, IsolationPolicy, RoBind,
17    NOBODY_GID, NOBODY_UID, TRUSTED_BWRAP_PATHS,
18};