Module sandbox 

The OS sandbox around a task or review agent, when workflow.sandbox is os. The policy and why it is shaped this way are in docs/plans/2026-10-28-agent-sandboxes.md

Functions

argv

The program and arguments that go before the agent command, or why the sandbox cannot start

enabled

Whether the project runs its agents in the sandbox: workflow.sandbox: os in its .orch.yml or the global config. false or no setting leaves it off