Module sandbox 

The OS sandbox around a task or review agent, when workflow.sandbox is os. The policy and why it is shaped this way are in docs/plans/2026-10-28-agent-sandboxes.md

Functions

argv

The program and arguments that go before the agent command, or why the sandbox cannot start. The worktree’s .git file is the agent’s to write, so the common dir comes from the main checkout and the branch from orch’s records, and a git dir outside them refuses the run

enabled

Whether the project runs its agents in the sandbox: workflow.sandbox: os in its .orch.yml or the global config. false or no setting leaves it off

enabled_globally

Like enabled from the global config alone, for a run whose project is unknown