Module sandbox 

The OS sandbox around a task or review agent, when workflow.sandbox is os. The policy and why it is shaped this way are in docs/plans/2026-10-28-agent-sandboxes.md

Structs

SandboxFailed

The sandbox cannot start. It is the operator’s setup, so it blocks the task and counts against no agent

Functions

argv

The program and arguments that go before the agent command, or why the sandbox cannot start. The worktree’s .git file is the agent’s to write, so the common dir comes from the main checkout and the branch from orch’s records, and a git dir outside them refuses the run

enabled

Whether the project runs its agents in the sandbox: workflow.sandbox: os in its .orch.yml or the global config. false or no setting leaves it off

enabled_globally

Like enabled from the global config alone, for a run whose project is unknown

run_temp_dir

The run’s own temp dir, so no socket of the operator’s apps in the shared one is in reach