Enum SandboxMode 

pub enum SandboxMode {
    None,
    Policy,
    Container,
    MicroVm,
}

Controls how aggressively the runtime restricts tool side-effects.

Variants

None

No sandbox — tools execute directly in the agent process (local default).

Policy

Policy-based: filesystem path and network access is validated at the Rust layer before the tool executes.

Container

Container-based: tools execute inside an isolated Docker/gVisor container.

MicroVm

MicroVM-based: tools execute inside a hardware-virtualised VM (e.g. Firecracker or E2B).

Trait Implementations

impl Clone for SandboxMode

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SandboxMode

impl Debug for SandboxMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxMode

fn default() -> Self

Returns the “default value” for a type.

impl Eq for SandboxMode

impl PartialEq for SandboxMode

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for SandboxMode