Module sandbox 

Sandbox configuration for VT Code

Implements configuration for the sandbox system following the AI sandbox field guide’s three-question model:

• Boundary: What is shared between code and host
• Policy: What can code touch (files, network, devices, syscalls)
• Lifecycle: What survives between runs

Structs

DockerSandboxConfig

Docker sandbox configuration

ExternalSandboxConfig

External sandbox configuration (Docker, MicroVM)

MicroVMSandboxConfig

MicroVM sandbox configuration

NetworkAllowlistEntryConfig

Network allowlist entry

NetworkConfig

Network egress configuration

ResourceLimitsConfig

Resource limits configuration

SandboxConfig

Sandbox configuration

SeccompConfig

Linux seccomp configuration

SensitivePathsConfig

Sensitive paths configuration

Enums

ExternalSandboxType

External sandbox type

ResourceLimitsPreset

Resource limits preset

SandboxMode

Sandbox mode following the Codex model

SeccompProfilePreset

Seccomp profile preset