Module sandbox 

Leaf sandbox policy types used by crate::ToolContext and the sandbox runtime.

Kept in whycodes-core (not whycodes-config) so tool execution can depend on policy without pulling config load/merge.

Structs

SandboxSettings

Resolved sandbox policy carried on crate::ToolContext.

Enums

SandboxFallback

What to do when the requested sandbox backend is missing.

SandboxMode

How aggressively shell commands are OS-sandboxed.