Sandboxing

Coming soon. Sandboxing is not yet available.

Today Magic Coder runs shell commands directly in the shell that launched it, gated by trust and permission rules. Sandboxing will add an opt-in execution boundary — running commands inside a container, a chroot, an ephemeral worktree, or a similar isolation primitive — for cases where you want a stronger guarantee than “the agent followed the rules.”

This page will document the available sandboxes, the configuration format, and the trade-offs (performance, file-system semantics, network access) once the feature ships.