ai-coding-agents-execution-sandbox

# AI Coding Agents Execution Sandbox Use this skill to design or review the execution substrate for a coding-agent runtime: process isolation, filesystem mounts, network policy, workspace boundaries, environment exposure, and destructive-command controls. This skill covers where and how code runs. It complements permission routing by defining the actual isolation and policy envelope around execution. ## ASCII Flow ```text requested execution | v classify action read | write | network | process | destructive | secret-bearing | v sandbox policy filesystem roots + workspace mounts + env exposure + network policy | v decision allow in sandbox | ask permission | deny | require safer workspace | v run process with bounded cwd, mounts, env, network, and cleanup rules ``` ## Quick Reference | Question | Read | Outcome | |----------|------|---------| | How should process, filesystem, and workspace isolation work? | [`references/sandbox-process-and-filesystem-model.md`](references/sandbox-process-and-filesystem-model.md) | Execution modes, mounts, working directories, and write boundaries | | How should network, approvals, and destructive actions be controlled? | [`references/network-approval-and-destructive-action-guards.md`](references/network-approval-and-destructive-action-guards.md) | Outbound policy, command classes, escalation triggers, and guardrails | | What sandbox mode names and backend split should runtime builders copy from Codex? | [`references...