PR5: Modern sandbox execution (single-owner lifecycle, policy-at-create) - #102

Merged

robbycochran merged 9 commits into

mainfrom

rc-pr5-sandbox-execution

Aug 26, 2026

Commits on Aug 26, 2026

PR5 S1: AgentAdapter command construction (replaces run.sh)
robbycochran
committed
53ee632
PR5 S2: sandbox create argv gains policy/gateway/workspace/label/no-auto-providers
robbycochran
committed
2dc3e3d
PR5 S3: policy staging (internal/payload)
robbycochran
committed
0415d05
PR5 S4: RunSandbox lifecycle owner (internal/run)
robbycochran
committed
6c87779
PR5 S5: cmd calls run.RunSandbox; policy-at-create; delete run.sh + PolicySet
robbycochran
committed
6ca402a
fix(agent): strip kind: policy discriminator at capture
robbycochran
committed
a731c28
fix(status): redact sensitive --env values in command diagnostics
robbycochran
committed
ccc1729
fix(agent): validate entrypoint is shell-safe before bash -lc wrapping
robbycochran
committed
e036220
fix: wrap sandbox command-construction error with apply-stage context
robbycochran
committed
cdef80f