Docs

Sandbox

Optional bubblewrap / Seatbelt confinement after Allow — defense in depth, not a cloud sandbox.

mayrun run '<cmd>' --sandbox (soft) or --sandbox=required runs Allow/approved commands inside bubblewrap (Linux) or sandbox-exec (macOS).

Rule	Behavior
Deny	Never sandboxes
Network	Deny-by-default unless capabilities include `net.egress`
Workspace	Writable
Secret home paths	Best-effort denied for read

Defense in depth under policy — not a hosted sandbox platform, not a Windows-perfect v1.

mayrun run 'cargo test' --sandbox
mayrun run 'cargo test' --sandbox=required