Module sandbox 

Agent sandboxing and isolation utilities

Provides security boundaries for agent processes, including:

• Resource limits (memory, CPU time)
• File system access control
• Network access control

Example

use gestura_core::sandbox::{SandboxConfig, SandboxManager, create_default_sandbox};

let mut manager = SandboxManager::new();
let config = create_default_sandbox("mcp-agent");
manager.register_agent("my-agent", config);

// Validate file access
manager.validate_file_access("my-agent", &path, false)?;

Structs

SandboxConfig

Sandbox configuration for agent processes

SandboxManager

Sandbox manager for agent processes

Functions

create_default_sandbox

Create default sandbox config for different agent types