Issues · anthropic-experimental/sandbox-runtime · GitHub

Labels Milestones New issue

allowLocalBinding: true also lifts outbound-TCP restriction, not just bind

#225

· kylejmcintyre opened

on Apr 23, 2026

Sandbox fails with "Can't create file: Is a directory" when .git/hooks is a symlink to a directory

#221

· tjcorona opened

on Apr 20, 2026

Document that --proc /proc requires permissive seccomp profile in containers, even with CAP_SYS_ADMIN

#214

· seidnerj opened

on Apr 9, 2026

Bridge socket creation fails silently when TMPDIR path exceeds Unix socket 108-char limit

#213

· seidnerj opened

on Apr 9, 2026

Refactor config loading: discriminated return type and deny-first defaults

#211

· yzavyas opened

on Apr 8, 2026

Add allowMachRegister config option (needed for Chromium/Playwright)

#210

· dontgitit opened

on Apr 6, 2026

`pnpx @anthropic-ai/sandbox-runtime -V` shows wrong version

#207

· YesYouKenSpace opened

on Apr 4, 2026

denyRead does not block access to individual files inside an allowRead directory

#193

· kyuz0 opened

on Mar 31, 2026

Feature: Split allowLocalBinding into granular bind/inbound/outbound controls

#188

· lambcode-unified opened

on Mar 27, 2026

Sandbox runtimes fails inside of unprivileged Docker container

#180

· JohnnyMorganz opened

on Mar 21, 2026

Bug: Use `RIPGREP_CONFIG_PATH` to determine config file of ripgrep in order to protect it

#178

· kulla opened

on Mar 18, 2026

Feature Request: Add `~/.bash_login` and `~/.bash_logout` to mandatory protected files

#177

· kulla opened

on Mar 18, 2026