← Back to context

Comment by thih9

8 hours ago

How does sandboxing work for code?

Is there a way to control the isolation myself, e.g. let it run code only in some VM that I provide?

Edit: is there a sandbox for code?

There's no app-enforced sandbox today. However, coding tasks get delegated to Claude Code or Codex using ACP.

- Codex runs under its native OS sandbox (Seatbelt on macOS, bubblewrap on Linux) — where it's sandboxed to the selected working directory with network off. - Claude Code's sandbox is opt-in and we don't enable it yet, but we load your Claude config (~/.claude/settings.json), so if you've enabled sandboxing there it should work.

Surfacing these options in the app UI is a small change on our side, which we'll pick up shortly.