Comment by ramnique

There's no app-enforced sandbox today. However, coding tasks get delegated to Claude Code or Codex using ACP.

- Codex runs under its native OS sandbox (Seatbelt on macOS, bubblewrap on Linux) — where it's sandboxed to the selected working directory with network off. - Claude Code's sandbox is opt-in and we don't enable it yet, but we load your Claude config (~/.claude/settings.json), so if you've enabled sandboxing there it should work.

Surfacing these options in the app UI is a small change on our side, which we'll pick up shortly.