Skip to content

Pull requests: anthropic-experimental/sandbox-runtime

New pull request New
67 Open 271 Closed
67 Open 271 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

[EXPERIMENTAL] Sandbox-Agent channel: let the wrapped agent decide uncovered requests
#456 opened Aug 7, 2026 by shawnm-anthropic Collaborator Loading…
fix(macos): Fix sandboxed Java networking
#453 opened Aug 6, 2026 by gpanders Loading…
fix(macos): auth-capable GIT_SSH_COMMAND via socat when present
#452 opened Aug 6, 2026 by smolyn Loading…
Add explicit host network mode
#450 opened Aug 5, 2026 by cuevasclemente Loading…
fix: emit read carve-out ro-binds before restored write binds in pushReadDenyDirMounts
#447 opened Aug 5, 2026 by simple10 Loading…
1
test(sandbox): cover deny globs outside process.cwd() on macOS
#433 opened Aug 4, 2026 by madonoharu Loading…
fix(macos): Add security.mac.sandbox.sentinel to sysctl-read allowlist
#431 opened Aug 3, 2026 by tturner-code Loading…
windows: auto-select MXC BaseContainer backend when the host supports it
#427 opened Jul 24, 2026 by dylan-conway Collaborator • Draft
fix(macos): Add more harmless sysctls to allowed sysctl-read list
#425 opened Jul 24, 2026 by gpanders Loading…
feat(windows): bind dir-marked deny to an existing file instead of failing
#424 opened Jul 24, 2026 by ig-ant Collaborator • Draft
fix(proxy): gate request-body inspection on framing headers, not method
#421 opened Jul 22, 2026 by ig-ant Collaborator Loading…
feat(sandbox): support more options in customConfig for wrapWithSandbox
#420 opened Jul 22, 2026 by gpanders Loading…
fix(linux): retain CAP_SETFCAP in secure bwrap branch for apply-seccomp's nested-userns fallback
#418 opened Jul 22, 2026 by johnhenry Loading…
1
Deduplicate move-blocking rules in the macOS profile
#416 opened Jul 20, 2026 by dylan-conway Collaborator Loading…
Replace pipe() with pull-mode relay on CONNECT sockets to avoid Bun stream corruption
#411 opened Jul 18, 2026 by elhajjj Collaborator • Draft
feat(network): add allowMachRegister option for macOS
#407 opened Jul 17, 2026 by keroxp Loading…
1
fix(windows): bootstrap WFP verification from protected installs
#397 opened Jul 13, 2026 by ken-jo Loading…
1
Add macOS DYLD interposer so masked credential files read as sentinels
#394 opened Jul 10, 2026 by elhajjj Collaborator • Draft
Accept the proxy token as a destination-hostname prefix on no-auth SOCKS connections
#385 opened Jul 7, 2026 by dylan-conway Collaborator Loading…
1
feat(linux): transparent network capture for proxy-unaware programs
#380 opened Jul 6, 2026 by dylan-conway Collaborator • Draft
proxy: flush tunneled bytes before closing the client socket
#377 opened Jul 3, 2026 by ehsan Loading…
fix(macos): allow reading kern.hv_vmm_present sysctl
#312 opened Jun 15, 2026 by lucasfais Loading…
fix(sandbox): Windows WFP status access denied check
#304 opened Jun 12, 2026 by hsm-lv Loading…
1
perf(macos): pass seatbelt profile to sandbox-exec via temp file (-f)
#303 opened Jun 5, 2026 by shawnm-anthropic Collaborator Loading…
macos: keep local binding from allowing direct outbound
#302 opened Jun 5, 2026 by EffortlessSteven Loading…
2
ProTip! Follow long discussions with comments:>50.