Skip to content

Pull requests: anthropic-experimental/sandbox-runtime

New pull request New
52 Open 156 Closed
52 Open 156 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Add mode:"mask" for env vars — sentinel in sandbox, real value injected at the proxy
#318 opened Jun 18, 2026 by elhajjj Contributor • Draft
fix(macos): keep egress allowlist enforced when allowLocalBinding is set
#316 opened Jun 18, 2026 by dylan-conway Collaborator Loading…
2
fix(macos): allow reading kern.hv_vmm_present sysctl
#312 opened Jun 15, 2026 by lucasfais Loading…
fix(sandbox): Windows WFP status access denied check
#304 opened Jun 12, 2026 by hsm-lv Loading…
1
perf(macos): pass seatbelt profile to sandbox-exec via temp file (-f)
#303 opened Jun 5, 2026 by shawnm-anthropic Collaborator Loading…
macos: keep local binding from allowing direct outbound
#302 opened Jun 5, 2026 by EffortlessSteven Loading…
2
feat(windows): ACL-based file deny — broker-only DACL + parent-dir allow-list + file_id-validated restore
#288 opened May 29, 2026 by ig-ant Collaborator Loading…
@ig-ant
13
feat(filesystem): add denyReadAlways for denies that beat allowRead
#284 opened May 27, 2026 by smolyn Loading…
3 of 4 tasks
feat(network): add allowAllDomains flag to bypass allowlist
#283 opened May 27, 2026 by smolyn Loading…
3 of 4 tasks
feat(sandbox): allow sysv shared memory
#277 opened May 19, 2026 by llimllib Loading…
1
Replace bwrap+socat with vendored srt-launcher on Linux
#272 opened May 13, 2026 by dylan-conway Collaborator Loading…
1
Add config option to allowGitHooks
#271 opened May 13, 2026 by carderne Contributor Loading…
fix: emit allowRead ro-binds before allowWrite re-binds in denyRead handler
#269 opened May 12, 2026 by yehsuf Loading…
2 tasks done
1
chore: keep lockfile updated
#252 opened May 7, 2026 by LitoMore Loading…
fix: Allow network access while file system isolation is enabled.
#246 opened May 5, 2026 by dileepyavan Loading…
1
fix: harden cli signal and control-fd handling
#236 opened May 5, 2026 by covercrust Loading…
4
Preserve ENOENT for missing mandatory deny paths
#227 opened Apr 30, 2026 by n01e0 Loading…
feat: emit [SandboxDebug] fs_deny line for each Seatbelt file-* denial
#224 opened Apr 21, 2026 by anonx3247 Loading…
3 tasks
switch away from shellescape to fix issue with metacharacters
#222 opened Apr 21, 2026 by JacquesAnthropic Collaborator • Draft
fix(cli): shell-quote positional argv so shell metacharacters survive the internal re-parse
#220 opened Apr 19, 2026 by anonx3247 Loading…
3 of 4 tasks
seccomp: add ppc64le (POWER) support
#219 opened Apr 18, 2026 by Scottcjn Loading…
1
Add allowGitCommonDir support for linked Git worktrees
#218 opened Apr 16, 2026 by goncalossilva Contributor Loading…
2
fix: read actual package version for srt --version output
#217 opened Apr 14, 2026 by javabrett Loading…
feat: log proxy-blocked connections to system log via logger
#216 opened Apr 13, 2026 by javabrett Loading…
5 tasks
fix: add com.apple.secd mach-lookup for Keychain access on macOS 13+
#215 opened Apr 13, 2026 by javabrett Loading…
ProTip! Mix and match filters to narrow down what you’re looking for.