Verify OS-native sandbox enforcement on this host
Apply the agent daemon sandbox to this process and probe whether the kernel actually confines it:
- writes outside the workspace are blocked
- reads of system paths still work (so tools can run)
- reads of home-directory secrets are blocked
Use this to confirm your platform (Seatbelt on macOS, Landlock on Linux) enforces the sandbox before you rely on it, and to diagnose enforcement in the field.
Exit codes: 0 - sandbox is enforcing correctly (or not enabled) 1 - sandbox is enabled but a probe failed
mutiro agent host doctor sandbox [flags]
| Flag | Type | Description |
|---|---|---|
| -h, --help | bool | help for sandbox |
| Flag | Type | Description |
|---|---|---|
| --config | string | config file (default is ./.mutiro.yaml in current directory) |
| --debug | bool | debug mode |
| -v, --verbose | bool | verbose output |