#landlock

2 posts

ai deep-dive 跟成熟 coding agent 學設計 Aug 30, 2026

Learning from Mature Coding Agents (29): OS-Level Sandboxing

An OS sandbox is the kernel boundary beyond path policy. rivumi now ships a fail-closed CommandSandbox: sandbox-exec on macOS, Landlock plus seccomp on Linux, and exit 126 when containment cannot be proven. Coverage still focuses on verification commands, and external CI confirmation remains open.

#coding-agent #harness-engineering #sandbox #landlock #seatbelt #bubblewrap

tech deep-dive Rivumi Architecture Notes Aug 30, 2026

Rivumi local OS sandboxes: fail-closed execution on macOS, bubblewrap, and Landlock

Rivumi can wrap configured local commands and verification in macOS sandbox-exec, Linux bubblewrap, or Landlock/seccomp. A required unavailable backend stops with exit 126 instead of running bare, but external CLIs, MCP/LSP processes, and the entire Rivumi process are outside this boundary.

#rivumi #coding-agent #sandbox #bubblewrap #landlock #seccomp