Skip to content

Pull requests: anthropic-experimental/sandbox-runtime

New pull request New
55 Open 169 Closed
55 Open 169 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Add onExtractNoMatch option for credential file extract no-match behavior
#333 opened Jun 24, 2026 by elhajjj Contributor • Draft
fix(release): drop dead dist/vendor copy; publish the verified tarball; cache cargo
#331 opened Jun 23, 2026 by ig-ant Collaborator Loading…
@ig-ant
feat(windows): wire denyRead/denyWrite to srt-win acl (TS file-deny plumbing)
#330 opened Jun 23, 2026 by ig-ant Collaborator Loading…
Add structured extract regex for masked credential files
#326 opened Jun 23, 2026 by elhajjj Contributor Loading…
Add mode:"mask" for credential files (whole-file) — sentinel content, ro-bind over real path
#325 opened Jun 23, 2026 by elhajjj Contributor Loading…
feat(proxy): record proxy denials in SandboxViolationStore
#324 opened Jun 23, 2026 by shawnm-anthropic Collaborator • Draft
feat(linux): passive seccomp USER_NOTIF observer for sandbox violations
#322 opened Jun 23, 2026 by shawnm-anthropic Collaborator Loading…
fix(macos): allow reading kern.hv_vmm_present sysctl
#312 opened Jun 15, 2026 by lucasfais Loading…
fix(sandbox): Windows WFP status access denied check
#304 opened Jun 12, 2026 by hsm-lv Loading…
1
perf(macos): pass seatbelt profile to sandbox-exec via temp file (-f)
#303 opened Jun 5, 2026 by shawnm-anthropic Collaborator Loading…
macos: keep local binding from allowing direct outbound
#302 opened Jun 5, 2026 by EffortlessSteven Loading…
2
feat(filesystem): add denyReadAlways for denies that beat allowRead
#284 opened May 27, 2026 by smolyn Loading…
3 of 4 tasks
feat(network): add allowAllDomains flag to bypass allowlist
#283 opened May 27, 2026 by smolyn Loading…
3 of 4 tasks
Replace bwrap+socat with vendored srt-launcher on Linux
#272 opened May 13, 2026 by dylan-conway Collaborator Loading…
1
Add config option to allowGitHooks
#271 opened May 13, 2026 by carderne Contributor Loading…
fix: emit allowRead ro-binds before allowWrite re-binds in denyRead handler
#269 opened May 12, 2026 by yehsuf Loading…
2 tasks done
1
chore: keep lockfile updated
#252 opened May 7, 2026 by LitoMore Loading…
fix: Allow network access while file system isolation is enabled.
#246 opened May 5, 2026 by dileepyavan Loading…
1
fix: harden cli signal and control-fd handling
#236 opened May 5, 2026 by covercrust Loading…
4
Preserve ENOENT for missing mandatory deny paths
#227 opened Apr 30, 2026 by n01e0 Loading…
1
feat: emit [SandboxDebug] fs_deny line for each Seatbelt file-* denial
#224 opened Apr 21, 2026 by anonx3247 Loading…
3 tasks
switch away from shellescape to fix issue with metacharacters
#222 opened Apr 21, 2026 by JacquesAnthropic Collaborator • Draft
fix(cli): shell-quote positional argv so shell metacharacters survive the internal re-parse
#220 opened Apr 19, 2026 by anonx3247 Loading…
3 of 4 tasks
seccomp: add ppc64le (POWER) support
#219 opened Apr 18, 2026 by Scottcjn Loading…
1
Add allowGitCommonDir support for linked Git worktrees
#218 opened Apr 16, 2026 by goncalossilva Contributor Loading…
2
ProTip! Type g i on any issue or pull request to go back to the issue listing page.