feat: implement AllowNet filtering on Linux via slirp4netns#3

Merged

machado144 merged 11 commits intomainfrom

feat/allownet-linux-slirp4netns

Feb 12, 2026

Commits on Feb 12, 2026

fix: make init idempotent and wire stdio passthrough in RunPassthrough
machado144
committed
feat: implement AllowNet filtering on Linux using slirp4netns
machado144
committed
fix: resolve AllowNet hosts inside namespace to match DNS responses
machado144
committed
fix: run slirp4netns inside user namespace to fix setns EPERM
machado144
committed
fix: use real DNS query for readiness check, add resolution retries
machado144
committed
docs: add architecture diagrams with rendered images
machado144
committed
feat: add sandbox startup banner and explicit rejection messages
machado144
committed
feat: show explicit deny messages in sandboxed files and directories
machado144
committed
feat: print network restriction message inside sandbox stderr
machado144
committed
feat: write sandbox policy file so AI agents can discover restrictions
machado144
committed
fix: rephrase deny marker to avoid prompt injection detection
machado144
committed