@nativeharness/sandbox-local

A SandboxProvider that runs commands on this machine, with no isolation at all.

npm install @nativeharness/sandbox-local

For tests, deterministic scripts and trusted code — never for a model's commands. That is not advice, it is enforced: Agent refuses a provider whose capabilities say it does not isolate unless the model is declared deterministic, so this cannot be configured into an agent by accident.

import { LocalSandboxProvider } from "@nativeharness/sandbox-local";

const sandbox = new LocalSandboxProvider({
  iAcknowledgeThisIsNotIsolated: true,   // required, and it means what it says
  root: "./tmp/sandboxes",
});

There is no flag that makes this provider safe for untrusted input, which is why the one it does have is impossible to pass by accident.

It exists because it makes the interface honest: a provider with no isolation still has to pass the same 41-case conformance suite as a microVM.

Part of nativeharness — the agent harness native to your app. Apache-2.0 · docs · source