sam-box

Overview ¶

Command sam-box is the sandbox dataplane: one per agent sandbox, serving the boundary an agent's traffic leaves through.

It holds no libp2p host, no enrollment and no mesh identity of its own. It consumes a local sam-node over that node's API socket and offers the sandbox a curated surface: mesh inference and tools addressed by name, plus whatever egress policy allows. The node's own API stays on the node's side of the boundary.