sandbox

type Capability struct {
	// Name identifies the mechanism ("seatbelt", "bwrap", "landlock+bwrap",
	// "restricted-token", "none"); the runner reports it in heartbeats.
	Name string
	// Available is false when native mode cannot be sandboxed here.
	Available bool
	// Weak marks isolation that is not a real boundary (Windows), shown to
	// the user wherever the mode is selectable.
	Weak bool
	// Detail explains a missing or weak capability in user-facing words.
	Detail string
}

type Policy struct {
	// WorkDir is the workspace clone: readable and writable.
	WorkDir string
	// TempDir is the per-workspace temp dir: readable and writable.
	TempDir string
	// Writable are extra writable paths the user allowlisted (toolchain
	// caches such as Xcode DerivedData).
	Writable []string
	// DenyRead are paths that must not be readable even though the rest of
	// the host is (credential stores, keychains, browser profiles). Use
	// DefaultDenyRead for the standard set.
	DenyRead []string
	// AllowNetwork permits outbound network access. Package managers need
	// it, so the runner enables it by default.
	AllowNetwork bool
}