Date: 2026-09-10

Bash sandbox

The current implementation exposes shell execution through Nova’s guarded tool and sandbox policy. This page does not imply an independent Bash sandbox product.

Use the current implementation

Ask Nova to run a narrowly scoped command and review the approval/policy decision. On Windows, the host shell is PowerShell unless the runtime explicitly selects another shell; do not document Unix commands as universal.

Boundaries and safety

Shell execution is host- and policy-dependent. Never pass secrets on command lines, and treat command output as potentially sensitive.