Date: 2026-09-10

Sandbox environments

Nova can execute shell and file tools within the host and the runtime’s sandbox/policy boundaries. A sandbox is not automatically a container or VM.

Use the current implementation

Use narrowly scoped commands, inspect the working directory, and prefer an isolated Git worktree for change separation. Confirm the host shell before copying commands.

Boundaries and safety

Sandbox behavior varies by host, policy, and tool. Do not assume network isolation or filesystem isolation unless the runtime explicitly reports it.