# Interface SandboxPolicy

Sandbox execution policy.

interface SandboxPolicy {
id: string;
name: string;
mode: SandboxMode;
allowedCommands: readonly string[];
allowedEnvVars: readonly string[];
pathRules: readonly PathAccessRule[];
capabilities: readonly SecurityCapability[];
limits: ResourceLimits;
}

- Defined in packages/nexus-agents/src/security/sandbox/sandbox-types.ts:75

##### Index

### Properties

id
name
mode
allowedCommands
allowedEnvVars
pathRules
capabilities
limits

## Properties

### `Readonly` id

id: string

Unique policy identifier.

- Defined in packages/nexus-agents/src/security/sandbox/sandbox-types.ts:77

### `Readonly` name

name: string

Human-readable policy name.

- Defined in packages/nexus-agents/src/security/sandbox/sandbox-types.ts:79

### `Readonly` mode

mode: SandboxMode

Sandbox execution mode.

- Defined in packages/nexus-agents/src/security/sandbox/sandbox-types.ts:81

### `Readonly` allowedCommands

allowedCommands: readonly string[]

Allowed commands (empty = all denied).

- Defined in packages/nexus-agents/src/security/sandbox/sandbox-types.ts:83

### `Readonly` allowedEnvVars

allowedEnvVars: readonly string[]

Allowed environment variables to pass through.

- Defined in packages/nexus-agents/src/security/sandbox/sandbox-types.ts:85

### `Readonly` pathRules

pathRules: readonly PathAccessRule[]

Path access rules.

- Defined in packages/nexus-agents/src/security/sandbox/sandbox-types.ts:87

### `Readonly` capabilities

capabilities: readonly SecurityCapability[]

Enabled capabilities.

- Defined in packages/nexus-agents/src/security/sandbox/sandbox-types.ts:89

### `Readonly` limits

limits: ResourceLimits

Resource limits.

- Defined in packages/nexus-agents/src/security/sandbox/sandbox-types.ts:91