Living Document Notice Staged 2026-09-27. Living revisions and interconnected notes live in the Stax Digital Garden.
Strict Filesystem Jails and In-Memory Overlay Mounts
Permitting coding models unfettered write privileges across host directories invites accidental data loss and path traversal exploits. Outrigger OPS-1 mandates explicit sandbox root boundaries using ephemeral overlay layers.
Sandboxing Specifications
- Copy-on-Write Lower Dir: The host repository is mounted strictly as a read-only lower filesystem layer.
- Transient Upper Memory Buffer: All file edits, test creations, and binary compilations occur in an ephemeral RAM disk.
- Explicit Promotion Filter: Changes survive the session only when vetted through an explicit changeset reconciliation pass.
This design guarantees that failing or runaway agent tasks cannot damage host working repositories.
- Directus Target: outrigger-protocol-blog
- Garden Source Reference: MOC - Outrigger Protocol, MOC - Agentic Containment and Sandbox Boundaries, [BSN-1026 - Atomic Save-via-Rename and Temporary File Reconciliation](BSN-1026 - Atomic Save-via-Rename and Temporary File Reconciliation)