Review a caller-declared Agent sandbox, network, filesystem, credential scope an...

{ "body": { "action": { "decision_id": "dec_exec_001", "intent": "run unit tests", "policy_version": "execution-environment-policy-v1", "structured_action_proposal": true, "type": "CODE_EXECUTION" }, "environment": { "credentials": { "browser_session": false, "host_credentials": false, "keychain": false, "requested_scopes": [], "ssh_agent": false }, "dns_access": false, "filesystem": { "host_mounts": [], "read_scope": [ "workspace" ], "write_scope": [ "workspace/tmp" ] }, "network_mode": "ALLOWLISTED", "outbound_destinations": [ "https://registry.npmjs.org" ], "output_sanitization": { "binary_quarantine": true, "classify_untrusted": true, "external_link_handling": true, "instruction_data_separation": true, "mime_type_validation": true, "no_automatic_execution": true, "output_size_limit": true, "prompt_injection_scan": true, "provenance_tagging": true, "structured_extraction": true }, "packages": { "external_binary_download": false, "install_requested": false, "lifecycle_scripts_present": false }, "resources": { "child_processes": "BOUNDED", "cpu_limit": 2, "memory_mb": 1024, "process_limit": 32, "timeout_seconds": 600 }, "runtime_image": { "known": true, "trusted": true }, "sandbox_profile": "L2_GVISOR", "worker": { "accepts_unstructured_natural_language": false, "control_plane_exposed": false, "decision_id": "dec_exec_001", "policy_version": "execution-environment-policy-v1" } } }, "bodyType": "json", "method": "POST", "type": "http" }

{ "example": { "browser_session_access": false, "credential_status": "NOT_REQUESTED", "decision": "ALLOW", "decision_id": "dec_exec_001", "deterministic": true, "docker_socket_accessed": false, "effective_sandbox_profile": "L2_GVISOR", "evaluated_at": "2026-11-01T00:00:00.000Z", "evaluation_mode": "DECLARED_CONFIGURATION_EVALUATED", "expires_at": "2026-11-01T00:05:00.000Z", "filesystem_status": "SCOPED", "host_credential_access": false, "llm_used": false, "network_status": "ALLOWLISTED", "output_sanitization_status": "DECLARED_COMPLIANT", "policy_version": "nomos-execution-environment-preflight-v1-20260724", "product": "nomos-execution-environment-preflight", "reason_codes": [], "requested_sandbox_profile": "L2_GVISOR", "required_controls": [ "DECLARED_CONFIGURATION_EVALUATED", "CLASSIFY_UNTRUSTED", "PROMPT_INJECTION_SCAN", "INSTRUCTION_DATA_SEPARATION", "STRUCTURED_EXTRACTION", "PROVENANCE_TAGGING", "MIME_TYPE_VALIDATION", "OUTPUT_SIZE_LIMIT", "BINARY_QUARANTINE", "EXTERNAL_LINK_HANDLING", "NO_AUTOMATIC_EXECUTION" ], "required_sandbox_profile": "L1_CONTAINER", "resource_status": "BOUNDED", "result_id": "eep_20261101000000_2mow", "risk_level": "LOW", "sandbox_profile_status": "ACCEPTED", "schema_version": "1.0", "ssh_agent_access": false, "supported_reason_codes": [ "PRIVILEGED_CONTAINER", "DOCKER_SOCKET_MOUNTED", "HOST_NETWORK_ENABLED", "HOST_PID_NAMESPACE", "UNRESTRICTED_HOST_VOLUME", "HOST_CREDENTIAL_MOUNT", "SSH_AGENT_ACCESS", "BROWSER_SESSION_ACCESS", "KEYCHAIN_ACCESS", "UNRESTRICTED_OUTBOUND_NETWORK", "REVERSE_SHELL_INDICATOR", "UNBOUNDED_RUNTIME", "UNBOUNDED_PROCESS_CREATION", "SANDBOX_PROFILE_DOWNGRADE", "ACTION_NOT_BOUND_TO_DECISION", "WORKER_ACCEPTS_UNSTRUCTURED_NATURAL_LANGUAGE", "PACKAGE_INSTALL_REQUESTED", "LIFECYCLE_SCRIPT_PRESENT", "EXTERNAL_BINARY_DOWNLOAD", "NEW_NETWORK_DESTINATION", "DNS_ACCESS_REQUESTED", "FILESYSTEM_SCOPE_EXPANSION", "CREDENTIAL_SCOPE_REQUESTED", "UNPLANNED_RECOVERY_ACTION", "UNKNOWN_REPOSITORY", "UNKNOWN_RUNTIME_IMAGE", "MALFORMED_REQUEST", "UNKNOWN_ENUM", "SANDBOX_PROFILE_UPGRADED", "L1_PROFILE_INSUFFICIENT", "L2_GVISOR_REQUIRED", "L3_MICROVM_REQUIRED", "CPU_LIMIT_MISSING", "MEMORY_LIMIT_MISSING", "TIMEOUT_LIMIT_MISSING", "PROCESS_LIMIT_MISSING", "OUTPUT_SANITIZATION_MISSING", "OUTPUT_SANITIZATION_INCOMPLETE", "POLICY_VERSION_MISSING", "DECISION_ID_MISSING" ], "supported_sandbox_profiles": [ "L1_CONTAINER", "L2_GVISOR", "L3_MICROVM" ], "unknown_code_executed": false, "unsupported_actions_executed": false, "worker_boundary_status": "BOUND" }, "type": "json" }