docs: note runtime-configurable sandbox in USAGE.md
This commit is contained in:
parent
24204b4795
commit
b95cfb632a
|
|
@ -143,6 +143,10 @@ rm -r $OLLIE/s/<session-id> # cancel and remove
|
|||
Valid spec keys: `name` (auto-generated if omitted), `cwd` (required), `agent`,
|
||||
`backend`, `model`.
|
||||
|
||||
### Sandbox
|
||||
|
||||
Every `execute_code` invocation runs inside a Landlock sandbox configured by `~/.config/ollie/sandbox/<name>.yaml`. The sandbox wraps each invocation as a new command, so config changes (e.g. granting access to an additional directory) take effect on the next `execute_code` call without restarting the server or session.
|
||||
|
||||
## AI pipelines
|
||||
|
||||
`s/bfg` writes to stdout and composes naturally with Unix pipes. When both args
|
||||
|
|
|
|||
Loading…
Reference in New Issue