docs: note runtime-configurable sandbox in USAGE.md

This commit is contained in:
Levi Neely 2026-05-01 10:31:57 +02:00
parent 24204b4795
commit b95cfb632a
1 changed files with 4 additions and 0 deletions

View File

@ -143,6 +143,10 @@ rm -r $OLLIE/s/<session-id> # cancel and remove
Valid spec keys: `name` (auto-generated if omitted), `cwd` (required), `agent`,
`backend`, `model`.
### Sandbox
Every `execute_code` invocation runs inside a Landlock sandbox configured by `~/.config/ollie/sandbox/<name>.yaml`. The sandbox wraps each invocation as a new command, so config changes (e.g. granting access to an additional directory) take effect on the next `execute_code` call without restarting the server or session.
## AI pipelines
`s/bfg` writes to stdout and composes naturally with Unix pipes. When both args