require landrun for execute_code, update docs

Update core submodule: WrapCommand returns a hard error when landrun
is not detected. Document the requirement in ARCHITECTURE.md.
This commit is contained in:
ollie 2026-05-03 22:10:15 +02:00
parent 45d1b6b77e
commit ce17021b58
2 changed files with 5 additions and 1 deletions

2
core

@ -1 +1 @@
Subproject commit 6422c365b7002e1577ed490adb8c7c8c36fcbfc3
Subproject commit 36d3021aae2e140cba23a0f623ec034bef0257ff

View File

@ -225,6 +225,10 @@ Sandboxing is applied specifically to `execute_code`. Each code step is wrapped
`~/.config/ollie/sandbox/<name>.yaml`; if no `sandbox` argument is passed in the
`execute_code` call, the `default` config is used.
**landrun is required.** If landrun is not installed or not in `PATH`,
`execute_code` will refuse to run and return a hard error. There is no
unsandboxed fallback.
Steps marked `elevated: true` run outside the sandbox via the elevation backend
(`x/elevate`) and are the only exception. All other steps are sandboxed unconditionally.