Use the boundary. Know its edge.

Workspace Sandbox Manifest is free, open-source software provided under the MIT License.

No security guarantee

The software compiles policy to operating-system primitives and reports observed capabilities. It is not a virtual machine and cannot guarantee containment against operating-system vulnerabilities, misconfigured kernels, or allowed child processes.

Your responsibility

Review generated policy, run the probe on each target machine, keep your operating system patched, and use a disposable VM for untrusted or hostile code.

No warranty

The software and website are provided “as is,” without warranty of any kind, as stated in the MIT License included with the source.

Changes

Material changes will be recorded in the repository history with a new effective date on this page.