Containmentvm-7f3a
Sealed
SandboxInternet
Boundary
main.js
SecretOPENAI_API_KEY
••••••••••
SecretDATABASE_URL
••••••••••
/tmp · ephemeral0
empty · wiped on teardown
$ tap a host to test the boundary…
Allowlisted egress passes · everything else hits the wall