{
  "handle": "Sandbox",
  "mechanism": "An isolated execution environment that restricts side effects.",
  "gloss": "Isolation boundary",
  "_meta": {
    "tier": 2,
    "ring": 1,
    "related": [
      "AgentSandbox",
      "CircuitBreaker",
      "SafetyCartographer"
    ],
    "caution": "Escape vectors may exist in unaudited system call surfaces.",
    "supersedes": [
      "sema:Sandbox#mh:SHA-256:2be7b830454b430d8008cb54622a5c1a6434a6e076d7bbdaca4d2a5b1a1dadf0",
      "sema:Sandbox#mh:SHA-256:64c9d03cda865610bcc3792d3aa8f6c80c8b347e6ee1f6d7bb01479a0a38231d"
    ],
    "path": [
      "Infrastructure",
      "Primitives"
    ]
  },
  "sema_id": "sema:Sandbox#mh:SHA-256:7106e315b4bf7c5bd418fbab5c18e54be940367f77b8bde4756d1cb95beaa16b",
  "sema_ref": "Sandbox#7106",
  "sema_stub": "7106",
  "failure_modes": [
    "Unconstrained vector permits escape from the isolation boundary.",
    "Resource exhaustion within the sandbox affects the enclosing system."
  ],
  "sema_layer": "Infrastructure",
  "sema_category": "Primitives",
  "invariants": [
    "No effect crosses the isolation boundary except through a declared channel.",
    "Resources consumed inside are bounded independently of the enclosing system."
  ],
  "used_by": {
    "references": {
      "AgentSandbox": "sema:AgentSandbox#mh:SHA-256:1594a10a882956e4b8501764091e1d5025ba0b405cce34b7ef931bb17e5c634a",
      "Probe": "sema:Probe#mh:SHA-256:2bb8a26d43ba0b1975fe2ce4051cfb219a9507140f12e72b819265f4ef98f224",
      "Simulation": "sema:Simulation#mh:SHA-256:1058e7090079e846251ed480d7afec0328809d22bebb6b205425b2de614787c3",
      "ToolInvoke": "sema:ToolInvoke#mh:SHA-256:1096039316801cc8ef6e2855a6300574bb8596bb8e57c2764fd3bee741fa217e"
    }
  }
}