Security & governancePlugin
pi-dsh-sandbox
Frost-rA9
dsh-style file-effect sandbox for pi: read-only / workspace-write / danger-full-access, with bubblewrap (Linux) and Seatbelt (macOS) command confinement
Structure check pending
agentbubblewrappisandbox