Living Document Notice Staged 2026-09-27. Living revisions and interconnected notes live in the Stax Digital Garden.

Strict Filesystem Jails and In-Memory Overlay Mounts

Permitting coding models unfettered write privileges across host directories invites accidental data loss and path traversal exploits. Outrigger OPS-1 mandates explicit sandbox root boundaries using ephemeral overlay layers.

Sandboxing Specifications

• Copy-on-Write Lower Dir: The host repository is mounted strictly as a read-only lower filesystem layer.
• Transient Upper Memory Buffer: All file edits, test creations, and binary compilations occur in an ephemeral RAM disk.
• Explicit Promotion Filter: Changes survive the session only when vetted through an explicit changeset reconciliation pass.

This design guarantees that failing or runaway agent tasks cannot damage host working repositories.