resolve_policy#

Run commands and agent-written programs inside an operating-system boundary. See the guide.

zett_agent.sandbox.policy.resolve_policy(policy, *, home=None)[source]#

Turn a policy into the concrete paths a backend enforces.

Raises:

SandboxPolicyError – If a writable path does not exist, or is the filesystem root (which would defeat the sandbox).

Parameters:
Return type:

ResolvedPolicy