sandbox_agent.yaml

runtime:
  # Always run this agent inside a Docker sandbox so callers don't need
  # to remember --sandbox on the command line. An explicit
  # --sandbox=false on the CLI still wins.
  sandbox: true
  # Hosts the agent's tools need to reach. Unioned with the
  # auto-discovered tool-install hosts and the configured models
  # gateway, then added to the sandbox proxy's default-deny
  # allowlist. Use this for endpoints the aqua-based resolver
  # can't infer.
  network_allowlist:
    - api.example.com
    - registry.npmjs.org

agents:
  root:
    model: openai/gpt-4o
    description: |
      A helpful assistant that runs shell commands in a sandboxed environment.
      All commands execute inside a Docker container with limited filesystem access.
      The agent declares runtime.sandbox: true above, so:
        docker agent run examples/sandbox_agent.yaml
      is equivalent to:
        docker agent run --sandbox examples/sandbox_agent.yaml
    instruction: You are a helpful assistant with access to a sandboxed shell environment.
    toolsets:
      - type: shell