Free guide · Oct 11, 2026
Read the policy and test one sandbox boundary
How to read the policy, design a harmless boundary test, and inspect the allowed and blocked results.
The short version
OpenShell documents file and network controls around an agent environment and credentials bound to approved endpoints. Its September 25 v0.1.0 release is a dated milestone. The current support matrix lists Windows through WSL2 and Docker Desktop as experimental; supported Linux and Apple Silicon macOS paths have their own prerequisites. Choose a documented platform before doing the exercise. Repository, v0.1.0 release, Support matrix
What's in the full guide
- 011. Write the boundary in ordinary language
- 022. Read what the sandbox actually enforces
- 033. Use the official tutorial as the command reference
- 044. Run a matched, harmless check
- 055. Explain the result at the right scale
- 06Your next action