Sandbox Handoffs
Sandbox prepares handoff envelopes, dry-run previews, protected-required states, and trace-linked evidence packets. It does not claim delivery until the destination service confirms receipt.
MCP remains the registry. Sandbox supplies bounded command evidence and public-safe artifacts for MCP tool requests.
AgentUI remains the workflow UI surface. Sandbox previews and executes bounded files/commands generated by AgentUI.
Spec remains the contract truth engine. Sandbox runs deterministic scripts generated from validated contracts.
BrowserOps remains the browser evidence lens. Sandbox hands off public preview URLs or reports for browser validation.
Evals remains the scoring and release-gate layer. Sandbox supplies command and validation evidence to be scored.
WebhookLab remains webhook transport. Sandbox validates signed handoff events and can emit lifecycle evidence events when configured.
Claws remains remediation planning. Sandbox runs bounded remediation/test commands after operator authorization.
Trace remains the timeline spine. Sandbox propagates trace context and links local evidence to trace ids without claiming remote recording unless confirmed.
Monitor remains health. Sandbox exposes provider/database/degraded states for monitor checks.
Docs remains publishing. Sandbox prepares public-safe Markdown/JSON reports and requires auth before publishing.
Sheets remains reporting tables. Sandbox exports structured command, artifact, validation, and handoff rows.
JSON remains JSON tooling. Sandbox validates JSON artifacts locally and can hand public-safe JSON to the JSON service.