let5see/clawdbot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: note elevated no-op when unsandboxed

Browse Source
This commit is contained in:
Peter Steinberger
2026-01-08 23:18:09 +01:00
parent b01d7e39d5
commit dc1992cbb5
4 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
docs/tools/elevated.md
View File

@@ -20,6 +20,10 @@ read_when:
- **Unsandboxed agents**: when there is no sandbox to bypass, elevated does not change where `bash` runs.
- **Tool policy still applies**: if `bash` is denied by tool policy, elevated cannot be used.
Note:
- Sandbox on: `/elevated on` runs that `bash` command on the host.
- Sandbox off: `/elevated on` does not change execution (already on host).
## When elevated matters
- Only impacts `bash` when the agent is running sandboxed (it drops the sandbox for that command).
- For unsandboxed agents, elevated does not change execution; it only affects gating, logging, and status.