docs: clarify sandbox non-main behavior

This commit is contained in:
Peter Steinberger
2026-01-09 03:23:36 +01:00
parent 1a295d9460
commit dfbee10377
6 changed files with 44 additions and 0 deletions

View File

@@ -16,6 +16,8 @@ sessions.
resolve relative paths against the workspace, but absolute paths can still reach
elsewhere on the host unless sandboxing is enabled. If you need isolation, use
[`agent.sandbox`](/gateway/sandboxing) (and/or peragent sandbox config).
When sandboxing is enabled and `workspaceAccess` is not `"rw"`, tools operate
inside a sandbox workspace under `~/.clawdbot/sandboxes`, not your host workspace.
## Default location