All tutorials
Claudia · Episode 1 · 1:12

Only the doors I open

Claudia moves the genome-pipeline workspace to OpenShell + Sentry and writes its policy in plain YAML: GitHub for her company's organization only, the LIMS read-only, PyPI, and the project folder on disk. The agent reaches for the research vault, is refused, and finishes the job without it.

What you will see

  1. 01Set the workspace's sandbox engine to OpenShell + Sentry.
  2. 02Write the policy: GitHub limited to the company's organization, the LIMS read-only at the request level, PyPI, and only the project folder on disk.
  3. 03Everything else is denied.
  4. 04The agent tries to reach the research vault, is refused, and completes the task without it.
  5. 05The Sandbox drawer lists every destination that was blocked.

An agent can do real work under a policy that opens only what the job needs.

Up next
Live wire
Download Bromure Agentic CodingApple Silicon · macOS 14 or later · Free & open source

Claudia and Helix Meridian are fictional. The company, its data, its hosts and the packages in these episodes were all made up for the demo.