director-sandboxes

Policy: KEEP sandboxes CT123/CT124/CT126; pct stop when idle; never destroy without owner; never leave idle-running.

Endpoint

pve250 (Director)

Packaging

policy

Owner

operator

Version

Updated

2026-07-04

Health check

pct status via pve250

Purpose

Sandbox lifecycle policy enforcing sandbox_lifecycle=keep_stop_when_idle. Safe access path: use pct commands via pve250 Director to start sandboxes for sessions and pct stop when session is done. KEEP containers CT123 beacon-next, CT124 cortex-sandbox, CT126 explorer-sandbox. Denied paths: do not destroy sandboxes without explicit owner approval, do not leave sandboxes idle-running after session. Redaction rules: standard; no sandbox-local secrets in cards. This policy is binding for all agent-initiated sandbox interactions.

Capabilities 2

sandbox-start

Start a KEEP sandbox for active session work.

sandbox-stop-when-idle

Mandatory pct stop when session is complete.

History 1

Createdai2026-07-04

Card created by AI session (audit 3228).

Required tags

Raw card data (JSON)

click to expand

{
  "id": "director-sandboxes",
  "kind": "workstream",
  "summary": "Policy: KEEP sandboxes CT123/CT124/CT126; pct stop when idle; never destroy without owner; never leave idle-running.",
  "purpose": "Sandbox lifecycle policy enforcing sandbox_lifecycle=keep_stop_when_idle. Safe access path: use pct commands via pve250 Director to start sandboxes for sessions and pct stop when session is done. KEEP containers CT123 beacon-next, CT124 cortex-sandbox, CT126 explorer-sandbox. Denied paths: do not destroy sandboxes without explicit owner approval, do not leave sandboxes idle-running after session. Redaction rules: standard; no sandbox-local secrets in cards. This policy is binding for all agent-initiated sandbox interactions.",
  "endpoint": "pve250 (Director)",
  "exposure": "lan",
  "capabilities_json": "[{\"name\": \"sandbox-start\", \"description\": \"Start a KEEP sandbox for active session work.\"}, {\"name\": \"sandbox-stop-when-idle\", \"description\": \"Mandatory pct stop when session is complete.\"}]",
  "dependencies_json": "[]",
  "instructions_slug": "uai-doc-docs-runbooks-sandbox-protocol",
  "health_check": "pct status via pve250",
  "credential_alias": "director-sandbox-ops",
  "packaging": "policy",
  "owner": "operator",
  "status": "active",
  "required_tags_json": "[\"ai-authored\", \"capability-card\", \"docs\", \"uai-explorer\", \"workstream\"]",
  "ai_visible": 1,
  "human_visible": 1,
  "embedding_dim": 0,
  "version_id": 1,
  "created_at": "2026-07-04T13:12:12.622236+00:00",
  "updated_at": "2026-07-04T13:12:12.622236+00:00"
}

API examples

curl, Python, JavaScript

# curl
curl -H "Authorization: Bearer $UAI_EXPLORER_AI_API_KEY" \
     https://explorer.united-ai.ca/api/ai/capability/director-sandboxes

# python (requests)
import requests
r = requests.get(
    "https://explorer.united-ai.ca/api/ai/capability/director-sandboxes",
    headers={"Authorization": f"Bearer {token}"},
)
card = r.json()

// JavaScript (fetch)
const r = await fetch(
  "https://explorer.united-ai.ca/api/ai/capability/director-sandboxes",
  { headers: { Authorization: `Bearer ${token}` } }
);
const card = await r.json();