[package] name = "jouleclaw-sandbox" version.workspace = true edition.workspace = true license.workspace = true repository.workspace = true authors.workspace = true description = "RuntimeClaim + CapabilitySet — the self-described sandbox shape PinnedContainer needs to be a re-runnable unit. Tagged runtime kind (bwrap/gVisor/Kata/Firecracker/Wasmtime/TeeVm/Unattested), measurements, capability allowlist. Deliberately NOT promising escape-proof." [dependencies] jouleclaw-attest = { path = "../jouleclaw-attest" } serde = { workspace = true } serde_json = { workspace = true } thiserror = { workspace = true }