Alpha Omega / Trust center

Generated-code limitations

Generated code is untrusted and never runs inside the web application process.

Isolation

Code tools require disposable non-root isolation, no host filesystem or platform environment, no network by default, bounded resources, evidence hashes, and automatic destruction. When a production sandbox is absent, code tools are disabled.

Residual risk

A sandbox is layered risk reduction, not perfect containment. A passing scan or test does not prove that generated code is free from logic flaws, dependency compromise, or sandbox vulnerabilities.

Preferred path

Trusted schema UI and declarative tools remain the preferred way to add capabilities because their behavior is inspectable and more tightly constrained.