John Pollock
|
71c6d3a638
|
feat(isolation): sandbox support — host policy and bwrap configuration
Adds host_policy.py for loading sandbox config from pyproject.toml:
sandbox_mode, network access, writable/readonly paths, node whitelist.
Sealed-worker RO import paths. Policy validation against forbidden
path set. pyproject.toml [tool.comfy.host] section with default policy.
|
2026-04-07 08:02:37 -05:00 |
|