SANDBOX_PROFILE.json

{
  "profile_version": "1.0.0",
  "id": "docker-linux-amd64-stage3-v1",
  "assurance": "STAGE_3_LOCAL_TEST_PROFILE",
  "maximum_action_risk": "moderate",
  "host_provider": "Docker Desktop",
  "tested_engine_version": "29.5.3",
  "tested_architecture": "x86_64",
  "image": "docker.io/library/python:3.14.3-alpine3.23@sha256:581c14606911610c6b61e569714e92a726c1ef2437dd034824f644f6d9df6e9d",
  "image_index_digest": "sha256:faee120f7885a06fcc9677922331391fa690d911c020abb9e8025ff3d908e510",
  "controls": {
    "network": "none",
    "root_filesystem": "read-only",
    "workspace_mount": "read-only",
    "uid_gid": "65534:65534",
    "capabilities": "drop-all",
    "no_new_privileges": true,
    "pids_limit": 64,
    "memory_bytes": 536870912,
    "cpus": 1.0,
    "tmpfs": "/tmp only; noexec,nosuid,nodev; 64 MiB",
    "host_secrets_mounted": false,
    "docker_socket_mounted": false
  },
  "unsupported": [
    "privileged containers",
    "host networking",
    "host PID namespace",
    "writable source or authoritative repository mounts",
    "raw host credentials",
    "high or critical action execution",
    "production side effects"
  ]
}