[2.7] Safe command construction and execution sandbox #7
Description
Build intent-to-command system via templates (no free-form shell), argument validation, safe escaping, command execution with stdout/stderr/exit capture, sandboxing (timeouts, resource limits, cgroups v2, namespaces/seccomp), and environment isolation.
Scope
This epic covers 10 decisions and 10 tasks from the Cortex Linux planning system.
Source
- Planning Tool: Skilliks
- Module: See internal planning documentation
Tasks
Tasks will be added as sub-issues or checklist items as specification is refined.
Epic generated from Cortex Linux strategic planning