{
  "label": "Audits an OS sandbox configuration: namespaces, seccomp default-deny and dangerous syscalls, no_new_privs and capabilities, sensitive mounts, egress, resource limits and secret inheritance. It does not start the sandbox.",
  "public_key_b64": "CRWZZWFnvJTlFISmFAI0Fa4Mqrop3M5IYyoGSoEMh7Q=",
  "records": [
    {
      "checks": [
        {
          "detail": "user namespace True",
          "id": "namespace.user",
          "ok": true
        },
        {
          "detail": "mount namespace True",
          "id": "namespace.mount",
          "ok": true
        },
        {
          "detail": "pid namespace True",
          "id": "namespace.pid",
          "ok": true
        },
        {
          "detail": "net namespace True",
          "id": "namespace.net",
          "ok": true
        },
        {
          "detail": "profile 'agent-default'",
          "id": "seccomp.present",
          "ok": true
        },
        {
          "detail": "default 'SCMP_ACT_ERRNO'",
          "id": "seccomp.default_deny",
          "ok": true
        },
        {
          "detail": "no dangerous syscall allowed",
          "id": "seccomp.no_dangerous_syscalls",
          "ok": true
        },
        {
          "detail": "no_new_privs is set",
          "id": "privilege.no_new_privs",
          "ok": true
        },
        {
          "detail": "bounding set []",
          "id": "privilege.no_sys_admin",
          "ok": true
        },
        {
          "detail": "'/usr' mounted ro",
          "id": "mount./usr.sensitive_not_writable",
          "ok": true
        },
        {
          "detail": "'/usr' is never mountable into an agent sandbox, even read-only",
          "id": "mount./usr.not_forbidden",
          "ok": true
        },
        {
          "detail": "'tmpfs' mounted rw",
          "id": "mount./tmp.sensitive_not_writable",
          "ok": true
        },
        {
          "detail": "'tmpfs' is never mountable into an agent sandbox, even read-only",
          "id": "mount./tmp.not_forbidden",
          "ok": true
        },
        {
          "detail": "egress 'deny'",
          "id": "network.egress",
          "ok": true
        },
        {
          "detail": "allowlist []",
          "id": "network.no_catch_all",
          "ok": true
        },
        {
          "detail": "an allowlist is non-empty",
          "id": "network.allowlist_if_needed",
          "ok": true
        },
        {
          "detail": "memory_max_mb 256",
          "id": "resources.memory",
          "ok": true
        },
        {
          "detail": "pids_max 64",
          "id": "resources.pids",
          "ok": true
        },
        {
          "detail": "no credential-like env",
          "id": "secrets.no_credential_env",
          "ok": true
        },
        {
          "detail": "mounted secrets: []",
          "id": "secrets.no_secret_mount",
          "ok": true
        },
        {
          "detail": "claimed True, computed True",
          "id": "claims.namespaces_complete",
          "ok": true
        },
        {
          "detail": "claimed True, computed True",
          "id": "claims.no_new_privs",
          "ok": true
        },
        {
          "detail": "claimed True, computed True",
          "id": "claims.no_secret_leak",
          "ok": true
        },
        {
          "detail": "claimed True, computed True",
          "id": "claims.seccomp_denies_by_default",
          "ok": true
        }
      ],
      "created_at": "2026-11-12T07:59:16Z",
      "engine": "a75-020/1.0.0",
      "extra": {
        "computed": {
          "namespaces_complete": true,
          "no_new_privs": true,
          "no_secret_leak": true,
          "seccomp_denies_by_default": true
        },
        "sandbox": "bubblewrap"
      },
      "failed": [],
      "label": "Audits an OS sandbox configuration: namespaces, seccomp default-deny and dangerous syscalls, no_new_privs and capabilities, sensitive mounts, egress, resource limits and secret inheritance. It does not start the sandbox.",
      "prev_record_hash": "b4326310fde830259abed30d1f7696d884415e678998c5cb7380013147619551",
      "public_key_b64": "CRWZZWFnvJTlFISmFAI0Fa4Mqrop3M5IYyoGSoEMh7Q=",
      "record_hash": "2fd62b65691f8a028a3eb11296cb24021dcd408ecec955d1a8749502b56a3569",
      "schema": "cain42.a75.oscontainment.record.v1",
      "signature_b64": "TZlHVki6OIa+eVisG2FYHtyJOqDTw2H2PTlsVPCMvGjbzlnYjRVlc1lG/YiI7FnRN5RL6EeuzPGTsuDHdFruCg==",
      "sku": "CAIN-A75-020",
      "subject": {
        "capabilities": {
          "bounding_set": [],
          "no_new_privs": true
        },
        "claims": {
          "namespaces_complete": true,
          "no_new_privs": true,
          "no_secret_leak": true,
          "seccomp_denies_by_default": true
        },
        "mounts": [
          {
            "mode": "ro",
            "source": "/usr",
            "target": "/usr"
          },
          {
            "mode": "rw",
            "source": "tmpfs",
            "target": "/tmp"
          }
        ],
        "namespaces": {
          "cgroup": true,
          "ipc": true,
          "mount": true,
          "net": true,
          "pid": true,
          "user": true,
          "uts": true
        },
        "network": {
          "allowlist": [],
          "egress": "deny"
        },
        "resources": {
          "cpu_quota": 50000,
          "memory_max_mb": 256,
          "pids_max": 64
        },
        "sandbox": {
          "engine": "bubblewrap",
          "version": "0.9"
        },
        "schema": "cain42.a75.os.containment.v1",
        "seccomp": {
          "allowed_syscalls": [
            "read",
            "write",
            "exit",
            "exit_group",
            "futex",
            "clock_gettime"
          ],
          "default_action": "SCMP_ACT_ERRNO",
          "profile": "agent-default"
        },
        "secrets": {
          "inherited_env": [
            "PATH",
            "LANG"
          ],
          "mounted_files": []
        }
      },
      "subject_sha256": "a0e6404ae9227583be9a95627b56cc8b7db132765e292d4be27dc299e5625473",
      "verdict": "CONTAINED"
    }
  ],
  "run_hash": "22685f87ca737bca709dbe331b367970c5acf68af2e7ccaa4cc9b04b204c8f2f",
  "schema": "cain42.a75.oscontainment.run.v1",
  "sku": "CAIN-A75-020",
  "verdict": "VERIFIED",
  "verdicts": [
    "CONTAINED"
  ]
}