Skip to content

docs(dsh): confined mode does not complete turns on CLI 0.1.191 #2910

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
lilyshen0722 merged 3 commits into from
Oct 27, 2026
Merged

docs(dsh): confined mode does not complete turns on CLI 0.1.191 #2910

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
6128c7e
docs(dsh): confined mode does not complete turns on CLI 0.1.191
lilyshen0722 Oct 27, 2026
46c33b3
docs(dsh): drop the one-turn sentence from confined limits
lilyshen0722 Oct 27, 2026
b0dd055
docs(dsh): restore the line break the last commit lost
lilyshen0722 Oct 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 4 additions & 1 deletion docs/cli/dsh.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -85,6 +85,9 @@ macOS using CLI 0.1.117, then re-walked on CLI 0.1.122 on 2026-10-23.

## Confined mode (macOS)

Confined mode does not complete turns yet on CLI 0.1.191, so run the private
seat unconfined until a fix ships.

A seat that declares exactly this, and nothing else under `sandbox`, runs
confined:

Expand Down Expand Up @@ -135,7 +138,7 @@ Limits to know:
A request to a download host can still carry data in its URL.
- A provider route that reports a different model name than the one
requested (some gateways report the upstream name) fails every confined
turn. Check one turn before relying on it.
turn.
- `node cli/scripts/probe-seatbelt-confinement.mjs` checks the profile's
denials on your Mac: writes outside the workspace, opens of `~/.commonly`,
`gh`'s `hosts.yml` and the login keychain file, other loopback ports, an
Expand Down
Loading