zed/nix
Cameron Mcloughlin 8f92822cbf
agent: Sandbox security review and docs update (#60291)
Closes security loopholes and updates docs:
- installs seccomp filter for blocking naughty syscalls
- tightens macos seatbelt profile
- fetch tool responses that redirect are now constrained by allowed
domains list

Also adds a few "Learn More" buttons that link to the new docs.

Also fixes a bug where the agent would try to create a
`~/.config/zed/AGENTS.md` directory

Also adds unicode confusable detection to URL/path privilege escalation
prompts.

---

Release Notes:

- N/A or Added/Fixed/Improved ...

---------

Co-authored-by: zed-zippy[bot] <234243425+zed-zippy[bot]@users.noreply.github.com>
2026-07-10 22:51:41 +00:00
..
dev agent: More sandboxing changes (#60111) 2026-06-30 11:10:04 +00:00
livekit-libwebrtc nix: Fix build on x86_64-linux (#52917) 2026-04-01 20:50:04 +02:00
modules agent: More sandboxing changes (#60111) 2026-06-30 11:10:04 +00:00
tests agent: Sandbox security review and docs update (#60291) 2026-07-10 22:51:41 +00:00
build.nix agent: More sandboxing changes (#60111) 2026-06-30 11:10:04 +00:00
toolchain.nix zed: Read ZED_COMMIT_SHA from env var when building (#51115) 2026-03-09 17:02:09 +01:00