sha256:4d273c95c2ea55044b9c16c58a60bbcd2f792680ac62537445598129d503fb4d
Last pushed
9 days by cdupuis
Type
Sandbox Kit
Manifest digest
sha256:4d273c95c2ea55044b9c16c58a60bbcd2f792680ac62537445598129d503fb4d
Runs mend-guardrails-server on loopback and points Codex/OpenAI-compatible agents at it via OPENAI_BASE_URL so prompt bodies are inspected (secrets, PII, prompt injection) before they reach the model. Also exposes /v1/guard/* and mend-guard-text for scanning MCP and tool-result text.
| Name | Required | Default | Description |
|---|---|---|---|
interceptTui | Optional | false | Opt in to route Codex TUI model calls through loopback Guardrails (user-level model_provider=mend_guardrails). Default false keeps ChatGPT subscription TUI auth. When true, requires a host OpenAI platform API key with api.responses.write (and billing), plus an API model name (not Sol/Luna-only ChatGPT catalog). Options: false, true |
offline | Optional | false | Set MEND_GUARDRAILS_OFFLINE. Default false (online: platform registration and telemetry). Use true with policySource=local so the SDK can load the kit sandbox.json. MEND_KEY is still required. Do not combine with policySource=api. Options: false, true |
policySource | Optional | api | Default api loads the org policy from the Mend Platform (use with offline=false). Enable detectors in the platform policy as needed. Opt in to local for the kit sandbox.json file (startup then sets offline=true). Options: local, api |
pythonSrc | Optional | | Absolute path to a local mend-guardrails-python checkout for editable install instead of the Mend downloads wheel. Empty (default) installs from PyPI + downloads.mend.io. Mount the same path as an extra sbx workspace (not :ro) so install can write egg-info. |
| Type | Required | Description | |
|---|---|---|---|
com.docker.sandbox/network-policy@1 | Required | — | |
com.docker.sandbox/lifecycle@1 | Required | — | |
com.docker.sandbox/agent-context@1 | Required | — | |
codexsbx run <agent> --kit docker/sbx-kit-mend-guardrails:1.0.0Run the following command to install sbx on your machine.
brew install docker/tap/sbxwinget install Docker.sbx