CortavynThe built-in tools expose ls, read_file, write_file, edit_file, glob, and grep. write_file, edit_file, write_memory, and an optional execute tool pause by default; resume with one ApprovalDecision for each pending action.
PermissionedWorkspace applies first-match-wins read/write path rules. Use FilesystemWorkspace only with a deliberately selected root. ProcessSandbox is intended for explicit local development and is not an untrusted-code isolation boundary; production applications should provide an isolated Sandbox implementation.