Reference
Sandbox
Mount profiles shared by sandbox runs and the build pipeline.
Mounts
Every project sandbox and build phase shares the base mount invariants from
internal/sandbox, then adds phase-specific mounts from
internal/agent. Access is read-only (ro),
read-write (rw), or not mounted (–).
Lifecycle is ephemeral (fresh per run) or
persistent (project-backed host directory).
| Mount | Host source | Base | Raise | Verify | Codegen | Lifecycle |
|---|---|---|---|---|---|---|
/project | project root | ro | ro | ro | ro | persistent |
/specs | dirs.specs | ro | ro | ro | ro | persistent |
/output | per-run temp | rw | rw | rw | rw | ephemeral |
/error | per-run temp | rw | rw | rw | rw | ephemeral |
/usr/local/bin/overplane | host binary | ro | ro | ro | ro | ephemeral bind |
/ir | dirs.ir | – | rw | ro | ro | persistent |
/code | dirs.code | – | – | – | rw | persistent |
~/.claude / ~/.codex / … | .cache/agents/<backend> | rw | rw | rw | rw | persistent |
Codegen sets the agent workdir to /code. The build uses the
embedded stdprompt template codegen/auto (override with
overplane build --prompt; inspect with
overplane prompt show codegen/auto). Generated files belong
under
/code; diagnostics go to /error/error.json. Agent
runs use the native backend CLI as the container command (NDJSON decoded on
the host).