The Sandbox and Permission Seams in Nexo

I have been saying the source agents write their output into “the :local sandbox” without explaining what that is. It is time to, because the sandbox and permissions are the two things Nexo genuinely adds on top of ruby_llm , and they are what make “read-only email tool” an enforced property instead of a promise in a prompt. The two seams answer two different questions. The sandbox is where an…