Security
Runtime Supervisor
Preview design for policy-driven approval of sensitive runtime actions.
Runtime Supervisor is the policy layer for teams that need request-time approvals before high-risk operations run. It calls out to your webhook before letting a sensitive action proceed.
Preview design. For production controls today, use Network Filtering, Endpoint Rules, and Audit Trail.
Proposed sandbox config
import { Isorun } from 'isorun'
const isorun = new Isorun()
const sandbox = await isorun.create({
image: 'python:3.12-slim',
supervisor: {
webhook: 'https://your-app.com/approve',
events: ['network_request', 'file_write', 'exec'],
decisionTimeoutMs: 3000,
defaultAction: 'deny',
},
})Proposed webhook payload
{
"event_id": "evt_01J9...",
"event": "network_request",
"sandbox_id": "run78cbccbab85efc28",
"timestamp": "2026-05-26T12:03:20Z",
"details": {
"host": "api.openai.com",
"method": "POST",
"path": "/v1/chat/completions"
}
}Proposed webhook response
{ "approved": true, "reason": "policy matched: allow-openai-chat" }{ "approved": false, "reason": "write operation blocked by policy" }Design goals
- Deterministic timeout behavior (
defaultActionon webhook timeout). - Low-latency approval path.
- Full auditability of allow/deny decisions.
- Composable with host/method/path policy controls.
Next steps
- Network filtering, per-sandbox egress allow/deny lists, available today.
- Endpoint rules, method and path controls on the credential proxy.
- Audit trail, tamper-evident log of every sandbox event.