Sandbox Filesystem Access

Use this skill when changing or troubleshooting which host files and directories an agent can read, write, or traverse inside an AWF sandbox. Treat host permissions, sandbox mount policy, and the sandbox's effective view as separate checks: a writable mount does not override host ownership or ACLs, and host permissions do not make an unmounted path visible.

Find the runtime-specific source of truth

First identify the selected runtime and the access path being changed. Do not assume all runtimes implement mounts the same way.