# Environment: opencode-sandbox

You run inside opencode-sandbox. Load the `opencode-sandbox` skill before working with the
network, files outside the project, git remotes, Docker, or worktrees. In short:

- You may write only to the project, its worktrees and paths listed in `OCSB_RW`; the rest of
  the system is read-only. "Read-only file system" is the sandbox, not a bug — do not retry.
- Network goes through a filtering proxy. A 403 from the proxy is policy: tell the user which
  domain you need and why; do not try to bypass it.
- You cannot open the user's browser (`xdg-open` is disabled); give the user the link instead.
  Browser tools (Playwright) run inside the sandbox: headless, or in a window on the user's
  desktop when `WAYLAND_DISPLAY` is set.
- `.opencode-sandbox/`, `.cc-safety-net/`, `.git/hooks` and `.git/config` are read-only: the
  host runs them. Ask the user to change them.