# Environment: opencode-sandbox

You run inside opencode-sandbox. Load the `opencode-sandbox` skill before working with the
network, files outside the project, git remotes, Docker, or worktrees. In short:

- You may write only to the project, its worktrees and paths listed in `OCSB_RW`; the rest of
  the system is read-only. "Read-only file system" is the sandbox, not a bug — do not retry.
- Network goes through a filtering proxy. A 403 from the proxy is policy: tell the user which
  domain you need and why; do not try to bypass it.
- You cannot open a browser; give the user the link instead.