PARSE VALIDATE REQUEST EXECUTE AI COMMAND SANDBOX FILTER key: writable_roots NETWORK FILTER key: allowed_hosts APPROVAL GATE key: require_auth TERMINAL EXECUTION BLOCKED