T

architect-bot 4da8687f2c Document GDScript sandboxing findings and recommendation

Verified all three options from the task against Godot 4.6.2 directly
(godot --headless), rather than trusting the probe scripts' own printed
output from earlier sessions:
- ScriptServer doesn't exist as a class; no disable_os/disable_file_access/
  disable_network project settings exist either. Nothing to configure.
- SubViewport isolates rendering/input only, not script capabilities — a
  script inside one has identical OS/FileAccess/network access.
- Expression is not safe by default (can still reach unsafe methods through
  a base instance); blocklisting dangerous substrings is trivially bypassed.

Recommendation: don't sandbox GDScript in-process (nothing to sandbox
with) — use a narrow non-Turing-complete content DSL for the common case,
and OS-level process isolation only if genuinely general scripting turns
out to be required.

2026-08-17 23:43:48 +00:00

docs/architecture

Document GDScript sandboxing findings and recommendation

2026-08-17 23:43:48 +00:00

sandbox_probe

Document GDScript sandboxing findings and recommendation

2026-08-17 23:43:48 +00:00

project.godot

WIP checkpoint: Research and design GDScript sandboxing approach

2026-08-17 21:33:57 +00:00

README.md

Initial commit

2026-08-17 13:39:51 +00:00

README.md

agp-game

Agentic Game Platform - Godot game built by autonomous agents