Raise agent sandbox hardening baseline to 50% of eligible workflows

.github/workflows/ace-editor.md

@@ -42,9 +42,11 @@ jobs:
             });
 imports:
   - shared/otlp.md
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
-
 ---
 
 Classic action that generates an ACE editor session link on pull request comment slash command.

.github/workflows/agent-performance-analyzer.md

@@ -13,6 +13,9 @@ permissions:
 engine:
   id: copilot
   copilot-sdk: true
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   bash: [":*"]

.github/workflows/agent-persona-explorer.md

@@ -35,6 +35,9 @@ experiments:
 # - Output limits: Concise documentation (<1000 words with progressive disclosure)
 # - Target: 30-50% token reduction while maintaining quality
 # Note: max-turns not available for default Copilot engine (Claude only)
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   github:

.github/workflows/agentic-token-trend-audit.md

@@ -28,6 +28,9 @@ safe-outputs:
   upload-asset:
     max: 5
     allowed-exts: [.png, .jpg, .jpeg, .svg]
+sandbox:
+  agent:
+    sudo: false
 tools:
   agentic-workflows:
   bash:

.github/workflows/api-consumption-report.md

@@ -13,6 +13,9 @@ permissions:
   discussions: read
 tracker-id: api-consumption-report-daily
 engine: claude
+sandbox:
+  agent:
+    sudo: false
 tools:
   cache-memory: true
   cli-proxy: true

.github/workflows/approach-validator.md

@@ -22,6 +22,9 @@ imports:
   - shared/safe-output-upload-artifact.md
   - shared/reporting.md
   - shared/otlp.md
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   github:

.github/workflows/architecture-guardian.md

@@ -43,6 +43,9 @@ imports:
       labels: [architecture, automated-analysis, cookie]
       assignees: [copilot]
   - shared/otlp.md
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   bash:

.github/workflows/aw-failure-investigator.md

@@ -29,6 +29,9 @@ experiments:
     analysis_type: mann_whitney
     tags: [tone, output-quality, triage]
     issue: 36105
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   github:

.github/workflows/bot-detection.md

@@ -14,6 +14,9 @@ permissions:
   actions: read
 imports:
   - shared/otlp.md
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   github:
@@ -832,7 +835,6 @@ safe-outputs:
 timeout-minutes: 10
 strict: true
 
-
 ---
 
 # Bot Detection

.github/workflows/brave.md

@@ -30,6 +30,9 @@ safe-outputs:
     run-success: "✅ Research complete. [{workflow_name}]({run_url}) has returned with results."
     run-failure: "❌ Search failed. [{workflow_name}]({run_url}) {status}. Unable to retrieve web sources."
 timeout-minutes: 10
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
 features:

.github/workflows/breaking-change-checker.md

@@ -13,6 +13,9 @@ engine:
   id: copilot
   copilot-sdk: true
 tracker-id: breaking-change-checker
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   github:

.github/workflows/chaos-pr-bundle-fuzzer.md

@@ -14,6 +14,9 @@ engine:
   id: pi
   model: copilot/gpt-5.4
 strict: true
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   github:

.github/workflows/claude-code-user-docs-review.md

@@ -26,6 +26,9 @@ network:
     - defaults
     - github
 
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   cache-memory: true

.github/workflows/cli-version-checker.md

@@ -18,6 +18,9 @@ imports:
   - ../skills/jqschema/SKILL.md
   - shared/reporting.md
   - shared/otlp.md
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   web-fetch:

.github/workflows/cloclo.md

@@ -27,6 +27,9 @@ imports:
   - shared/mcp/serena-go.md
   - shared/reporting.md
   - shared/otlp.md
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   agentic-workflows:

.github/workflows/code-simplifier.md

@@ -33,6 +33,9 @@ network:
   allowed:
     - go
 
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   github:
@@ -140,7 +143,6 @@ steps:
 
 timeout-minutes: 30
 strict: true
-
 ---
 
 # Code Simplifier Agent

.github/workflows/codex-github-remote-mcp-test.md

@@ -11,6 +11,9 @@ permissions:
 engine: codex
 imports:
   - shared/otlp.md
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   github:

.github/workflows/commit-changes-analyzer.md

@@ -19,6 +19,9 @@ max-turns: 100
 engine:
   id: pi
   model: copilot/gpt-5.4
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   github:

.github/workflows/contribution-check.md

@@ -23,6 +23,9 @@ engine:
 
 imports:
   - shared/otlp.md
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   github:

.github/workflows/copilot-agent-analysis.md

@@ -54,6 +54,9 @@ imports:
   - shared/otlp.md
 timeout-minutes: 15
 
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   github:

.github/workflows/copilot-centralization-drilldown.md

@@ -156,6 +156,9 @@ steps:
             report_style: "Use issue sections with visible summary and one fenced draft block."
           }
         ' > /tmp/gh-aw/data/derived-plan.json
+sandbox:
+  agent:
+    sudo: false
 ---
 
 # Copilot Centralization Drilldown

.github/workflows/copilot-centralization-optimizer.md

@@ -8,6 +8,9 @@ on:
 permissions:
   contents: read
   copilot-requests: write
+sandbox:
+  agent:
+    sudo: false
 tools:
   repo-memory:
     branch-name: memory/copilot-centralization-optimizer

.github/workflows/copilot-cli-deep-research.md

@@ -32,6 +32,9 @@ engine:
   copilot-sdk: true
 strict: true
 timeout-minutes: 20
+sandbox:
+  agent:
+    sudo: false
 tools:
   bash:
   - "*"

.github/workflows/copilot-pr-merged-report.md

@@ -22,6 +22,9 @@ engine:
   copilot-sdk: true
 strict: false
 
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   github: false

.github/workflows/copilot-session-insights.md

@@ -24,6 +24,9 @@ network:
     - github
     - python
 
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   github:

.github/workflows/craft.md

@@ -18,6 +18,9 @@ engine:
   copilot-sdk: true
 imports:
   - shared/otlp.md
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   edit:

.github/workflows/daily-agentrx-trace-optimizer.md

@@ -30,6 +30,9 @@ engine: claude
 strict: true
 network:
   allowed: [defaults, python-native, github]
+sandbox:
+  agent:
+    sudo: false
 tools:
   agentic-workflows: true
   bash: true

.github/workflows/daily-ambient-context-optimizer.md

@@ -16,6 +16,9 @@ strict: true
 max-daily-ai-credits: 10000
 network:
   allowed: [defaults, github]
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   github:

.github/workflows/daily-architecture-diagram.md

@@ -34,6 +34,9 @@ experiments:
     tags: [output-format, cost, latency]
     issue: 31926
 
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   edit:

.github/workflows/daily-assign-issue-to-user.md

@@ -15,6 +15,9 @@ permissions:
 engine:
   id: copilot
   copilot-sdk: true
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   github:

.github/workflows/daily-aw-cross-repo-compile-check.md

@@ -16,6 +16,9 @@ tracker-id: daily-aw-cross-repo-compile-check
 max-turns: 140
 engine:
   id: claude
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   github:

.github/workflows/daily-awf-spec-compiler-surfacing.md

@@ -14,6 +14,9 @@ tracker-id: daily-awf-spec-compiler-surfacing
 engine:
   id: pi
   model: copilot/gpt-5.4
+sandbox:
+  agent:
+    sudo: false
 tools:
   cli-proxy: true
   github:

.github/workflows/daily-cache-strategy-analyzer.md

@@ -37,6 +37,9 @@ network:
   allowed:
     - "github.com"
     - "api.github.com"
+sandbox:
+  agent:
+    sudo: false
 tools:
   cache-memory: true
 safe-outputs: