Design decision (settled): network stays ON by default; the sandbox gains per-domain control with approve-once / approve-always, mirroring the edit-approval flow (Answer::Always + persisted grants). turbo remains the all-off switch; yolo bypasses the sandbox entirely.
Needs the deferred network proxy layer: route sandboxed traffic through a local proxy that pauses unknown domains for approval and persists allow rules. Complements #13 (Linux backend) and the existing seatbelt profile.
Design decision (settled): network stays ON by default; the sandbox gains per-domain control with approve-once / approve-always, mirroring the edit-approval flow (
Answer::Always+ persisted grants).turboremains the all-off switch; yolo bypasses the sandbox entirely.Needs the deferred network proxy layer: route sandboxed traffic through a local proxy that pauses unknown domains for approval and persists allow rules. Complements #13 (Linux backend) and the existing seatbelt profile.