> ## Documentation Index
> Fetch the complete documentation index at: https://docs-2.manicule.dev/docs/llms.txt
> Use this file to discover all available pages before exploring further.
> For every page in one file, fetch https://docs-2.manicule.dev/docs/llms-full.txt (large).
> To search and read these docs as tools, connect the MCP server at https://docs-2.manicule.dev/docs/api/mcp.
> Every agent surface: https://docs-2.manicule.dev/docs/.well-known/llms-manifest.json

# Execution Isolation & Security (/docs/security/sandboxing)

<!-- agent-signals: reading_time_min: 1 · est_tokens: 260 · updated: 2026-11-11 -->
Related: [Data Privacy & Zero Customer Code Training](/docs/security/privacy.md), [Encrypted Token Vault](/docs/security/token-vault.md)

> Local-first safety and ephemeral cloud container isolation in BhaiCode.

BhaiCode implements multi-layered isolation across both Desktop and Cloud Studio.

***

## Desktop Process Isolation

* **Path Denylist**: Agents are prevented from accessing sensitive system directories (`/etc`, `~/.ssh`, `~/.aws`, `C:\Windows\System32`).
* **Process Boundaries**: Shell commands run in dedicated PTY child processes under your user account with standard OS permission boundaries.
* **Approval Interceptions**: Commands requiring network access or external scripts are gated by the [Transparency Dock](/docs/desktop/transparency).

***

## Cloud Studio Ephemeral Isolation

* **In-Browser WebAssembly**: Frontend applications compile in-browser via WebAssembly, isolating execution within your browser sandbox.
* **Ephemeral Build Containers**: Heavy compilation tasks run in single-use, isolated micro-containers with strict CPU, memory, and timeout limits.
* **Immediate Cleanup**: Build environments are destroyed immediately upon task completion.