> ## Documentation Index
> Fetch the complete documentation index at: https://012e27a-docs-2.manicule.dev/llms.txt
> Use this file to discover all available pages before exploring further.
> For every page in one file, fetch https://012e27a-docs-2.manicule.dev/llms-full.txt (large).
> To search and read these docs as tools, connect the MCP server at https://012e27a-docs-2.manicule.dev/api/mcp.
> Every agent surface: https://012e27a-docs-2.manicule.dev/.well-known/llms-manifest.json

# Execution Isolation & Security (/security/sandboxing)

<!-- agent-signals: reading_time_min: 1 · est_tokens: 238 · updated: 2026-11-12 -->
Related: [Security & Privacy](/security/overview.md), [Data Privacy & Zero Code Training](/security/privacy.md), [Encrypted Token Vault](/security/token-vault.md)

> How Desktop and Cloud Studio keep agent execution contained.

BhaiCode applies isolation on both surfaces, with different mechanisms for each.

## Desktop process isolation

* **Path denylist**: agents cannot access sensitive system directories (`/etc`, `~/.ssh`,
  `~/.aws`, `C:\Windows\System32`).
* **Process boundaries**: shell commands run in dedicated PTY child processes under your user
  account, within standard OS permission boundaries.
* **Approval interceptions**: commands that need network access or run external scripts are
  gated by the [Transparency Dock](/desktop/transparency).

## Cloud Studio isolation

* **In-browser WebAssembly**: frontend applications compile in-browser, inside your browser's
  sandbox.
* **Ephemeral build containers**: heavy compilation runs in single-use containers with strict
  CPU, memory, and timeout limits.
* **Immediate cleanup**: the build environment is destroyed as soon as the task finishes.