A dsh plugin that takes a repository and a goal, dispatches every untrusted command into a disposable Microsandbox microVM on a Vultr VX1 instance, and returns a severity-ranked findings table plus a before/after metric table in which every row carries its command, exit code and SHA-256 — chained into an append-only receipt log.
Voice and bed are synthesised on the beat grid; no stock audio. Beat 6 is marked PENDING B-4: the live containment clip needs a KVM host and is not simulated here.
From node scripts/verify.mjs: 35 deliverables present, 93 files free of forbidden aliases, 12 caps identical in CANON.md, src/caps.ts and sandbox/runner.py, tsc --noEmit clean, no host exec anywhere in src/, two runs produce one head 0f5093fea595.
| Layer | What runs there | What it can reach |
|---|---|---|
| nginx :443 | TLS, HSTS, /healthz | the only public listener |
| dsh on 127.0.0.1:3080 | planning, model calls, receipt append | loopback + api.vultrinference.com |
| Microsandbox microVM | every install, build, test, scanner | nothing on the host; no credentials; caps enforced |
| Plugin, policy gate, receipts, 5 tools | done, tested offline |
| Sandbox runner, caps wire, hostile fixture | written; trips on a KVM host |
| Live containment clip (B-4) | PENDING — needs a KVM host |
| Public demo instance + TLS (B-6) | PENDING — needs a Vultr account and a domain |
This page is the walkthrough and evidence surface, not the deployed app. Every blocker is written down with the exact command that clears it in docs/BLOCKED-EXTERNAL.md.
MIT licensed. Built for the Vultr: Agent Rush Hackathon, track 01 · Blast Radius Zero.