Repository navigation
sandbox network grants don't persist after approving — network access stays denied, fails with context canceled #703
Description
Activity
Checking now!
Reacted by AnuConfirmed a network-classification gap affecting this repro: Zero classified
git cloneas network-sensitive, but notgit push. As a result, the initial approval forgit pushdid not enable network access in the sandbox and the command depended on post-failure denial detection, which is unreliable when a custom transport exits withcontext canceled.I opened #726 to classify
git pushas network access before execution, so approving the prompt applies the temporary network-enabled sandbox profile immediately.Regression coverage includes the reported custom-remote shape (
git push gitlawb main) at both analyzer and risk-classifier layers. Full tests and vet pass; govulncheck reports no vulnerabilities; diff-scoped lint reports 0 issues.One clarification: an absent
sandbox-grants.json, an emptysandbox grants list, and the base policy continuing to shownetwork: denyare expected for allow-once/session network approvals. Network grants are temporary in-memory overlays rather than persistent shell grants.- added 5 commits that reference this issue
on Aug 16, 2026 - added a commit that references this issue
on Sep 25, 2026
i think i found a bug with zero's sandbox network permissions.
i was trying to run
git pushto agitlawb://remote. zero prompted me for network access, i clicked allow, but the command still failed withcontext canceled. i retried several times and approved it each time, but it kept failing.i checked the sandbox state:
and
zero sandbox grants listreturns:~/.config/zero/sandbox-grants.jsonalso doesn't exist.so it looks like clicking allow isn't actually persisting or applying the network grant, and the sandbox continues blocking the network request. the
context cancelederror also makes it pretty difficult to tell that the sandbox is the cause.running the same
git pushoutside of zero's sandbox worked fine.environment
macos-seatbeltrepro
screenshot
(adding below — will drop it in as a comment)