OpenSandbox Enhancement Proposals
OpenSandbox Enhancement Proposals (OSEPs) are the mechanism for proposing major features, architectural changes, or modifications to the core API and security model. Small bug fixes and minor improvements do not require an OSEP.
See the OSEP contributing guide for information on how to create and merge proposals.
Proposal Index
| OSEP | Title | Status | Last Updated |
|---|---|---|---|
| OSEP-0001 | FQDN-based Egress Control | implemented | 2026-01-22 |
| OSEP-0002 | kubernetes-sigs/agent-sandbox Support | implemented | 2026-01-23 |
| OSEP-0003 | Volume Support | implementing | 2026-02-11 |
| OSEP-0004 | Pluggable Secure Container Runtime Support | implemented | 2026-02-09 |
| OSEP-0005 | Client-Side Sandbox Pool | implementing | 2026-03-09 |
| OSEP-0006 | Developer Console for Sandbox Operations | implementable | 2026-03-06 |
| OSEP-0007 | Fast Sandbox Runtime Support | provisional | 2026-02-08 |
| OSEP-0008 | Pause and Resume via Rootfs Snapshot | implementing | 2026-03-13 |
| OSEP-0009 | Auto-Renew Sandbox on Ingress Access | implemented | 2026-03-23 |
| OSEP-0010 | OpenTelemetry Metrics and Logs (execd, egress, and ingress) | implementing | 2026-04-12 |
| OSEP-0011 | Secure Access on GetEndpoint and Signed Endpoint | implemented | 2026-04-25 |
| OSEP-0012 | Credential Vault and Credential Proxy | implemented | 2026-06-23 |
| OSEP-0013 | Isolated Execution API | implementing | 2026-06-23 |
| OSEP-0014 | Multi-Tenancy Support for Kubernetes Runtime | draft | 2026-04-29 |
Status Definitions
| Status | Meaning |
|---|---|
| draft | Proposal is under initial development, not yet accepted |
| provisional | Proposal accepted in principle, design may still evolve |
| implementable | Design is final and ready for implementation |
| implementing | Implementation is in progress |
| implemented | Fully implemented and available |
Submitting a Proposal
TIP
Before writing a full OSEP, consider opening a GitHub Issue or Discussion to gauge community interest and get early feedback on your idea.
To submit a new OSEP:
- Fork the repository
- Copy the OSEP template
- Fill in the proposal details
- Submit a pull request
See the OSEP contributing guide for the full process.