{"id":"act_classical_shell_ast_sandbox","name":"零信任 AST 沙箱执行卡片","dimension":"act","school":"classical","description":"5 层路径穿越阻断、Shell AST 语法树高危命令过滤、环境变量机密脱敏与 SAGA 逆向补偿。","parameters_schema":{"properties":{"command":{"description":"待执行 Shell 指令","type":"string"},"workspace_root":{"description":"沙箱绝对受限主根","type":"string"}},"required":["command","workspace_root"],"type":"object"},"output_schema":{"properties":{"stderr":{"type":"string"},"stdout":{"type":"string"},"success":{"type":"boolean"}},"type":"object"},"default_timeout_secs":30,"tags":["AST 沙箱","零信任安全","命令拦截"],"origin_chapter":"第 28 篇：Shell AST 沙箱与路径拦截"}