# Sandbox runtime notes

> Source: https://openwop.dev/spec/v2/ext/sandbox-runtime-notes/ · OpenWOP, the open-source protocol for multi-agent workflow orchestration. CC BY 4.0.

> **Status: Note.**

A non-normative note, not a declared family.

| Field | Value |
| --- | --- |
| **witness:** | `unwitnessable` |
| **technical:** | `experimental` |
| **adoption:** | `none` |
| **advertised as** | not advertisable |

`node:vm` is not an isolation model; its demonstrator is implementation history only. The v2 contract is in [`security-defaults.md`](https://openwop.dev/spec/v2/core/security-defaults.html): `sandbox.isolationModel` is one of `wasm`, `process`, `container`, or `vm`, and pack execution is bound to the advertised isolation mode.

*Sources: RFC 0035, RFC 0173.*