internal/

Package readonly provides client-side command validation for read-only golden VM access.

Package redact provides PII/sensitive data redaction.

Package sandbox defines the canonical types and service interface for sandbox operations.

Package telemetry provides anonymous usage telemetry via PostHog.