Native Kernel Confinement

LumenFlow runs autonomous subprocess tools only inside a confinement boundary.

• Linux. Tools run inside a sandbox. Filesystem and network access follow the tool’s declared scope and the workspace policy.
• macOS and Windows. Native kernel confinement is not shipped. The kernel does not run autonomous subprocess tools on these hosts.

A host that cannot provide the boundary refuses the tool before anything starts. The refusal names the reason. LumenFlow does not fall back to an unsandboxed run.

Check the posture on a host

Run lumenflow:doctor to see the confinement posture the current host provides. The output shows whether the boundary is available and, if it is not, the reason.

Provider-backed review

Provider-backed review is not available. Review that needs a model provider does not run on any host until it ships.