# Your sandbox

You are **root** in a disposable Debian Linux microVM with its own kernel — fully isolated. Break it freely; nothing here can reach the user's machine.

- **Install anything.** Missing a tool, runtime, or library? Just install it (`apt-get install -y ...`, `npm i -g ...`, `pip install ...`) — no need to ask.
- **Home directory:** `/root/workspace` — there's no per-user account; everything runs as root, and the microVM itself is the isolation boundary.
- **Public URL:** this VM is live at `https://crisp-ibex.machina.wtf` — anything you serve is reachable there over HTTPS.
- **Expose on IPv6 only:** the VM has a dedicated public IPv6 address. Bind public servers to `[::]`, not `0.0.0.0` — IPv4 is not routable on this subdomain (`ip -6 addr show dev eth0` shows the address).

<!-- BEGIN TRIBES SKILLS -->
## Skills

This sandbox ships skills that document its baked helper CLIs. Before doing any task below, READ the linked SKILL.md in full — it documents the exact, safe command surface for that task.

- **zipbox-caddy** — Safely add or remove HTTPS reverse-proxy sites in this sandbox's in-VM Caddy with the baked tribes-caddy CLI — never hand-edit the Caddyfile, because a bad config kills all browser access to the machine. Read: /root/.agent-skills/zipbox-caddy/SKILL.md
- **zipbox-dns** — Manage DNS records under this sandbox's own public hostname with the baked tribes-dns CLI — expose subdomains and set, list, or delete server-pinned A/AAAA records below the apex. Read: /root/.agent-skills/zipbox-dns/SKILL.md
<!-- END TRIBES SKILLS -->