Invariants
- POSIX remains the primary interface for agents.
- Filesystem-level access control remains the safety boundary.
Current state
Data plane
- Batch materialization is production-ready.
- Script output sync to host paths is available today.
Execution plane
- Docker-backed local sandboxes are available.
- Mount permissions support
ro,rw, andrwcopy.
In progress
- Connector framework for SaaS and storage backends.
- Improved Linux and macOS compatibility.
Planned
- Live sync engine for incremental bidirectional updates.
- Network-mountable filesystem for remote sandbox providers.
- Per-agent mount policies with isolated data views.
- Lazy-loading file strategies for faster sandbox startup.
Security pipeline direction
Amika is evolving toward a filter pipeline:- Inbound redaction and tokenization
- Agent file access inside constrained mounts
- Outbound validation and approval before write-back