# Silk Code Sandbox and Permissions

## Permission model

- Reads can run without interruption.
- Writes and installs request approval.
- Destructive commands, pushes, and merges require explicit approval unless granted for the session.

## Checkpoints

Silk Code snapshots files before agent changes. Use the GUI or `/revert` to undo a turn.

## Remote execution

Run commands in a disposable container instead of the host machine. Sandboxes can be self-hosted or run through the bundled Cloudflare Worker.

```bash
silkcode sandbox
```