Image Prompts for Practical Agent Sandbox Configurations

Table of Contents

1. How this file works

The standard wal.sh banner pipeline reads banner.prompt in the note directory and produces banner.png via gmake banner DIR=site/research/agent-sandbox-practical-configs (see .claude/skills/banner/SKILL.md). This file is the variants registry — it holds every prompt considered for this note, including the one currently active.

To switch the active prompt, copy the chosen option's text into banner.prompt and rerun gmake banner.

2. Header Image Prompts

The note opens with the 5-gate CTO control-flow diagram, so the banner should evoke the sequence of gates (not the individual config). Lead candidate: Option A (chamber sequence with a dotted line through every door, exiting into a sixth chamber that holds the egress valve).

2.1. Option A: Chamber sequence with egress valve (active in banner.prompt)

Wide horizontal leaderboard banner, monochrome grayscale, flat minimal editorial style. A horizontal sequence of five small enclosed rectangular chambers arranged left-to-right, each with a thin geometric perimeter wall and a single small door on its right side. A faint dotted line passes through every door in sequence, exiting on the right into a sixth chamber that contains only a single small valve. Clean geometric line-art, generous negative space above and below. No text, no letters, no numbers, no faces, no logos.

Captures: the 5-gate control flow, the egress chokepoint as the sixth (distinct) chamber, the proxy as a valve (one thing you can revoke).

2.2. Option B: Nested concentric walls

Wide horizontal leaderboard banner, monochrome grayscale, flat minimal editorial style. Five concentric thin geometric walls forming nested rectangular enclosures, each smaller than the last; at the innermost center, a single sealed crate. A thin pipe extends from the crate through every wall to the outside, terminating in a small valve. Generous negative space on either side. No text, no letters, no numbers, no faces, no logos.

Captures: the defense-in-depth reading of the gates (each wall is a distinct enforcement point); the pipe + valve = the credential path through the proxy.

2.3. Option C: Control panel schematic

Wide horizontal leaderboard banner, monochrome grayscale, flat minimal editorial style. A wide schematic control panel laid out horizontally, with five identical labeled circular gauge cutouts arranged in a row, each connected by a thin geometric pipe to a sixth larger valve at the right edge. Clean technical line-art, generous negative space above and below. No text, no letters, no numbers, no faces, no logos.

Captures: the "runbook" feel (this note IS a runbook); each gate as a measurable enforcement point; the proxy as the final actuator.

3. Generation log

Date Variant Host Result Notes
pending A chambers mini.local -- first run
pending B nested mini.local --  
pending C panel mini.local --