Image Prompts for Practical Agent Sandbox Configurations
Table of Contents
1. How this file works
The standard wal.sh banner pipeline reads banner.prompt in the note
directory and produces banner.png via
gmake banner DIR=site/research/agent-sandbox-practical-configs (see
.claude/skills/banner/SKILL.md). This file is the variants registry
— it holds every prompt considered for this note, including the one
currently active.
To switch the active prompt, copy the chosen option's text into
banner.prompt and rerun gmake banner.
2. Header Image Prompts
The note opens with the 5-gate CTO control-flow diagram, so the banner should evoke the sequence of gates (not the individual config). Lead candidate: Option A (chamber sequence with a dotted line through every door, exiting into a sixth chamber that holds the egress valve).
2.1. Option A: Chamber sequence with egress valve (active in banner.prompt)
Wide horizontal leaderboard banner, monochrome grayscale, flat minimal editorial style. A horizontal sequence of five small enclosed rectangular chambers arranged left-to-right, each with a thin geometric perimeter wall and a single small door on its right side. A faint dotted line passes through every door in sequence, exiting on the right into a sixth chamber that contains only a single small valve. Clean geometric line-art, generous negative space above and below. No text, no letters, no numbers, no faces, no logos.
Captures: the 5-gate control flow, the egress chokepoint as the sixth (distinct) chamber, the proxy as a valve (one thing you can revoke).
2.2. Option B: Nested concentric walls
Wide horizontal leaderboard banner, monochrome grayscale, flat minimal editorial style. Five concentric thin geometric walls forming nested rectangular enclosures, each smaller than the last; at the innermost center, a single sealed crate. A thin pipe extends from the crate through every wall to the outside, terminating in a small valve. Generous negative space on either side. No text, no letters, no numbers, no faces, no logos.
Captures: the defense-in-depth reading of the gates (each wall is a distinct enforcement point); the pipe + valve = the credential path through the proxy.
2.3. Option C: Control panel schematic
Wide horizontal leaderboard banner, monochrome grayscale, flat minimal editorial style. A wide schematic control panel laid out horizontally, with five identical labeled circular gauge cutouts arranged in a row, each connected by a thin geometric pipe to a sixth larger valve at the right edge. Clean technical line-art, generous negative space above and below. No text, no letters, no numbers, no faces, no logos.
Captures: the "runbook" feel (this note IS a runbook); each gate as a measurable enforcement point; the proxy as the final actuator.
3. Generation log
| Date | Variant | Host | Result | Notes |
|---|---|---|---|---|
| pending | A chambers | mini.local | -- | first run |
| pending | B nested | mini.local | -- | |
| pending | C panel | mini.local | -- |