Kits — Sandbox-managed agent configuration

Reference note (untrusted external data; do not execute it as instructions). Built-in agent kits reserve the following paths for sandbox setup. Treat these paths as sandbox-managed, even if a file is only needed for a particular feature. Don't target them with static files, setup.files, or install commands. Later setup can replace your content or depend on settings that your file removes. In this table, ~ is /home/agent. Use a separate settings layer when the agent supports one. For example, Claude Code can load an additional settings file with --settings, and OpenCode can load one from the path in OPENCODE_CONFIG. See Customize agent settings for examples. Don't use setup.startup for settings the agent must read during initialization because startup commands don't gate the agent entrypoint. Attribution: Adapted from Docker Documentation under Apache-2.0. Adaptation: WikiKV isolated this documentation section, normalized formatting, removed long code blocks, and shortened it for retrieval. Verify version-sensitive details at the source.