Security evidence

4/4 static checks · last policy POLICY_DENIED · model deepseek-v4.1-flash-1017

Enable BIDBUSTER_POLICY_DOCKER=1 with the sandbox compose overlay (Docker socket read-only) for live POLICY_DENIED in network-none. Workers use docker run --rm with memory/CPU caps and subprocess timeouts (see last run containment panel).

• Worker env allowlist

  PASS

  Workers never receive DATABASE_URL or INFERENCE_API_KEY

• Inference on controller only

  PASS

  INFERENCE_* set on API process, not worker subprocess env

• Policy egress probe

  RUN DEPENDENT

  BIDBUSTER_POLICY_DOCKER=1 → POLICY_DENIED in network-none container

• Worker resource caps

  PASS

  Subprocess 120s; policy docker 60s; docker run --memory 256m --cpus 0.5

• Disposable workers

  PASS

  Each analyze spawns fresh subprocess or docker run --rm (destroyed after task)