Code Interpreter

Code interpreter helps users and agents analyze files, run scripts, or process data. It is a high-impact capability and should be enabled only when the deployment has isolation and audit controls.

Capability Boundary

Area	Guidance
Runtime	Use an isolated execution environment without sensitive core-service permissions.
File Access	Allow access only to uploaded files or workspace artifacts required for the task.
Network Access	Restrict internet, internal network, and credential access according to policy.
Audit	Record task, input, output, errors, and resource usage.

Before Configuration

Confirm the execution environment, resource limits, and cleanup policy are available.
Define which users, groups, or agents can use code interpreter.
Do not expose database passwords, API keys, or production credentials to the runtime.

Verification

Run a low-risk script to validate execution, output, and file handling.
Test that unauthorized file, network, or credential access is denied.
Confirm errors do not leak internal paths, secrets, or stack details.