pelikhan · Sep 29, 2026 · Sep 29, 2026 · Sep 29, 2026 · Sep 29, 2026 · Sep 29, 2026
diff --git a/.changeset/normalize-sandbox-fields.md b/.changeset/normalize-sandbox-fields.md
diff --git a/.github/workflows/smoke-claude.lock.yml b/.github/workflows/smoke-claude.lock.yml
diff --git a/.github/workflows/smoke-claude.md b/.github/workflows/smoke-claude.md
@@ -54,7 +54,7 @@ sandbox:
   agent:
     config:
       filesystem:
-        allowWrite:
+        allow-write:
           - /tmp/gh-aw/agent
 tools:
   agentic-workflows:

diff --git a/.github/workflows/smoke-pi.lock.yml b/.github/workflows/smoke-pi.lock.yml
diff --git a/.github/workflows/smoke-pi.md b/.github/workflows/smoke-pi.md
@@ -28,7 +28,7 @@ sandbox:
   agent:
     config:
       filesystem:
-        allowWrite:
+        allow-write:
           - ${{ github.workspace }}
           - /tmp/gh-aw/agent
 runtimes:

diff --git a/.github/workflows/step-name-alignment.lock.yml b/.github/workflows/step-name-alignment.lock.yml
diff --git a/.github/workflows/step-name-alignment.md b/.github/workflows/step-name-alignment.md
@@ -55,7 +55,7 @@ sandbox:
   agent:
     config:
       filesystem:
-        allowWrite:
+        allow-write:
         - /tmp/gh-aw/agent
 name: Step Name Alignment
 timeout-minutes: 30

diff --git a/docs/public/editor/autocomplete-data.json b/docs/public/editor/autocomplete-data.json
@@ -893,42 +893,42 @@
                   "desc": "Agent container image that runs the agentic engine.",
                   "leaf": true
                 },
-                "apiProxy": {
+                "api-proxy": {
                   "type": "string",
                   "desc": "API proxy sidecar image that holds provider credentials.",
                   "leaf": true
                 },
-                "cliProxy": {
+                "cli-proxy": {
                   "type": "string",
                   "desc": "CLI proxy sidecar image used by tools.github.mode: gh-proxy, integrity-reactions, or raw --difc-proxy-host AWF argume...",
                   "leaf": true
                 },
-                "buildTools": {
+                "build-tools": {
                   "type": "string",
                   "desc": "Build-tools image used as the chroot sysroot base on runner.topology: arc-dind.",
                   "leaf": true
                 },
-                "dohProxy": {
+                "doh-proxy": {
                   "type": "string",
                   "desc": "DNS-over-HTTPS proxy image required when legacy-security raw AWF arguments enable --dns-over-https.",
                   "leaf": true
                 },
-                "enclaveScript": {
+                "enclave-script": {
                   "type": "string",
                   "desc": "Script enclave image.",
                   "leaf": true
                 },
-                "enclaveAgent": {
+                "enclave-agent": {
                   "type": "string",
                   "desc": "Agent enclave image.",
                   "leaf": true
                 },
-                "enclaveMcpServer": {
+                "enclave-mcp-server": {
                   "type": "string",
                   "desc": "Shared enclave MCP server image required whenever any enclave is enabled.",
                   "leaf": true
                 },
-                "dindStaging": {
+                "dind-staging": {
                   "type": "string",
                   "desc": "Docker-in-Docker staging image required when raw AWF arguments enable directory or engine-binary pre-staging.",
                   "leaf": true
@@ -965,11 +965,11 @@
                   "type": "object",
                   "desc": "Filesystem access control configuration for the agent within the sandbox."
                 },
-                "ignoreViolations": {
+                "ignore-violations": {
                   "type": "object",
                   "desc": "Map of command patterns to paths that should ignore violations"
                 },
-                "enableWeakerNestedSandbox": {
+                "enable-weaker-nested-sandbox": {
                   "type": "boolean",
                   "desc": "Enable weaker nested sandbox mode (recommended: true for Docker access)",
                   "enum": [true, false],
@@ -1010,28 +1010,28 @@
               "type": "object",
               "desc": "Filesystem access control configuration for sandboxed workflows.",
               "children": {
-                "denyRead": {
+                "deny-read": {
                   "type": "array",
                   "desc": "Array of path patterns that deny read access in the sandboxed environment.",
                   "array": true
                 },
-                "allowWrite": {
+                "allow-write": {
                   "type": "array",
                   "desc": "Array of path patterns that allow write access in the sandboxed environment.",
                   "array": true
                 },
-                "denyWrite": {
+                "deny-write": {
                   "type": "array",
                   "desc": "Array of path patterns that deny write access in the sandboxed environment.",
                   "array": true
                 }
               }
             },
-            "ignoreViolations": {
+            "ignore-violations": {
               "type": "object",
               "desc": "When true, log sandbox violations without blocking execution."
             },
-            "enableWeakerNestedSandbox": {
+            "enable-weaker-nested-sandbox": {
               "type": "boolean",
               "desc": "When true, allows nested sandbox processes to run with relaxed restrictions.",
               "enum": [true, false],
@@ -1063,7 +1063,7 @@
               "desc": "Arguments for docker run",
               "array": true
             },
-            "entrypointArgs": {
+            "entrypoint-args": {
               "type": "array",
               "desc": "Arguments to add after the container image (container entrypoint arguments)",
               "array": true

diff --git a/docs/src/content/docs/reference/faq.md b/docs/src/content/docs/reference/faq.md
@@ -220,7 +220,7 @@ sandbox:
     images:
       squid: registry.example.com/approved/squid:v0.28.8@sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef
       agent: registry.example.com/approved/agent:v0.28.8@sha256:1123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef
-      apiProxy: registry.example.com/approved/api-proxy:v0.28.8@sha256:2123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef
+      api-proxy: registry.example.com/approved/api-proxy:v0.28.8@sha256:2123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef
 ```
 
 > [!NOTE]