Updated August 12, 2026

On this page

Two startup guards: the bare-run threshold that pushes full-suite runs through the sandbox runner, and refusal of a temp root inside the project root.

#python.src.stricttest.sandbox

#`python.src.stricttest.sandbox`

Bare-run refusal and the TMPDIR-inside-repo refusal.

Two independent startup guards:

Bare-run threshold. A run collecting MORE than the threshold is treated

as a full-ish run and must go through the sandbox runner (which exports the sandbox env var). Small targeted runs stay bare-runnable so the inner development loop is fast -- the always-on env floor plus the push/chdir/socket guards still protect those.

TMPDIR-inside-repo refusal. Fixture temp directories inside the repo let

unanchored git commands walk UP into the real repo and commit junk. Both the pytest --basetemp and the TMPDIR environment variable are checked against the repository root, which is derived from pytest's rootpath.

#`enforce_threshold`

python

def enforce_threshold(settings: Settings, count: int) -> None

Raise UsageError if a bare run of count tests is too large.

No-op when the project declared stricttest_sandbox_required = false, when the run is already inside the sandbox, or when the run is a small targeted slice.

#`enforce_tmp_outside_repo`

python

def enforce_tmp_outside_repo(repo_root: Path, basetemp) -> None

Refuse to run if the temp root is inside the repository.

Junk-commit incidents happen because a TMPDIR (or pytest basetemp) points inside the repo: fixtures create non-git directories there, and unanchored git commands walk UP into the real repo and commit junk. Fail loudly at startup rather than let that recur.

More tools from this site

claudestream Drive Claude Code from Python: run it as a subprocess and read its output as typed events, with async and sync sessions, sandbox policies, and tools you define in Python

claudewheel A TUI Claude Code Launcher that lets you have more than one profile, manage sessions lifecycle, pick the exact CC version, model to use (even older unlisted ones), pick which GitHub account to use, etc.

dirstat Fast, single-binary directory statistics CLI: every file under a tree grouped by format, with counts, sizes, and lines of code, as a colored terminal table or as JSON

fastware A batteries-included ASGI framework: msgspec JSON, a managed Granian server, dependency injection, SSE, WebSockets, auth, and a test client

go-toml-edit Zero-dep TOML editing library for Go with comment preservation

howmuchleft The fastest Claude Code statusline: context window, 5-hour, and weekly limit usage as three customizable gradient bars, rendering in about 6 ms

orxtra

pgdesign

predraw Declarative rendering pipeline: describe a scene in JSON and get SVG, PNG and WebP out, with light and dark style tokens, reusable components and text converted to path outlines

reposummary Turn a git repository's history into a Markdown journal: pick a time window or revision range and get a readable digest of what changed, optionally narrated by an LLM

rlsbl Release orchestration and project scaffolding CLI that bumps versions, validates a structured JSONL changelog, tags only the commit CI verified, and publishes to npm, PyPI, Go and more

safegit git wrapper CLI that gives each commit its own temporary index and retries ref updates on conflict, so concurrent agents share one repository

saferm Command-line replacement for rm that archives every deletion with a mandatory reason and the context it ran in, so deleted files can be listed, inspected and restored

selfdoc Static Site Generator that builds a project's documentation site directly from its source code, so the docs can never drift from the code they describe, with SEO/AEO, first-class blog, search, and cross-project linking built in

strictcli

wesktop A Python framework that turns an ASGI web app into a desktop application, serving it from a local Granian server and displaying it in a native OS window via pywebview

#python.src.stricttest.sandbox

#python.src.stricttest.sandbox

#enforce_threshold

#enforce_tmp_outside_repo

More tools from this site

#`python.src.stricttest.sandbox`

#`enforce_threshold`

#`enforce_tmp_outside_repo`