---
url: >-
  https://adk.nht.io/api/@nhtio/adk/batteries/sandbox/variables/E_SANDBOX_PATH_ESCAPE.md
description: >-
  Thrown when a model-supplied path is an UNAMBIGUOUS escape or an unsupported
  form.
---

# Variable: E\_SANDBOX\_PATH\_ESCAPE

```ts
const E_SANDBOX_PATH_ESCAPE: CreatedException<[string]>;
```

Defined in: [src/batteries/sandbox/exceptions.ts:84](https://github.com/NHTIO/ADK/blob/v1.20260824.1/src/src/batteries/sandbox/exceptions.ts#L84)

Thrown when a model-supplied path is an UNAMBIGUOUS escape or an unsupported form.

## Remarks

Only the refuse-outright set of LLM-operator rule 1 reaches this: a NUL byte anywhere, a leading
`~`, any leading drive letter, a device/verbatim prefix, a UNC form, and a `../` that still escapes
after lexical resolution. A leading `/` does NOT — it normalises to the sandbox root, because the
model's world IS the sandbox and refusing it would punish the model for a distinction we
deliberately hid from it. Message template is bare `'%s'` so the narrator text arrives unprefixed.