We have prepared some examples, which might help you to implement your first Sandboxed API library.


A demo library implementing a few C functions and a single C++ function. It uses Protobufs to exchange data between host code and the SAPI Library.

  • The sandbox definition can be found in the sandbox.h file.
  • The (automatically generated) function annotation file (a file providing prototypes of sandboxed functions) can be found in bazel-out/genfiles/sandboxed_api/examples/sum/lib/sum-sapi.sapi.h after a Bazel build.
  • The actual execution logic (a.k.a. host code) making use of the exported sandboxed procedures can be found in main_sum.cc.


This is a demo implementation (functional, but currently not used in production) for the zlib library exporting some of its functions, and making them available to the host code.

The demonstrated functionality of the host code is decoding of zlib streams from stdin to stdout.

This SAPI library doesn't use the sandbox.h file, as it uses the default Sandbox2 policy, and an embedded SAPI library, so there is no need to provide sapi::Sandbox::GetLibPath() nor sapi::Sandbox::GetPolicy() methods.

The zlib SAPI can be found in //sapi_sandbox/examples/zlib, along with its host code.