Vouch request: sallyom

[sallyom]

What do you want to work on?

I want to ensure agent harnesses in OpenShell on K8s work well.

Why this change?

I want to add an opt-in ensure_private_subpath to volume_mounts[] for non-root applications with strict state directory filesystem permissions and ownership checks. In K8s, volume-mounted directories are often root-owned because kubelet creates them. OpenShell setsfsGroup to Sandbox GID but it doesn't change the owner UID. This results in directories that are root-owned and group-writeable.

For example, OpenClaw's worker nodes reject any world/group-writeable directories without sticky permissions.

Alternative is an additional pod preparation external to OpenShell that could require elevated permissions or added RBAC.

Checklist

• I wrote this request myself (not AI-generated)
• I have read CONTRIBUTING.md