bwrap
:wine_glass: Command-line tool to run Windows apps with Wine and bwrap/bubblewrap isolation on Linux
Run your coding agent in a bubble.
Least-privilege filesystem sandbox & context guardrails for AI agents
