Sandboxing Python Packages

microsandbox

🧱 secure, local and programmable sandboxes for AI agents

bandsox

Fast Firecracker microVM manager

akios

AKIOS runtime for secure AI agent execution

sandlock

The lightest AI sandbox. A process-based sandbox for Linux, no container, no VM, no root.

bunkervm

Hardware-isolated Linux sandbox for AI agents — Firecracker MicroVM + MCP

enforcecore

Lightweight runtime enforcement for agentic AI. PII masking, policy checks, and Merkle audit trails as a decorator.

codesafe

An open-source Python library for code encryption, decryption, and safe evaluation using Python's built-in AST module, complete with allowed functions, variables, built-in imports, timeouts, and blocked access to attributes.

branchcontext

Unified branching for speculative execution: filesystem, process, and memory

sandwine

Command-line tool to run Windows apps with Wine and bwrap/bubblewrap isolation

packj

Packj flags "risky" open-source packages in your software supply chain

csc-runner

Reference runner for Command Scope Contract

nervos-sandbox

Hardware-isolated Linux sandbox for AI agents — Firecracker MicroVM + MCP