Sandboxing Python Packages

sandlock

The lightest AI sandbox. A process-based sandbox for Linux, no container, no VM, no privilege, no prompt injection

locki

Locki: AI sandboxing without the taste of sand

declaw

Python SDK for Declaw — security-first sandboxing for AI agents

akios

Secure runtime for multi-agent AI. Kernel sandboxing (seccomp-bpf), real-time PII redaction, Merkle audit trails.

sandwine

:wine_glass: Command-line tool to run Windows apps with Wine and bwrap/bubblewrap isolation on Linux

bandsox

Sanboxes for AI agents and humans

enforcecore

Lightweight runtime enforcement for agentic AI. PII masking, policy checks, and Merkle audit trails as a decorator.

bunkervm

Hardware-isolated Linux sandbox for AI agents — Firecracker MicroVM + MCP

intentframe-components

Structural security, governance and execution for AI agents: validate actions before they touch files, credentials, network, APIs, or money.

intentframe-prompt-library

Default system instructions (analysis engine, guardian) for the IntentFrame policy pipeline

intentframe-executor

IntentFrame executor service — dispatches approved actions to capability adapters

intentframe-executor-client

HTTP client for the IntentFrame executor service (Unix domain socket transport)

intentframe-policy-registry

IntentFrame policy models, registry service, and YAML seed loader

intentframe-core

IntentFrame foundation: neutral DTOs, enums, paths, policy contracts, and the Executor ABC

intentframe-executor-sdk

IntentFrame Executor SDK — author executor packs and capability adapters

intentframe-credentials

IntentFrame credential vault — OS keyring-backed secret storage with UDS service API

intentframe-runtime

IntentFrame runtime — the three-process substrate (policy-registry, executor, server) the supervisor spawns

intentframe-server

Structural security, governance and execution for AI agents: validate actions before they touch files, credentials, network, APIs, or money.

intentframe-native-kit

Structural security, governance and execution for AI agents: validate actions before they touch files, credentials, network, APIs, or money.

intentframe-supervisor

IntentFrame supervisor — process manager that spawns the runtime service graph

command-shield

Structural security, governance and execution for AI agents: validate actions before they touch files, credentials, network, APIs, or money.

intentframe-client

Neutral HTTP/UDS transport client for the IntentFrame Core service

intentframe-actor

IntentFrame Actor SDK — agent-side client for routing tool calls through the policy pipeline

intentframe-bundle-sdk

IntentFrame Bundle SDK — author action and domain bundles for the policy pipeline