seatbelt
Rust sandbox for AI agents and untrusted code, inspired by OpenAI Codex. OS-enforced isolation on Linux, Windows, and macOS.
Tiny Agent: Production-Ready LLM Agent SDK for Every Developer
Files AI agents can't touch — kernel-enforced no-read, read-only and append-only rules for Claude Code, Codex and any agent. macOS + Linux.
Apple Silicon native AI agent sandbox — three-tier isolated code execution with MCP server. pip install silicon-sandbox