Sandbox-first harnesses that fence the agent, not the IDE

akshayaggarwal99

Self-hosted sovereign code-execution substrate with Go control plane, Rust in-sandbox agent, BYOK auth, and Docker/gVisor-hardened ephemeral sessions.

Use caseUse it to spawn fail-closed Docker sandboxes from Python or TypeScript SDKs and stream artifacts over JSON-RPC.

ItsNotAILABS

Long-running repository agent with durable goals, recursive agent harnesses, WASM capsules, budgets, leases, receipts, and detach/reattach sessions.

Use caseUse it to set a multi-hour repo goal, run autonomous work with budgets, detach, and reattach with verifiable receipts.

anthropics

OS-level sandbox CLI and library using Seatbelt, bubblewrap, and Windows filters plus proxy-based network allowlists without containers.

Use caseUse it to wrap MCP servers or agent bash with filesystem deny/allow rules and domain-scoped egress via srt.

Ghostlock-AI

Rust port of Anthropic sandbox-runtime aiming for much faster startup and smaller binaries with Seatbelt profiles and HTTP proxy filtering.

Use caseUse it to drop a single native srt binary in front of agent processes when Node overhead is unacceptable on macOS.

mmeyerlein

Ontology-grounded agentic build system in one Rust binary: actor cells with SQLite, sandboxes, vault, voice, and web surfaces for composing agentic OS graphs.

Use caseUse it to grow a message-routed multi-cell agent system where each actor owns its sandbox and secrets stay in a vault cell.

google-research

Programmable layer that wraps frozen training environments with plugins so EnvRigger can reshape tasks toward agent weaknesses without changing verifiers.

Use caseUse it to co-evolve SWE-bench or WebArena-style envs with your policy via reset/step bridges and targeted component banks.

landstrip

OS-level sandbox for coding agents using Landlock, Seatbelt, and AppContainer with JSON policies and drop-in CLI for command runs.

Use caseUse it to run cargo test or agent tools under a parametrized filesystem and network policy without a full container.

anthropics

Reference vuln-finding pipeline that forces every agent into gVisor with egress allowlist proxy and never mounts credentials into agent reach.

Use caseUse it to study or fork a production-shaped sandboxed agent loop for crash-finding with bin/vp-sandboxed entrypoints.

china-qijizhifeng

Observability-driven automatic evolution of coding-agent harnesses with evaluate-analyze-improve loops and reported Terminal-Bench lifts.

Use caseUse it to evolve harness components over iterations inside E2B sandboxes and freeze a transferable harness.