Secret-brokered microVMs and kernel jails that keep agent hands off host keys

nolabs-ai

Zero-setup, zero-latency kernel sandbox using Landlock and Seatbelt that enforces least privilege without containers or VMs.

Use caseUse it to wrap Claude Code, Codex, or Pi with capability packs so filesystem and network access become structurally impossible outside the allowlist.

akitaonrails

Rust CLI that runs coding agents inside bubblewrap/Landlock/seccomp on Linux or sandbox-exec on macOS with private home and opt-in credentials.

Use caseUse it to prefix any agent command so the project is writable while host secrets and home stay hidden by default.

rderaison

macOS app that runs agentic coding and browsing inside disposable Linux VMs destroyed on window close, with host-side MITM credential proxy.

Use caseUse it to give Claude Code or Codex a throwaway Linux kernel where secrets never enter the guest.

finbarr

Docker wrapper that mounts only the project directory at its real path so agents can YOLO without seeing the host home.

Use caseUse it to run any coding agent full-send inside a container while home, SSH keys, and secrets stay on the host.

borenstein

Restrictive sandbox that scans egress for secrets, blocks dangerous git operations, and isolates agents per branch.

Use caseUse it to let agents work autonomously while automatically stopping secret exfiltration and self-merge attempts.

leonvanzyl

Lightweight coding harness for local open-weight models via Ollama or LM Studio with no API keys and no cloud.

Use caseUse it to turn a local Qwen or similar model into a file-editing, test-running coding agent on your machine.

sricola

macOS Apple-container sandbox that runs agents in throwaway VMs, brokers short-lived tokens, and only returns approved git diffs.

Use caseUse it to submit unattended coding tasks whose only host-side output is a reviewable diff you must approve.

thomaspeklak

Rust CLI that launches Claude, Codex, Gemini, OpenCode, or Pi inside rootless Podman with lockdown and credential bridges.

Use caseUse it to keep host secrets off the agent while still mounting the repo and selected tools into a hardened container.

ashishgituser

Firecracker microVM sandbox with command recording, snapshot, restore, and step-level rewind for agent debugging.

Use caseUse it to time-travel an agent run by rewinding the microVM state after a bad command instead of replaying scripts.

community

Local sandbox VMs for coding agents with pre-built macOS, Windows ARM64, and Ubuntu images that share the work directory.

Use caseUse it to boot a full-toolchain guest VM on Apple Silicon that keeps your editor on the host while the agent works isolated.

Use-Tusk

Lightweight CLI sandbox that applies OS-native network and filesystem restrictions without a heavy runtime.

Use caseUse it to quickly constrain an agent process to approved paths and hosts before it touches the rest of the machine.

Zouuup

Landlock-based sandboxing helper that applies kernel filesystem and network rules without requiring root.

Use caseUse it to drop unprivileged Landlock policies around agent-generated processes on modern Linux kernels.