bubblewrap
Anthropic Sandbox Runtime (srt)
https://github.com/anthropic-experimental/sandbox-runtime
A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
Related contents:
Added 3 weeks ago
Fence
https://github.com/Use-Tusk/fence
Lightweight, container-free sandbox for running commands with network and filesystem restrictions.
Fence wraps commands in a sandbox that blocks network access by default and restricts filesystem operations based on configurable rules. It's most useful for running semi-trusted code (package installs, build scripts, CI jobs, unfamiliar repos) with controlled side effects, and it can also complement AI coding agents as defense-in-depth.
Added 6 months ago