Declass, a terminal coding agent from developer maximpri, keeps sensitive codebase context on the user's machine by routing questions about private files to a local model while a cloud model writes th…
Chock is a sandbox-first AI coding harness that runs coding agents inside the operating system's own sandbox on a throwaway copy of the project, under a policy file the agent can read but cannot edit.…
Yorick Peterse merged a new Inko feature that lets applications sandbox themselves with minimal effort, using Linux Landlock, macOS Seatbelt via sandbox_init, FreeBSD Capsicum, and OpenBSD pledge and …
Anthropic has introduced a local Bash sandbox mode for Claude Code on desktop, using OS-level isolation to restrict command execution and cutting permission prompts by 84% since development began in O…
Anthropic fixed a Claude Code sandbox escape in version 2.1.247 after researchers at Accomplish showed that an untrusted repository could run commands on a Mac outside the macOS Seatbelt sandbox with …
DeepSeek Harness, an open-source agent framework released as a developer preview, ships a fail-closed filesystem sandbox using bubblewrap, Landlock, Seatbelt, or Windows ACLs, but its documentation st…
Anthropic's Claude Code sandbox allows reading credential files such as ~/.aws/credentials and ~/.ssh/ by default, and the model can retry commands with the dangerouslyDisableSandbox parameter, accord…
Zed, the code editor from Zed Industries, has introduced sandboxing for its agent panel's terminal and fetch tools, enabled by default for all users starting with the 1.14 release. The sandbox, enforc…
Anthropic shipped OS-level sandboxing for Claude Code, using Seatbelt on macOS and bubblewrap on Linux/WSL2. The sandbox constrains Bash commands and their child processes, but not Claude Code's Read,…
Anthropic detailed the containment architectures it uses for Claude across web, developer, and desktop products, arguing that agent safety depends on deterministic limits on filesystem, network, and e…
Kilo Sandbox introduces OS-level confinement for agent tool execution, restricting filesystem writes and network egress to prevent damage from autonomous AI agents. The sandbox uses Seatbelt on macOS …
Kilo shipped six enterprise features during Focus Week, including feature adoption tracking, agent sandboxing, sub-organization management, Bitbucket and Jira integration, auto-efficient model routing…
SkillLite is a lightweight, Rust-native engine designed for secure, local-first execution and evolution of AI agents, implementing a "full-chain" security model that protects agents from installation …