bwrap

A developer released pi-box, a Bash wrapper that runs the pi coding agent inside a bubblewrap (bwrap) sandbox. The project mounts the working directory read-write at /work, keeps host home directories…

SkillLite is a lightweight, Rust-native engine designed for secure, local-first execution and evolution of AI agents, implementing a "full-chain" security model that protects agents from installation …