seccomp

Kilo Labs launched Kilo Sandbox, an OS-level confinement tool that restricts agent tool execution to prevent unauthorized writes and network access, addressing security risks in auto-mode AI coding ag…

Claude Code and Codex both use OS-level process sandboxing to prevent AI models from executing harmful shell commands, relying on Linux primitives like bubblewrap for filesystem isolation and seccomp …

SkillLite is a lightweight, Rust-native engine designed for secure, local-first execution and evolution of AI agents, implementing a "full-chain" security model that protects agents from installation …