seccomp

Kilo Sandbox introduces OS-level confinement for agent tool execution, restricting filesystem writes and network egress to prevent damage from autonomous AI agents. The sandbox uses Seatbelt on macOS …

Claude Code and Codex both use OS-level process sandboxing to prevent AI models from executing harmful shell commands, relying on Linux primitives like bubblewrap for filesystem isolation and seccomp …

SkillLite is a lightweight, Rust-native engine designed for secure, local-first execution and evolution of AI agents, implementing a "full-chain" security model that protects agents from installation …