omnigent-ai / omnigent
Omnigent is an open-source AI agent framework and meta-harness: orchestrate Claude Code, Codex, Cursor, Pi, and custom agents β swap harnesses without rewriting, enforce policies and sandboxing, and collaborate in real time from any device.
containers / bubblewrap
Low-level unprivileged sandboxing tool used by Flatpak and similar projects
NVIDIA / NemoClaw
Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference
nolabs-ai / nono
agent runtime security - zero trust, zero setup, zero latency agent sandboxing
anthropics / sandbox-runtime
A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
pydantic / monty
A secure Python sandbox, written in Rust, for code written by AI.
microsoft / agent-governance-toolkit
AI Agent Governance Toolkit β Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
ruvnet / metaharness
π οΈ The meta-harness for AI agents β scaffold your own focused, branded agent harness with its own npx CLI, MCP server, memory, learning loop, and witness-signed releases. Works with Claude Code, Codex, pi.dev, Hermes, OpenClaw, and RVM (hardware-isolated sandbox).
multikernel / sandlock
The lightest AI sandbox. A process-based sandbox for Linux, no container, no VM, no privilege, no prompt injection
igo95862 / bubblejail
Bubblewrap based sandboxing for desktop applications
inoio / agents-sandbox
Sandbox for AI coding agents (Claude Code, opencode, pi): runs each project in an isolated microVM with host-side secret injection. Linux/KVM & macOS.
flatpak / flatpak
Linux application sandboxing and distribution framework
kubearmor / KubeArmor
Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).
google / sandboxed-api
Generate sandboxes for C/C++ libraries automatically
ivan-hc / AM
AppImage Package Manager: AppImage sandboxing, local and system installation, update all AppImages, an extensible database of AppImages and portable apps, lists for AppImages and other GNU/Linux binaries, integrate AppImages by drag/drop or install unlisted AppImages, conversion of old AppImage types... and more! Manage AppImages like never before!
LavaMoat / LavaMoat
tools for sandboxing your dependency graph
ConardLi / easy-agent
Production-ready open source terminal coding agent with readable, layered code: permission rules, OS sandboxing, MCP, skills, sub-agents, and Anthropic, OpenAI-compatible, Gemini, or local models.
loft-sh / loft
Namespace & Virtual Cluster Manager for Kubernetes - Lightweight Virtual Clusters, Self-Service Provisioning for Engineers and 70% Cost Savings with Sleep Mode
flatpak / xdg-desktop-portal
Desktop integration portal
sunfishcode / cap-std
Capability-oriented version of the Rust standard library
coipond / coi
Give the agent a machine. Just not yours. Each AI coding agent gets its own isolated machine with root, Docker, and systemd - active defense detects and stops threats automatically.
nixpak / nixpak
Runtime sandboxing for Nix
maximecb / uvm
Fun, portable, minimalistic virtual machine.
strands-agents / box
Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon, with Linux support planned.
delta-box / deltabox-lite
Lightweight, agent-native sandboxing with diff, commit and abort
brig-sh / brig
Brig: run coding agents in a microVM sandbox - the Go cli (brig) and session daemon (brigd)
EvannZhongg / Nosis
Nosis is a lightweight personal agent runtime: per-session execution boundaries with OS-level sandboxing, computer use, a full built-in toolset, Skill / Plugin / MCP extensions, one runtime shared by GUI and TUI, and file-persisted sessions, plans, and memory.
weiwei966 / awesome-ai-harness
The model is the engine; the harness is the car. Curated knowledge on harness engineering β context management, tool design, agent loops, memory, sandboxing, evals. EN/δΈζ
zalaso / sharebox
Publish and share the small web tools your AI agents build, as easily as a Google Doc. Google sign-in, permissions, storage and gVisor sandboxing built in. Self-hosted.