strands-agents / box

Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon, with Linux support planned.

domcyrus / rustnet

Per-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.

fencesandbox / fence

Lightweight, container-free sandbox for running commands with network and filesystem restrictions

FlapPearLabs / workbuddy-toolkit

WorkBuddy Multi-Account Manager & Automated Check-in Toolkit (多账号轮换、全域工作区打通与自动化签到)