Catalogue record · github
Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon, with Linux support planned.
Seen on github · last checked 2026-10-21.
The teardown — how it actually charges, which mechanism was found, and the seam worth taking — is in the daily letter. This page carries the record and the signals so search engines and link previews have something real to read; the judgement stays with the readers who asked for it.
Get the daily letterThe same record sits in the full catalogue, where every entry can be searched and filtered by the signals above.