Constrained by default

Sandboxed Agent Container

A container for running coding agents under meaningful constraint, with separate profiles for interactive use, unattended runs, and a restricted sandbox.

Year: Active 2026
Role: Sole author
DockerShellLinuxCI/CD

Overview

A container for running coding agents with real limits on what they can reach, offering three profiles: interactive, unattended, and a restricted sandbox for anything I have not vetted. The motivation is straightforward. Agents are useful precisely because they act on their own, and that is the same reason they are worth boxing in before pointing them at something that matters.

More Projects

Interested in Working Together?

I'm always open to discussing new projects and opportunities.

Get in Touch