strands-agents/box
395 19RustApache-2.0Updated 2 weeks ago
Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon, with Linux support planned.
agentic-aiagentsaiai-agentsai-safetycontainmentegressharnesslinuxllmmacosmcppolicyrustsandboxsandboxingseatbeltsecuritystrands-agentszero-trust
Our verdict: worth using
A Rust‑based sandbox engine for AI agents with policy enforcement, directly useful for securing Claude‑based agents and other tooling
Filed under security in our directory.