agent-sandbox

Docker-based sandbox that runs AI coding agents with no git, no SSH, and can only access project folder. Built because permission prompts aren't real protection — you end up accepting everything by reflex, that's not a decision, it's fatigue. pi and opencode built-in. Extendable to use other agents running a single register command.

GitHub

Official source

Start locally with the CLI guide