greywall

This is an option: https://github.com/GreyhavenHQ/greywall

We're working on that! Many sandboxes exist, including our own, Greywall. It integrates with our proxy, Greyproxy, which handles TLS interception and reconstructing LLM conversations, plus features like credential swapping. We currently have a PR for middlewares we can test; things like intent classification to catch conversation derails, PII redaction, etc. It's open source, check out greywall.io // github.com/greyhavenhq/greyproxy // github.com/greyhavenhq/greywall

I would like to also suggest greywall[1] which i found yesterday. It sandboxes the filesystem, network, syscalls, dns. The network uses a transparent proxy to see which network requests were made. Supports linux and macos. [1] https://github.com/GreyhavenHQ/greywall

This is awesome! I think this is one of the most important technical hurdles in deploying agent applications right now. I'm involved with a project building something very similar, which we literally open sourced an alpha version of last week: https://github.com/GreyhavenHQ/greywall It's a bit different in that: - We started with Linux - It is a binary that wraps the agent runtime - It runs alongside a proxy which captures all traffic to provide a visibility layer - Rules can be changed dynamically at runtime I am so happy this problem is getting the attention it deserves!