Strict-by-default Gondolin sandbox extension for Pi

Gondolin micro-VM sandbox for clankie — runs agent tools inside an isolated VM with network policies, secret injection, and filesystem isolation

OpenCode plugin that runs bash commands inside a Gondolin micro-VM sandbox

Tuor is a convenience wrapper around [Gondolin](https://github.com/earendil-works/gondolin) to spawn microVM-based sandboxes that you can run your coding agent or other workloads in. It exposes most of Gondolin's features through a JSON config schema and

Run any workflow on your own machine — YAML jobs in a DAG, each isolated in a secure gondolin micro-VM, with durable runs and optional AI agent steps.

Alpine Linux sandbox for running untrusted code with controlled filesystem and network access

Route pi's bash, read, write, edit, ls, grep and find into a rootless kern box.

Placeholder package.

Daytona/Gondolin-inspired sandbox API for Apple container on Apple Silicon Macs.

No description provided.

VM-isolated sandbox for pi with automatic secret protection · from yapp

Porcupine — a terminal AI agent that plans, acts inside explicit permission modes, and verifies its work. The whole Porcupine codebase ships as one package.

pi extension: a private docker sandbox (sbx microVM with its own daemon) as the agent's deploy target — the host's docker is never exposed.

Hardened OS sandbox extension for Pi coding agent

Run agent bash commands inside a libkrun microVM (microsandbox) with two-way workspace sync — fail-closed isolation for pi

Multi-service chat bridge extension for pi

No description provided.

Pi-native chat adapter shell for team agents.

Granular Permission & Sandbox Policy Extension for Pi

Placeholder published defensively to prevent dependency confusion. Not an active package — do not depend on this.