Ross ROSS = Recommend OSS · open-source software intelligence for agents

akitaonrails/ai-jail

Some data may be outdated — see provenance labels.

Multi-OS sandbox to run AI agents with better constraints (it is not 100% secure, but enough) observed · 2026-10-06

github.com/akitaonrails/ai-jail · Rust · GPL-3.0 (copyleft) observed · 2026-10-06

Health v2 · maintenance only

77/100

  • Activity 98
  • Release rhythm 86
  • Longevity 16
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-22. Adoption (stars, forks) is never an input.

  • gap_med: 1
  • age_days: 234
  • days_rel: 17
  • days_push: 17
  • n_releases_24m: 70

Full methodology

Adoption not part of the score

1319 stars · 123 forks observed · 2026-10-06

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

ai-jail is a Rust CLI that runs AI coding agents inside an OS-level sandbox using bubblewrap with Landlock, seccomp, and resource limits on Linux, and sandbox-exec on macOS. It provides secure defaults such as a private tmpfs home, opt-in agent credentials, and capabilities like network and GPU disabled by default.

Use cases

  • run claude code in a sandbox
  • sandbox AI coding agents safely
  • isolate AI agent filesystem access
  • prevent AI agents from accessing my home directory
  • run untrusted AI agent commands with restricted network
  • sandbox agent credentials on macos and linux

When to choose

  • you run AI coding agents like Claude and want OS-level isolation without a VM
  • you want secure defaults like private tmpfs home and opt-in credentials
  • you work on Linux or macOS and want a lightweight sandbox layer

When to avoid

  • you need to run fully hostile code - use a disposable VM instead
  • you are on Windows without WSL2
  • you need guaranteed 100% security - the tool itself states it is not fully secure

Facets

cli-tool · maturity active

security cli developer-tools security developer-tools cli rust sandboxing bubblewrap landlock seccomp ai-coding-agents isolation sandbox ai-agents command-line linux macos

2 sources

Member repositories

RepositoryRoleHealth v2
akitaonrails/ai-jailmain77

For agents

markdown · JSON · MCP: product_card(name="akitaonrails/ai-jail")

Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem