akitaonrails/ai-jail

Health v2 · maintenance only

Adoption not part of the score

1172 stars · 105 forks observed · 2026-09-03

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

ai-jail is a Rust CLI that runs AI coding agents inside an OS-level sandbox using bubblewrap with Landlock, seccomp, and resource limits on Linux, and sandbox-exec on macOS. It provides secure defaults such as a private tmpfs home, opt-in agent credentials, and capabilities like network and GPU disabled by default.

Use cases

• run claude code in a sandbox
• sandbox AI coding agents safely
• isolate AI agent filesystem access
• prevent AI agents from accessing my home directory
• run untrusted AI agent commands with restricted network
• sandbox agent credentials on macos and linux

When to choose

• you run AI coding agents like Claude and want OS-level isolation without a VM
• you want secure defaults like private tmpfs home and opt-in credentials
• you work on Linux or macOS and want a lightweight sandbox layer

When to avoid

• you need to run fully hostile code - use a disposable VM instead
• you are on Windows without WSL2
• you need guaranteed 100% security - the tool itself states it is not fully secure

Facets

cli-tool · maturity active

security cli developer-tools security developer-tools cli rust sandboxing bubblewrap landlock seccomp ai-coding-agents isolation sandbox ai-agents command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="akitaonrails/ai-jail")