dredozubov / hazmat
Containment for AI agents - user isolation, sandboxed execution, network controls, backup/rollback. TLA+ verified.
Why this job: topics: security, sandbox
What it does
- A separate user. the agent runs as agent, not as your login account.
- A readable session contract. project access, integrations, network mode,
- Scoped filesystem access. project writes are explicit; common secret paths
- Network hardening. pf firewall rules and DNS blocks reduce common
- Recovery evidence. Hazmat snapshots before launch so you can diff and
Get started
No single install command. Read the steps in the README (opens in new tab)
- Maintenance
- Active
- Last commit 12 days ago
- Stars
- 179
- On GitHub
- Licence
- MIT
- Allows business use
- Downloads for
- Mac
- From the latest release
- Latest version
- v0.10.2
- Released 2 months ago
- Built with
- Go
- 85% of the code
Is it looked after?
- Contributors
- 3
- Last 90 days
- Issues
- 100% closed
- 0 still open
- Pull requests
- 19 merged
- 1 waiting
- Releases
- 13
- 13 in the last year
- Contributing guide (opens in new tab)
- Security policy (opens in new tab)
- No code of conduct
Similar repos
| Repo | Stars | Last commit | Licence | Downloads for |
|---|---|---|---|---|
| strands-agents / box | 504 | 2 days ago | Apache-2.0 | Mac, Linux |
| eugene1g / agent-safehouse | 2,144 | yesterday | Apache-2.0 | No downloads |
| GreyhavenHQ / greywall | 315 | 2 months ago | Apache-2.0 | Mac, Linux |
More: download files, languages, topics, project record and preview image
Languages
- Go 85%
- Shell 8%
- TLA 6%
- Python <1%
Topics
- ai-agents
- claude-code
- cli
- containment
- developer-tools
- formal-verification
- go
- macos
- pf-firewall
- sandbox
- seatbelt
- security
Project record
- JobAI security
- StatusListed
- Commits1,279
- Forks11
- Watching1
- Stars in 28 days0
- CreatedMar 27, 2026
- First seen by usNov 7, 2026
- CheckedNov 7, 2026