provos / ironcurtain
A secure* runtime for autonomous AI agents. Policy from plain-English constitutions. (*https://ironcurtain.dev)
Why this job: topics: security, sandbox
What it does
The agent is asked to clone a repository and push changes. Both git_clone and git_push are escalated by the policy engine, but the auto-approver approves them automatically — the user's trusted input from command mode (Ctrl-A) provided clear intent, so no manual /approve was needed.
Get started
npm install -g @provos/ironcurtain You need: Node.js 24 or 26 — the even-numbered major lines IronCurtain tests. Both install prebuilt isolated-vm binaries. Node 25 is unsupported and untested.; Docker — not required but strongly recommended for Docker Agent Mode, which provides the strongest isolation. On macOS 26+ (Apple silicon), Apple container works as an alternative backend (VM per container; used automatically when its servi; An API key for at least one LLM provider (Anthropic, Google, or OpenAI)
- Maintenance
- Active
- Last commit 10 days ago
- Stars
- 652
- +37 this week
- Licence
- Apache-2.0
- Allows business use
- Downloads for
- None listed
- No release files
- Latest version
- v0.14.0
- Released 49 days ago
- Built with
- TypeScript
- 92% of the code
Is it looked after?
- Contributors
- 3
- Last 90 days
- Issues
- 87% closed
- 4 still open
- Pull requests
- 327 merged
- 26 waiting
- Releases
- 23
- 23 in the last year
Similar repos
| Repo | Stars | Last commit | Licence | Downloads for |
|---|---|---|---|---|
| eugene1g / agent-safehouse | 2,144 | yesterday | Apache-2.0 | No downloads |
| strands-agents / box | 504 | 2 days ago | Apache-2.0 | Mac, Linux |
| PerryLink / dsh-permission-rules | 136 | today | Apache-2.0 | No downloads |
More: languages, topics and project record
Languages
- TypeScript 92%
- Python 3%
- Svelte 3%
- Go 1%
Topics
- agent
- mcp
- model-context-protocol
- policy
- sandbox
- security
- trusted-process
Project record
- JobAI security
- StatusListed
- Commits604
- Forks89
- Watching3
- Stars in 28 days+41
- CreatedFeb 21, 2026
- First seen by usNov 7, 2026
- CheckedNov 9, 2026