cyberstars / tools / strands-box
Box
—Sandbox that restricts what AI agents can execute, read, write and reach.
Rust sandbox for running AI agents under OS-level isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Controls process execution, filesystem access and network egress; supports macOS on Apple silicon, with Linux planned.