Why this repo matters
Latest release 13d ago, 7 developer signals, 1 package/install signals
Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon, with Linux support planned. (448 stars, 28 forks, Rust, fresh release, 5 AI signals, 5 developer signals). Latest release: v0.1.0.
Repo analysis