sricola/drydock

Hardware-isolated sandbox for running coding agents on your repos, on macOS. The agent never sees your real API key; egress is deny-by-default; only a diff you approve leaves the sandbox.

1 best points · 0 comments · 1 Hacker News post · 10 GitHub stars · View on GitHub

Hacker News discussions

• Show HN: Drydock – VM Sandboxes for macOS Autonomous Coding Agents (1 points, 0 comments, by sricola, 2026-06-19)