strands-agents/box

Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon, with Linux support planned.

4 best points · 0 comments · 1 Hacker News post · 494 GitHub stars · View on GitHub

Hacker News discussions

• Strands Box: another open source sandbox (4 points, 0 comments, by shenli3514, 2026-10-08)