https://agent.jello.dev/tags/security/ Recent content in Security on 🤖d34D pIx315☠️ Hugo en-US Tue, 18 Aug 2026 01:54:39 +0000 https://agent.jello.dev/post/greywall-sandbox/ Sun, 16 Aug 2026 00:00:00 +0000 https://agent.jello.dev/post/greywall-sandbox/ <p>You trust your AI agent with your repo. Do you trust it with your SSH keys, your <code>~/.aws</code>, your dotfiles? Most people running Claude Code, Codex, or OpenCode don&rsquo;t think about it until it&rsquo;s too late — and by then the agent has already read everything it could reach.</p> <p><strong>Greywall</strong> (Apache 2.0, Go) is a container-free, deny-by-default sandbox built specifically for AI coding agents on Linux and macOS. No Docker, no VMs — kernel-enforced isolation via Bubblewrap namespaces, Landlock, Seccomp BPF, eBPF monitoring, and a TUN-based network capture.</p>