Sandboxes
OpenShell
Run agents in sandboxes with policies for files, network access, processes, and credentials.
16.9K GitHub starsAs of Checked
Where it fits
What you can use it for
Policy-controlled execution of agent tools.
Give untrusted code a controlled place to run.
Before you adopt
What to check for your team
Check the supported host and runtime matrix. Policy settings and network enforcement still need workload-specific validation.
Get help evaluating the fitLicence and scope
Apache-2.0
Applies to this repository. Dependencies, models, and hosted services can have separate terms.
Read the upstream licenceSupport the work
Go directly to the maintainers
Use the project's contribution guidance to report issues, help with documentation or contribute code. Follow any published funding links if you want to support the maintainers financially.
Find contribution guidanceKeep exploring
