Tag
NousResearch announces a credential firewall for Docker sandboxes in Hermes Agent, using stand-in tokens and a local proxy to keep real keys secure, so tokens from a compromised sandbox are useless.
code-airlock is an open-source tool that runs AI coding agents inside disposable microVMs to avoid granting them direct access to the host filesystem. It clones the repo into a sandbox so agents can work freely, and after completion, users review and pull back only desired changes.
An open-source agent harness with 40 capabilities behind a single function call, including persistent memory, Docker sandbox, auto-summarization, stuck-loop detection, budget caps, and live run forking for branching agent execution. Built on Pydantic AI and designed to replace the 2000 lines of glue code every production agent needs.