A throwaway sandbox where your AI coding agent can code, build, and explore, sealed off so it never gets the keys to your computer.
- OpenCode
- Pi
- Codex
- Claude Code
Features
-
Rootless & ephemeral
Each agent runs in its own rootless Podman container, destroyed after every session.
-
Only sees what you allow
The agent only sees your project folder and the mounts you explicitly allow — never your home directory, SSH keys, or other projects.
-
Proper secret management
Credentials load as read-only Podman secrets that never appear in inspect or logs, scoped per project or globally.
-
Agent collaboration enabled
Agents in separate projects talk to each other over the A2A protocol, so each stays focused on its own codebase.