Hamza-Abili/opencode-sandbox
OpenCode V1+V2 command sandbox: native bubblewrap (Linux) / Seatbelt (macOS), read-only system, writable workspace, cleared environment, network denied by default. Fail-closed, zero runtime dependencies.
GitHub repository with 5 stars and 0 forks.
Language: TypeScript
Topics: agent-sandbox, ai-agents, bubblewrap, command-sandbox, opencode, opencode-plugin, sandbox, seatbelt, security