Viewing profile — jy-tan

I built Fence ( https://github.com/Use-Tusk/fence ) in Go, a lightweight process sandbox for CLI agents (or any command really) with filesystem and network restrictions. It's also …

I created a tool for this: https://github.com/Use-Tusk/fence Same thoughts - I wanted a "permission manager" that defines a set of policies agnostic to coding agents. It also comes…

I built Fence for this! https://github.com/Use-Tusk/fence fence -t code -- opencode

Agree, I find it hard to support them when the team is so obnoxious on X.

How does this compare with QMD ( https://github.com/tobi/qmd )?

Awesome, give it a spin and let me know if you have any feedback!

You can just install Fence in your deployed service (see the installation instructions in the README), then wrap the user command/script with `fence -t code `. It will probably wor…

Yes, Fence is designed for exactly this, the built-in `code` template already allowlists npm and PyPI registries: ``` fence -t code pip install requests fence -t code npm install e…

Fence works on macOS and Linux (the install script works for both platforms). I'll make that clearer in the README.

Unfortunately nested bubblewrap sandboxes don't work. When you run `fence flatpak run `, Fence creates a bwrap sandbox with its own user namespace, Flatpak then tries to create ano…

Hey! Yes, Fence was inspired by sandbox-runtime. Both use the same underlying OS primitives (sandbox-exec on macOS, bubblewrap on Linux) and proxy-based network filtering. Fence ad…

Thanks! And yeah, these are complementary layers. Fence is at the OS/network boundary, while API-level policies (endpoints, parameters, token budgets) need something that actually …

Yes, currently writes are deny-by-default, but reads are allow-by-default. The challenge is that most programs need read access to system paths (/lib, /usr, /etc, /proc) just to ru…

Fair point, it does raise the bar! The distinction I'm drawing is between "semi-trusted" and "actively malicious". Fence handles well supply-chain scripts that phone home, tools th…

Hi HN! Fence wraps any command in a sandbox that blocks network by default and restricts filesystem writes. Useful for running semi-trusted code (package installs, build scripts, u…

Thanks! Great question, we have a Transforms system that lets you define redaction rules (redact, mask, replace, or drop) using matchers with JSONPath support. Transforms are appli…

Currently Tusk Drift focuses on functional/regression testing - we mock outbound dependencies (DBs, external APIs) for determinism, so we're not measuring real-world performance ch…

Thank you!

Give it a spin and let us know what you think! :)

Hi HN! In the past few months my team and I have been working on Tusk Drift, a system that records real API traffic from your service, then replays those requests as deterministic …