Ask HN: Secure wrapper for coding agents?

#1

Post by rjzzleep » Tue, Jun 30, 2026, 1:40 PM UTC

I believe someone recently posted sort of a secure harness/wrapper for running coding agents in a secure sandbox. I can't find the project.

Of course I can make my own wrapper with systemd-nspawn, kata or bspawn, but I believe I saw a decently well-maintained project just a while back. Does anyone have a suggestion or link? It's become extremely hard to find things on GitHub with all the generated projects.

Re: Ask HN: Secure wrapper for coding agents?

#2

Post by sanju3026 » Tue, Jun 30, 2026, 2:38 PM UTC

I believe you're looking for Era. It uses libkrun for local microVM isolation and was built specifically to solve the "LLM hallucinated a destructive bash command" problem without the overhead of a massive VM.

Another one that handles this gracefully is Yolobox, which uses rootless Podman. Both are actively maintained and cut through the noise of the thousands of generic wrapper repos out there right now.

Re: Ask HN: Secure wrapper for coding agents?

#3

Post by rjzzleep » Tue, Jun 30, 2026, 2:59 PM UTC

sanju3026 wrote: post #2

I believe you're looking for Era. It uses libkrun for local microVM isolation and was built specifically to solve the "LLM hallucinated a destructive bash command" problem without the overhead of a massive VM. Another one that handles this gracefully is Yolobox, which uses rootless Podman. Both are actively maintained and cut through the noise of the thousands of generic wrapper repos out there right now.

Era is a bit of a generic name. Just found another podman one with https://github.com/thomaspeklak/agent-sandbox

just found era it's deprecated, so it wasn't that.

Re: Ask HN: Secure wrapper for coding agents?

#4

Post by femboyvtuber » Tue, Jun 30, 2026, 3:30 PM UTC

sanju3026 wrote: post #2

I believe you're looking for Era. It uses libkrun for local microVM isolation and was built specifically to solve the "LLM hallucinated a destructive bash command" problem without the overhead of a massive VM. Another one that handles this gracefully is Yolobox, which uses rootless Podman. Both are actively maintained and cut through the noise of the thousands of generic wrapper repos out there right now.

Era links to https://github.com/smol-machines/smolvm now

Re: Ask HN: Secure wrapper for coding agents?

#5

Post by rohityin » Tue, Jun 30, 2026, 3:42 PM UTC

Have you thought About docker?

Re: Ask HN: Secure wrapper for coding agents?

#6

Post by aborsy » Tue, Jun 30, 2026, 6:40 PM UTC

Docker has introduced sandboxes for this purpose.

Re: Ask HN: Secure wrapper for coding agents?

#7

Post by ca_tech » Tue, Jun 30, 2026, 6:53 PM UTC

If you are running MacOS, I would recommend Agent Safehouse. Well maintained and is built on existing sandbox-exec so you are not locked in and can always build your own rules independent of the CLI tool.

https://github.com/eugene1g/agent-safehouse/ https://agent-safehouse.dev/

Originally posted on HN https://news.ycombinator.com/item?id=47301085

Re: Ask HN: Secure wrapper for coding agents?

#8

Post by atombender » Tue, Jun 30, 2026, 7:03 PM UTC

ca_tech wrote: post #7

If you are running MacOS, I would recommend Agent Safehouse. Well maintained and is built on existing sandbox-exec so you are not locked in and can always build your own rules independent of the CLI tool. https://github.com/eugene1g/agent-safehouse/ https://agent-safehouse.dev/ Originally posted on HN https://news.ycombinator.com/item?id=47301085

Seconding this. I've been running Safehouse for months and love that it can wrap any process (it's just a wrapper around the native macOS sandbox API, after all). The only thing I miss is the ability to limit network access, which isn't supported by the API.

Re: Ask HN: Secure wrapper for coding agents?

#9

Post by pixdamix » Tue, Jun 30, 2026, 7:41 PM UTC

If you're on a mac, lookup https://bromure.io/en/agentic-coding

(Lookup the browser too: https://bromure.io/en/secure-web)

Everything you see is made by Claude (and Renaud Deraison :-)) and working quite well jugding from the demos)

See here for more details (in french but English subs available (and more)): https://www.sstic.org/2026/presentation/cloture_2026/

Re: Ask HN: Secure wrapper for coding agents?

#10

Post by j-conn » Tue, Jun 30, 2026, 9:46 PM UTC

pixdamix wrote: post #9

If you're on a mac, lookup https://bromure.io/en/agentic-coding (Lookup the browser too: https://bromure.io/en/secure-web ) Everything you see is made by Claude (and Renaud Deraison :-)) and working quite well jugding from the demos) See here for more details (in french but English subs available (and more)): https://www.sstic.org/2026/presentation/cloture_2026/

The “fusion” mode looks really cool. Also loved the logo grid under “for the paranoid” — looks like a customer list but except it’s a wall of shame (“they did not run bromure”). Thanks for sharing!