Security●●Solid
Enclv – A lightweight Docker containment environment for AI agents
Docker sandbox for AI agents with egress proxy and filesystem isolation—solves real runaway-agent fear.
Solve My ProblemShip It
ashtonsuire
113mo ago
Back to browse
GitHub Repository
Selectively permeable boundary for AI agents
55 starsGo
Cagent – Agent in a Cage
by noperator·Feb 28, 2026·2 points·0 comments
AI Analysis
●●●BangerSolve My ProblemNiche GemWizardry
Hard sandbox: nftables firewall + shadowing prevents agent breakout, not just sandboxing.
Strengths
- •nftables + domain allowlist + capability dropping creates layered defense, not just OS jail
- •Filesystem shadowing (placeholder files for secrets) stops agent from even seeing .git or .env
- •Unprivileged user + CAP_NET_ADMIN/CAP_NET_RAW drop prevents inner-container escapes (Sysbox-aware)
Weaknesses
- •Docker + Sysbox dependency limits portability; no native Kubernetes policy equivalent shown
- •Early-stage (no releases, no audit, 0 stars); production readiness claimed but unproven
Category
Target Audience
Teams deploying autonomous AI agents, security-first DevOps engineers
Similar To
Docker security constraints · Kubernetes network policies · Firecracker/gVisor sandboxing
Similar Projects
Security●Mid
Runs AI coding agents inside isolated Docker containers
Yet another Docker wrapper for AI agents, but drops all Linux capabilities by default.
Ship It
matt_callmann
701mo ago
Developer Tools●●Solid
Armorer – A secure local control plane to sandbox AI agents in Docker
Docker sandboxing for agents when most runners just trust whatever the LLM outputs.
Ship ItNiche Gem
cristianleo
321mo ago
Developer Tools●●Solid
Agentspace – long-running YOLO agent sessions in Docker
Docker isolation for AI agents solves the death-by-tapping-y problem safely.
Ship ItSolve My Problem
Notch123
524d ago
Developer Tools●●Solid
DockerTab – Manage your Docker containers from iOS and Android
Native mobile Docker client with secure relay beats SSH-ing through Termius on phone.
SlickSolve My Problem
coffee0748
212mo ago
Developer Tools●●●Banger
Praktor – Multi-agent Claude Code orchestrator with Docker isolation
Single Go binary: Telegram → Claude agents in isolated Docker with swarms, memory, Nix.
Ship ItNiche GemBig Brain
mtzanidakis
103mo ago