enclave-seatbelt

What problem does it solve?

This module ensures that agent shells run in a strict, restricted environment to prevent unauthorized file access, network communication, and other harmful behaviors.

Core Features & Use Cases

• macOS Sandboxing: Provides a secure environment for agents to run with limited access to the filesystem, network, and processes.
• Filesystem Restriction: Access to only workspace directory, /tmp, and system libraries is allowed.
• Network Restriction: Only loopback to proxy and authz ports are allowed, blocking all other network access.
• Process Restriction: Only the shell binary and /usr/bin, /bin utilities are accessible.
• Use Case: This can be particularly useful in environments where agents are given broad permissions, yet need to operate in a contained manner to avoid security breaches.

Quick Start

Activate the 'enclave-seatbelt' skill to execute an agent within a secure, macOS sandbox environment.