GreyhavenHQ/greywall
View on GitHub ↗ ★ 315 Go
Container-free, deny-by-default sandbox for AI coding agents. Kernel-enforced filesystem, network, and syscall isolation for Linux and macOS
4 mentions on Hacker News by 3 people: 0 stories, 4 comments · first 2026-03-09 · latest 2026-07-13
20082026
-
This is an option: https://github.com/GreyhavenHQ/greywall
comment by cowpig · 2026-07-13 · in What xAI's Grok build CLI sends to xAI: A wire-level analysis -
…derails, PII redaction, etc. It's open source, check out greywall.io // github.com/greyhavenhq/greyproxy // github.com/greyhavenhq/greywall
comment by txprog · 2026-04-13 · in Ask HN: How are you handling runtime security for your AI agents? -
…uses a transparent proxy to see which network requests were made. Supports linux and macos. [1] https://github.com/GreyhavenHQ/greywall
comment by xtanx · 2026-03-30 · in Go hard on agents, not on your filesystem -
…building something very similar, which we literally open sourced an alpha version of last week: https://github.com/GreyhavenHQ/greywall It's a bit different in that: - We started with Linux - It is a binary that wraps the agent runtime -…
comment by cowpig · 2026-03-09 · in Agent Safehouse – macOS-native sandboxing for local agents