fencesandbox/fence
View on GitHub ↗ ★ 1,009 Go
Lightweight, container-free sandbox for running commands with network and filesystem restrictions
8 mentions on Hacker News by 4 people: 1 story, 7 comments · first 2026-01-20 · latest 2026-04-22
20082026
-
I built Fence ( https://github.com/Use-Tusk/fence ) in Go, a lightweight process sandbox for CLI agents (or any command really) with filesystem and network restrictions. It's also available as a Go library if you wish to add sandboxing to…
comment by jy-tan · 2026-04-22 · in Show HN: GoModel – an open-source AI gateway in Go -
I created a tool for this: https://github.com/Use-Tusk/fence Same thoughts - I wanted a "permission manager" that defines a set of policies agnostic to coding agents. It also comes with "monitor mode" that shows operations blocked, but not…
comment by jy-tan · 2026-03-21 · in OpenCode – Open source AI coding agent -
I built Fence for this! https://github.com/Use-Tusk/fence fence -t code -- opencode
comment by jy-tan · 2026-03-21 · in OpenCode – Open source AI coding agent -
Saw something last week using bubblewrap as well in hn github.com/Use-Tusk/fence
comment by Jayakumark · 2026-02-03 · in Sandboxing AI Agents in Linux -
…out of reach of containers seems like it would be paramount. But someone might know better! 0: https://github.com/Use-Tusk/fence
comment by dceddia · 2026-02-02 · in Show HN: NanoClaw – “Clawdbot” in 500 lines of TS with Apple container isolation -
That's acknowledged in the readme though I don't know if there is a comparison https://github.com/Use-Tusk/fence?tab=readme-ov-file#attribu...
comment by mellosouls · 2026-01-25 · in Show HN: Fence – Sandbox CLI commands with network/filesystem restrictions -
…a stronger containment boundary you'd want a proper VM. More thoughts in the security model doc ( https://github.com/Use-Tusk/fence/blob/main/docs/security-mo... ) if you're curious!
comment by jy-tan · 2026-01-21 · in Show HN: Fence – Sandbox CLI commands with network/filesystem restrictions