Hacker GitHub

← All repos

webcoyote/sandvault

View on GitHub ↗ ★ 447 Shell

Run AI agents isolated in a macOS user account and sandbox-exec. Configured to run Claude Code, OpenAI Codex, Cursor Agent, Google Gemini.

13 mentions on Hacker News by 6 people: 2 stories, 11 comments · first 2025-10-13 · latest 2026-07-08

Mentions per year 13 mentions · busiest year 2026 (10)
20082026
AllStoriesComments NewestTopOldest
  1. …but sandvault is good for this and does auto install (full disclosure: have made some PRs to it). https://github.com/webcoyote/sandvault
    comment by mikemcquaid · 2026-07-08 · in Show HN: Davit, a Apple Containers UI
  2. …skill to automate testing of iOS apps [2], and it found issues in one of my released apps [3]. [0]: https://github.com/webcoyote/sandvault [1]: https://www.codeofhonor.com [2]: https://github.com/webcoyote/AppTestCircuit [3]:…
    comment by netcoyote · 2026-04-13 · in Ask HN: What Are You Working On? (April 2026)
  3. ▲ 1
    Sandvault – Run AI agents isolated in a sandboxed macOS user account
    story by TheTaytay · 2026-03-09 · 0 comments
  4. …then add sandbox-exe on top for finer-grained control of access to system resources. 0. https://github.com/webcoyote/sandvault
    comment by pash · 2026-03-08 · in Agent Safehouse – macOS-native sandboxing for local agents
  5. …its own unprivileged user account and interact with it via sudo, SSH, and shared directories. 0. https://github.com/webcoyote/sandvault
    comment by pash · 2026-02-27 · in Let's discuss sandbox isolation
  6. …be lightweight, generic, and robust-enough. [0] https://news.ycombinator.com/item?id=46760777 [1] https://github.com/webcoyote/sandvault
    comment by realityfactchex · 2026-01-26 · in The browser is the sandbox
  7. - https://github.com/webcoyote/sandvault : sandboxes AI agents in a MacOS limited user account, and also uses sandbox-exec to limit access, though fence has more strict limitations - https://github.com/webcoyote/clodpod : sandboxes AI…
    comment by netcoyote · 2026-01-26 · in Show HN: Fence – Sandbox CLI commands with network/filesystem restrictions
  8. ▲ 3
    Sandvault: Run AI agents isolated in a sandboxed macOS user account
    story by Luc · 2026-01-20 · 0 comments
  9. …It just got added to Homebrew: brew install sandvault Or clodpod [1] for a VM-based solution 0: https://github.com/webcoyote/sandvault 1: https://github.com/webcoyote/clodpod
    comment by netcoyote · 2026-01-20 · in Running Claude Code dangerously (safely)
  10. …a sandboxed macOS user account ClodPod [1]: Run AI agents isolated inside an OSX virtual machine 0: https://github.com/webcoyote/sandvault 1: https://github.com/webcoyote/clodpod
    comment by netcoyote · 2026-01-16 · in Claude Cowork runs Linux VM via Apple virtualization framework
  11. …like Xcode and iOS simulator, so I wrote a couple of different sandbox projects: - SandVault ( https://github.com/webcoyote/sandvault ) runs the AI agent in a low-privilege account - ClodPod ( https://github.com/webcoyote/clodpod ) runs…
    comment by netcoyote · 2025-12-27 · in Ask HN: How are you sandboxing coding agents?
  12. …which I use to run my agents, while still being able to build/run macOS apps: Limited user account: https://github.com/webcoyote/sandvault Virtual machine: https://github.com/webcoyote/clodpod
    comment by netcoyote · 2025-11-24 · in A desktop app for isolated, parallel agentic development
  13. …) and another which creates a limited-user account with access to a shared directory ( https://github.com/webcoyote/sandvault ). Along the way I rolled my own git-multi-hook solution ( https://github.com/webcoyote/git-multi-hook ) to use…
    comment by netcoyote · 2025-10-13 · in Ask HN: What are you working on? (October 2025)