container-isolation

A token-efficient open-source AI assistant that remembers, adapts, and improves — secured, self-hosted, and entirely yours.

🛡️ Local credential safety and runtime armor for AI agents. Ephemeral container sandbox, sub-ms stream redactor, HTTP credential broker, canary tripwires, and MCP virtual proxy.

Contained static file analysis with Claude Code and Codex: REA, Ghidra and JADX in restricted Docker containers, selected input copies, readable reports. Linux/macOS; Windows experimental.

Self-hosted database hosting and lifecycle management for PostgreSQL, MySQL, MariaDB, Redis, MongoDB, ClickHouse, and Qdrant—with backups, restores, monitoring, upgrades, and resource limits.

Multi-instance Docker daemon installer with sysbox-runc. Run isolated Docker instances side-by-side on the same host.

Container isolation for code you can't trust but have to run.

Run the Pi Coding Agent in a hardened Docker sandbox: no Node.js, npm, or Pi on your host. Project, Git identity and gh auth are forwarded; API keys are injected at runtime only. Works with the pi0.pi-vscode extension.

Self-hosted platform for running coding agents (Claude Code, Pi) in isolated containers. One task = one branch = one container; PRs are the only human approval gate.

Pre-deploy security gate: scans source code, scores risk (ALLOW / QUARANTINE / BLOCK), then deploys to per-user isolated containers.

Isolated AI agent collaboration hub with HMAC auth and Docker sandbox enforcement

Docker-isolated Paseo with Pi CLI, persistent state, and Gradle defaults.

Recordings of Iron-visor, a Type-1 hypervisor written from scratch in Rust: no host OS, one microVM per Kubernetes pod, x86 VT-x/AMD-V and Arm.

OS-enforced isolation demo for bounded local AI: an agent reaches a private vault only through the severino-vault-mcp sensitivity gate, with no filesystem bypass.

Run Claude Code agents in parallel, each in its own disposable Docker container with your repo mounted read-only. Reruns every builder's tests, flags out-of-scope edits and leaked tokens, merges onto one branch and verifies it with no network.

Ephemeral zero-credential sandbox for untrusted and agent-written code: isolates, resource limits, verified post-conditions, threat tests.

Recovery-verification tool proving PostgreSQL backups plus pinned app releases reconstruct a valid service in isolation

Policy-bound runtime execution and isolation engine for immutable AI agent skill artifacts

秘匿情報を除いたIncusの構成情報を、隔離境界の評価用データへ変換できます。Incusへの直接接続は収集側が担当します。 / Turn a sanitized Incus inventory into a document that an isolation-boundary evaluator can read.