multikernel / sandlock
The lightest sandbox. A process-based sandbox for Linux, no container, no VM, no privilege, no prompt injection
Why this job: matched by what the repo talks about: injection, sandbox, prompt, container
What it does
Containers and VMs are powerful but heavy. Sandlock targets the gap: strict confinement without image builds or root privileges. Built-in COW filesystem protects your working directory automatically.
Get started
No single install command. Read the steps in the README (opens in new tab)
- Maintenance
- Active
- Last commit 4 days ago
- Stars
- 612
- +8 this week
- Licence
- Apache-2.0
- Allows business use
- Downloads for
- Linux
- From the latest release
- Latest version
- v0.9.1
- Released 6 days ago
- Built with
- Rust
- 83% of the code
Is it looked after?
- Contributors
- 3
- Last 90 days
- Issues
- 91% closed
- 10 still open
- Pull requests
- 213 merged
- 6 waiting
- Releases
- 23
- 23 in the last year
- No contributing guide
- No security policy
- No code of conduct
Similar repos
| Repo | Stars | Last commit | Licence | Downloads for |
|---|---|---|---|---|
| GreyhavenHQ / greywall | 316 | 2 months ago | Apache-2.0 | Mac, Linux |
| strands-agents / box | 512 | yesterday | Apache-2.0 | Mac, Linux |
| Attention-Span-AI / Tego | 16 | 4 days ago | Apache-2.0 | Mac, Linux |
More: download files, languages, topics and project record
Languages
- Rust 83%
- Python 12%
- C 3%
- Go 2%
Topics
- ai-agents
- deterministic-systems
- faas
- landlock
- linux
- promptinjection
- rust
- sandboxing
- seccomp
Project record
- JobAI security
- StatusListed
- Commits1,408
- Forks60
- Watching11
- Stars in 28 days+46
- CreatedMar 13, 2026
- First seen by usNov 7, 2026
- CheckedNov 7, 2026