Linux sandbox
Non-sudo user in bubblewrap, LAN blocked by nftables, CPU and RAM limits.
Platform · Sandbox and Policy
Every agent in a sandbox, every rule in one place.
Set what agents may do once, for every machine, and see every attempt to step outside it.
Live in productionPeaceControl
Agentsudo apt install curlexample
illustrative
What is Sandbox and Policy in agnte?
agnte runs every agent in a sandbox. On Linux, agents run as a non-sudo user in bubblewrap with LAN access blocked by nftables and CPU and RAM limits. On Windows, agents run in Docker with a read-only root, all capabilities dropped and an egress proxy that refuses private ranges. A central command policy with 73 denied commands applies to every machine, agents never hold the GitHub token, and every call is journaled.
Capabilities
What Sandbox and Policy does
PeaceControl
Windows sandbox
Docker with read-only root, all capabilities dropped, internal network and an egress proxy.
Command policy
73 denied commands, denied paths and web access only for research roles, enforced by a pre-tool hook.
One screen for all machines
Set or relax sandbox and policy everywhere and see escape attempts in one place.
Scoped access and encrypted secrets
Owner, operator and read tokens; secrets in the OS vault.
Full audit journal
Every agent call and command journaled with its actor.
Proof from production
Running today, measured.
73denied commands
1.42Maudit journal events
110API routes scoped
Source: agnte sandbox self-test and live database, 2026-10-12.
How it works
How Sandbox and Policy works
- Agent starts sandboxed
- Policy checked per tool call
- Violations logged
- Review centrally
FAQ
Questions about Sandbox and Policy
Can an agent use sudo or read my SSH keys?
No. The sandbox self-test confirms sudo fails, /etc writes fail, SSH keys are unreadable and LAN connections are refused.
Can agents push to GitHub?
No. Only the control layer writes to GitHub; agents never hold the token.
Is agnte certified for compliance?
agnte provides audit-ready logs of every action and decision. It does not hold a compliance certification today.
Related