James F McMahon JamesMcMahon

Coding Agent Sandboxes — Comprehensive List

Compiled from awesome-lists (restyler/awesome-sandbox, webcoyote/awesome-AI-sandbox, bureado/awesome-agent-runtime-security) and a survey of vendor blogs / field guides published through 2026. Grouped by isolation primitive and then by deployment model.

These rely on kernel/userland features to constrain a normal host process. Lowest overhead, weakest boundary.

macOS Seatbelt / sandbox-exec — Apple's TrustedBSD-based MAC framework. Used directly by Codex CLI, Gemini CLI, and underneath Anthropic's srt.
Linux Landlock — Unprivileged filesystem/network LSM; default backend for Codex CLI on Linux.

	#!/usr/bin/gjs
	const {GLib, Gio} = imports.gi;

	const BUS_NAME = 'org.gnome.Mutter.DisplayConfig';
	const BUS_PATH = '/org/gnome/Mutter/DisplayConfig';

	const ColorMode = {SDR: 0, HDR: 1};
	const PERSISTENT = 2;

	const connection = Gio.bus_get_sync(Gio.BusType.SESSION, null);

	# Config Generated by MangoJuice #
	legacy_layout=false
	pci_dev=0000:03:00.0 # AMD/ATI Navi 31 Radeon RX 7900 XT/7900 XTX/7900 GRE/7900M rev c8
	gpu_stats
	gpu_load_change
	vram
	gpu_temp
	cpu_stats
	cpu_load_change
	cpu_temp

	#!/usr/bin/env bash

	# Toggle HDR on a given display using kscreen-doctor
	# Usage: ./toggle-hdr.sh <output-name>
	# Example: ./toggle-hdr.sh DP-2

	set -euo pipefail

	OUTPUT="${1:-DP-1}"

	#!/usr/bin/env bash

	for app in $(flatpak list --app --columns=application); do
	user_overrides=$(flatpak override --show --user "$app")
	system_overrides=$(flatpak override --show "$app")

	if [[ -n "$user_overrides" \|\| -n "$system_overrides" ]]; then
	echo "Overrides for $app:"

	if [[ -n "$user_overrides" ]]; then

	#!/usr/bin/env sh
	set -e

	echo "Running pre-push hook..."
	git fetch

	if ! git diff-index --quiet HEAD --; then
	echo "Local changes found, please commit or stash"
	exit 1
	fi

	# Edit this file to introduce tasks to be run by cron.
	#
	# Each task to run has to be defined through a single line
	# indicating with different fields when the task will be run
	# and what command to run for the task
	#
	# To define the time you can provide concrete values for
	# minute (m), hour (h), day of month (dom), month (mon),
	# and day of week (dow) or use '*' in these fields (for 'any').#
	# Notice that tasks will be started based on the cron's system

	#!/usr/bin/env bash
	set -e

	log_file=$1
	local_path=$2
	remote_path=$3

	time rsync --archive --verbose --new-compress --human-readable --protect-args --progress --exclude=.DS_Store --log-file=rsync_${log_file}.log ${local_path} ${remote_path}

	time rsync --checksum --archive --verbose --new-compress --human-readable --protect-args --progress --exclude=.DS_Store --log-file=rsync_${log_file}_checksum-verify.log ${local_path} ${remote_path}

	#!/usr/bin/env python

	import os
	import sys

	def remove_prefix(text, prefix):
	if text.startswith(prefix):
	return text[len(prefix):]
	return text