Limit Memory, Processes, And Execution Time Without Containers

A Linux process sandbox for running untrusted code, including AI agent workloads. It uses Landlock and seccomp for filesystem, network, and syscall controls, with Rust, Python, and Go interfaces.

AI Tools | Rust · AI agent sandbox · process isolation