Record Policy Decisions For Auditing

A Rust sandbox engine for running AI agents with OS-level isolation and default-deny Dogwood policies. It controls filesystem, process, network, and MCP access, and can inject credentials without exposing secrets to the agent.

AI Agents | Rust · agent sandbox · AI safety