fencesandbox/fence
Fence is a container-free command-line sandbox that restricts network and filesystem access, designed to work as a permission manager for AI coding agents.
Collecting fresh signals — velocity needs a few days of history.
star history
Fence wraps commands in a sandbox that blocks network access by default and enforces configurable filesystem rules, using mechanisms such as Landlock, seccomp, Seatbelt, and bubblewrap. It is intended for running semi-trusted code such as package installs, build scripts, and CI jobs with controlled side effects. The tool also functions as a permission manager for CLI coding agents, with documented support for agents like Claude Code, Codex, Gemini CLI, and GitHub Copilot.
Frequently asked
- What is fencesandbox/fence?
- Fence is a container-free command-line sandbox that restricts network and filesystem access, designed to work as a permission manager for AI coding agents.
- Is fence open source?
- Yes — fencesandbox/fence is open source, released under the Apache-2.0 license.
- What language is fence written in?
- fencesandbox/fence is primarily written in Go.
- How popular is fence?
- fencesandbox/fence has 1k stars on GitHub.
- Where can I find fence?
- fencesandbox/fence is on GitHub at https://github.com/fencesandbox/fence.