strands-agents/box
Strands Box is an open source sandbox engine for running AI agents under OS-level isolation and default-deny policies.
Collecting fresh signals — velocity needs a few days of history.
collecting data…
star history
Strands Box runs AI agent programs inside a sandbox that restricts what they can execute, read, write, and reach on the network. It combines operating-system isolation with semantic policies written in the Dogwood language, evaluated by an embedded local engine that denies operations by default. Configuration is done via box.toml and policy.dw, with an egress gateway and MCP broker routing agent operations through policy checks. The project is harness-agnostic, written in Rust, and supports macOS on Apple silicon and Linux.
Frequently asked
- What is strands-agents/box?
- Strands Box is an open source sandbox engine for running AI agents under OS-level isolation and default-deny policies.
- Is box open source?
- Yes — strands-agents/box is open source, released under the Apache-2.0 license.
- What language is box written in?
- strands-agents/box is primarily written in Rust.
- How popular is box?
- strands-agents/box has 504 stars on GitHub.
- Where can I find box?
- strands-agents/box is on GitHub at https://github.com/strands-agents/box.