Brood Box

stacklok/brood-box

Run AI coding agents (Claude Code, Codex, OpenCode) inside hardware-isolated microVMs with snapshot isolation, egress control, and MCP authorization

Go Apache-2.0

View on GitHub → Find it in the atlas

Install

git clone https://github.com/stacklok/brood-box.git

Repository reader

Explore before you clone

Read the project’s README, skills and supporting Markdown here. Rendered view is shown first; source is one click away when you need the exact text.

Fetched from GitHub
Open on GitHub
Loading the project’s README…

Public files are loaded on demand from the repository. The atlas does not copy or modify them.

Screenshot

Screenshot or social card for Brood Box
GitHub's social card — no screenshot was found for this project, fetched from source rather than copied into this repository.

Platform support

Derived from the project's own README, install route, CI configuration and release assets — not from running it.
PlatformRuns hereOn what evidence
WindowsNoNo evidence of support anywhere in the project.
WSL2YesStated in the project's own README, install route, CI config or release assets.
macOSYesStated in the project's own README, install route, CI config or release assets.
LinuxYesStated in the project's own README, install route, CI config or release assets.
DockerYesStated in the project's own README, install route, CI config or release assets.

Where it came from

Named by 6 of the 39 lists the atlas merges, independently of each other.

  • AI Coding Tools (a4d)
  • AI Dev Tools (murdza)
  • Claude Code
  • Claude Code Toolkit
  • LLMOps (tensorchord)
  • Opencode

How it is classified

One topic, 5 harnesses. Each link is a prerendered page of everything else in that slice.

Sandbox, Security & GovernanceClaude CodeClaude / AnthropicopencodeMCPCodex / OpenAI

Related in Sandbox, Security & Governance

Closest first — projects that plug into the same harnesses, then the ones the most lists agreed on.

  • Node9node9-ai/node9-proxySecurity and governance layer that checks every tool call from coding agents and MCP servers before it runs: credential jail, secret and PII…
  • Open AgentTh0rgal/orbSelf-hosted control plane for Claude Code with isolated container workspaces and real-time mission streaming
  • AI Agent Safety Starter Packel-zachariah/ai-agent-safety-starter-packFree repo preflight scanner for Claude Code, Codex, Cursor, and other AI coding-agent runs that flags agent instructions, MCP config, risky shell…
  • aicontainerstefanoginella/aicontainerby stefanoginella - Sandboxed devcontainer for running Claude Code, Codex, and OpenCode in bypass / auto-approve mode
  • compassdshakes/compassby dshakes - Developer-grade Claude Code + Codex configuration: cost-tiered subagents, workflow commands, guardrail hooks, MCP parity, and an…
  • libops/cli-sandboxlibops/cli-sandboxDocker sandbox container for Claude Code, Codex, Gemini CLI, and OpenCode
  • SkillPreflightagent-contracts/skill-preflightRead-only pre-install scanner for local and GitHub agent skills, with a 0-100 score across safety, permissions, token cost, and maintainability…
  • T3MP3STelder-plinius/T3MP3STMulti-agent offensive-security meta-harness (July 2026) that turns the coding agent you already run — Claude Code, Codex, OpenCode, or a fully…