Agent Safehouse provides sandboxing for local AI agents on macOS using sandbox-exec with composable policy profiles, focusing on deny-first access control and built-in agent workflows.
Collecting history — the radar snapshots this repo daily. The trend line appears after 3 days of data (1 so far).
What it is
Agent Safehouse sandboxs your LLM coding agents on macOS so they can only access the files and integrations they actually need. It uses sandbox-exec with composable policy profiles and a deny-first model. It includes profiles for major coding agents and app-hosted agent workflows while keeping normal development usage practical.
How it works
The tool renders policy rules from built-in profiles to grant or deny access to file paths and system resources. It supports machine-specific defaults and allows appending machine-local profiles to refine permissions. It auto-detects Git worktrees at launch to grant shared Git metadata access when applicable. The policy system emphasizes deny-all starting point and least-privilege grants.
Getting started
Install via Homebrew:
brew install eugene1g/safehouse/agent-safehouse
Standalone script:
mkdir -p ~/.local/bin
curl -fsSL https://github.com/eugene1g/agent-safehouse/releases/latest/download/safehouse.sh \
-o ~/.local/bin/safehouse
chmod +x ~/.local/bin/safehouse
The README provides example shell and fish wrappers configuring safehouse with --append-profile and --add-dirs-ro for machine-local defaults, and example usage for specific agents:
safe() {
safehouse \
--add-dirs-ro="$HOME/server" \
--append-profile="$SAFEHOUSE_APPEND_PROFILE" \
"$@"
}
Recent releases
- v0.11.1 (2026-07-17): Bug fixes including
--enable=1passwordunblocking UNIX socket for SSH-signing, and enhancement for--enable=agent-browser. - v0.11.0 (2026-07-08): Breaking: UNIX-socket access denied by default; may require
--append-profilefor custom setups. - v0.10.1 (2026-05-20): Bug fixes: SysV semaphores allowed by default to accommodate LMDB-backed tools.
- v0.10.0 (2026-05-19): Features: added Elixir runtime support and expanded Xcode integration for simulator-targeted builds.
- v0.9.0 (2026-03-27): Features: opt-in
--enable=cloud-storageintegration for macOS FileProvider and FileCoordination lookups.
Traction
Stars: 1945 Forks: 79 Open issues: 23
Behind the repo
The repository targets macOS-oriented sandboxing for AI agent workflows and mentions Homebrew distribution and a standalone safehouse script, with documentation hosted at agent-safehouse.dev.
Caveats
License: Apache-2.0 Created: 2026-02-09 Last push: 2026-07-29 Language: Shell