An open-source command-line tool that gives AI coding agents disposable, network-restricted Linux virtual machines. Code is mounted from the host while files and keychains remain protected, and outbound traffic is controlled by a per-sandbox allowlist.