Security tooling for AI coding agents. Local-first. Fail-closed.
vetto — daemon-less sandbox for AI coding agents (Codex, Claude Code, Cursor, Aider). Wraps any CLI in a kernel boundary: Landlock + namespaces + seccomp-BPF on Linux, Seatbelt on macOS, experimental AppContainer on Windows. TOML policy for filesystem roots, secret deny-paths, network off / domain allowlist, limits, timeout. No Docker, no root. npm i -g @shledery/vetto
codex-rescue — local-first recovery tool for interrupted and damaged OpenAI Codex sessions.
Issues in the respective repos are the fastest way to reach me.