Sandbox wrapper for Claude Code and OpenCode using bubblewrap (bwrap) on Linux, with OS-enforced repo-only filesystem access.
linux cli security sandbox opencode developer-tools bubblewrap bwrap namespace-isolation claude-code ai-coding-agent filesystem-isolation
-
Updated
Feb 27, 2026 - Shell