I created this tool because I kept running code that an LLM just wrote in my home folder. That felt risky. Every time you run a command it happens in its container. The container runs without network access by default. It's rootless. Once the command finishes the container gets deleted. It cleans up after itself.

It uses Linux namespaces, cgroups and seccomp. Not a microVM. It is lightweight and fast.