{"id":51043661,"url":"https://github.com/axeforging/aigate","last_synced_at":"2026-06-22T12:02:09.236Z","repository":{"id":343580543,"uuid":"1156159207","full_name":"AxeForging/aigate","owner":"AxeForging","description":"OS-level sandbox for AI coding agents - kernel-enforced file, command, and network isolation","archived":false,"fork":false,"pushed_at":"2026-06-08T17:35:21.000Z","size":3132,"stargazers_count":14,"open_issues_count":1,"forks_count":1,"subscribers_count":1,"default_branch":"main","last_synced_at":"2026-06-08T19:14:04.588Z","etag":null,"topics":["ai-agents","ai-security","execution-sandbox","sandboxing","sandboxing-tool","secure-ai","secure-llm","zero-trust"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/AxeForging.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2026-02-12T10:27:56.000Z","updated_at":"2026-06-08T17:35:26.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/AxeForging/aigate","commit_stats":null,"previous_names":["axeforging/aigate"],"tags_count":8,"template":false,"template_full_name":null,"purl":"pkg:github/AxeForging/aigate","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AxeForging%2Faigate","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AxeForging%2Faigate/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AxeForging%2Faigate/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AxeForging%2Faigate/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/AxeForging","download_url":"https://codeload.github.com/AxeForging/aigate/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AxeForging%2Faigate/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34647750,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-22T02:00:06.391Z","response_time":106,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ai-agents","ai-security","execution-sandbox","sandboxing","sandboxing-tool","secure-ai","secure-llm","zero-trust"],"created_at":"2026-06-22T12:02:03.044Z","updated_at":"2026-06-22T12:02:09.213Z","avatar_url":"https://github.com/AxeForging.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# aigate\n\n\u003cdiv align=\"center\"\u003e\n  \u003cimg src=\"docs/banner.png\" alt=\"AiGate\" width=\"400\"\u003e\n  \u003cp\u003e\n    \u003cimg src=\"https://img.shields.io/badge/Go-1.25%2B-00ADD8?style=flat-square\u0026logo=go\" alt=\"Go Version\"\u003e\n    \u003cimg src=\"https://img.shields.io/badge/OS-Linux%20%7C%20macOS%20%7C%20WSL-darkblue?style=flat-square\" alt=\"OS Support\"\u003e\n    \u003cimg src=\"https://img.shields.io/badge/License-MIT-green?style=flat-square\" alt=\"License\"\u003e\n  \u003c/p\u003e\n\u003c/div\u003e\n\n**OS-level sandbox for AI coding agents.** Kernel-enforced file, command, and network isolation for Claude Code, Cursor, Copilot, Aider, and any AI tool. Like a Python venv but for AI permissions.\n\n## TL;DR\n\n```sh\n# Install\ncurl -L https://github.com/AxeForging/aigate/releases/latest/download/aigate-linux-amd64.tar.gz | tar xz\nsudo mv aigate-linux-amd64 /usr/local/bin/aigate\n\n# Install sandbox dependencies (Linux)\nsudo dnf install bubblewrap slirp4netns   # Fedora / RHEL\n# sudo apt install bubblewrap slirp4netns  # Ubuntu / Debian\n\n# Set up sandbox\nsudo aigate setup              # One-time: create OS group/user for ACLs\naigate init                    # Create default config\naigate doctor                  # Verify prerequisites\n\n# Add restrictions\naigate deny read .env secrets/ *.pem\naigate deny exec curl wget ssh\n\n# Run any AI tool inside the sandbox\naigate run -- claude\naigate run -- cursor\n```\n\n## Why?\n\nAI coding tools rely on application-level permission systems that can be bypassed. For GDPR/ISO/security-regulated companies, that's not enough. aigate uses the OS kernel as the trust boundary:\n\n| Approach | Enforced by | Bypassable? |\n|----------|-------------|-------------|\n| .claudeignore | App | Yes (proven broken) |\n| permissions.deny | App | Theoretically |\n| **aigate (ACLs + namespaces)** | **Kernel** | **No** |\n\n## Features\n\n- **File isolation** - POSIX ACLs (Linux) / macOS ACLs deny read access to secrets\n- **Process isolation** - Bubblewrap (`bwrap`) + mount namespaces isolate the sandbox declaratively (Linux); Seatbelt on macOS\n- **Network isolation** - `bwrap --unshare-net` + `slirp4netns` + `iptables` (+ `ip6tables` for IPv6 when available) restrict egress to allowed domains (Linux)\n- **Command blocking** - Deny execution of dangerous commands (curl, wget, ssh)\n- **Output masking** - Redact secrets (API keys, tokens) from stdout/stderr before they reach the terminal\n- **Audit log + dashboard** - Every run and blocked command is recorded to `~/.aigate/audit.jsonl`; `aigate serve` exposes a local web dashboard over it\n- **Tool-agnostic** - Works with any AI tool: Claude Code, Cursor, Copilot, Aider\n- **Sensible defaults** - Ships with deny rules for .env, secrets/, .ssh/, *.pem, etc.\n- **Project-level config** - `.aigate.yaml` extends global rules per project\n\n## Documentation\n\n| Audience | Link |\n|----------|------|\n| **Users** | [docs/user/README.md](docs/user/README.md) - Installation, usage, examples |\n| **AI Assistants** | [docs/AI/README.md](docs/AI/README.md) - Architecture, testing, common tasks |\n\n---\n\n## Commands\n\n```sh\nsudo aigate setup                           # Create OS group/user (one-time)\naigate init                                 # Create default config\naigate doctor                               # Check prerequisites and isolation mode\naigate deny read .env secrets/ *.pem        # Block file access\naigate deny exec curl wget ssh              # Block commands\naigate deny net --except api.anthropic.com  # Restrict network\naigate allow read .env                      # Remove a deny rule\naigate run -- claude                        # Run AI tool in sandbox\naigate status                               # Show current rules\naigate serve                                # Local web dashboard over the audit log\naigate help-ai                              # Show AI-friendly usage examples\naigate reset --force                        # Remove everything\n```\n\n## How It Works\n\n![Linux Process Isolation](docs/diagrams/linux-process.png)\n\nSee [docs/user/README.md](docs/user/README.md) for detailed architecture diagrams covering file isolation, network isolation (Linux \u0026 macOS), and process isolation.\n\n## Configuration\n\nGlobal config (`~/.aigate/config.yaml`) is created by `aigate init` with defaults. Extend per-project with `.aigate.yaml`:\n\n```yaml\n# .aigate.yaml (in project root)\ndeny_read:\n  - \"terraform.tfstate\"\n  - \"vault-token\"\nallow_net:\n  - \"registry.terraform.io\"\n```\n\n## Exit Codes\n\n| Code | Meaning |\n|------|---------|\n| 0 | Success |\n| 1 | Error |\n\n## License\n\nMIT - see [LICENSE](LICENSE)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Faxeforging%2Faigate","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Faxeforging%2Faigate","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Faxeforging%2Faigate/lists"}