https://github.com/lensapp/lens-sandbox-core
Core Rust library for Lens sandbox policy enforcement, networking, DNS, proxying, and boundary credential exchange.
https://github.com/lensapp/lens-sandbox-core
agent-sandbox agent-security ai-agent-security ai-agents ai-security credential-management dns llm-sandbox llm-security mcp microvm network-security nftables policy-enforcement proxy runtime-security rust sandbox zero-trust
Last synced: 19 days ago
JSON representation
Core Rust library for Lens sandbox policy enforcement, networking, DNS, proxying, and boundary credential exchange.
- Host: GitHub
- URL: https://github.com/lensapp/lens-sandbox-core
- Owner: lensapp
- License: apache-2.0
- Created: 2026-05-27T06:50:33.000Z (about 2 months ago)
- Default Branch: main
- Last Pushed: 2026-06-24T11:24:40.000Z (22 days ago)
- Last Synced: 2026-06-24T13:14:03.529Z (22 days ago)
- Topics: agent-sandbox, agent-security, ai-agent-security, ai-agents, ai-security, credential-management, dns, llm-sandbox, llm-security, mcp, microvm, network-security, nftables, policy-enforcement, proxy, runtime-security, rust, sandbox, zero-trust
- Language: Rust
- Homepage: https://lns.run
- Size: 502 KB
- Stars: 8
- Watchers: 0
- Forks: 0
- Open Issues: 6
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Security: SECURITY.md
- Agents: AGENTS.md
Awesome Lists containing this project
README
# lens-sandbox-core
[](https://github.com/lensapp/lens-sandbox-core/actions/workflows/ci.yml)
[](LICENSE)
[](crates/lens-sandbox-core/Cargo.toml)
`lens-sandbox-core` is the Rust library used by Lens Sandbox and Lens Agents to enforce governed network, DNS, proxy, credential, and policy behavior inside sandboxed execution environments.
It is core runtime plumbing, not an end-user product. Applications embed it to give sandboxed workloads controlled access to external systems: DNS requests, outbound network traffic, HTTP CONNECT proxying, TLS interception paths, boundary credential exchange, policy lifecycle, and activity reporting.
## What This Crate Provides
- Policy-controlled outbound network access
- DNS filtering and allowlist behavior
- HTTP CONNECT proxy support
- Transparent proxy routing support
- TLS interception support for governed traffic
- Boundary credential exchange and request signing
- nftables-based network lockdown helpers
- WebSocket-driven policy lifecycle integration
- Activity and audit event primitives
## What This Crate Is Not
`lens-sandbox-core` is not a complete sandbox product by itself. It does not create the desktop app, enterprise platform, UI, packaging, distribution, or microVM lifecycle.
The effective security boundary depends on the caller's deployment model: container, microVM, Linux capabilities, filesystem mounts, process model, and policy source.
## Relationship to Lens Sandbox and Lens Agents
Lens Sandbox uses this crate as the local enforcement core for sandboxed workloads on a developer machine.
Lens Agents uses the same core enforcement model in organizational deployments where central IT manages policies, credentials, connections, and audit across many agents.
The shared crate keeps low-level runtime behavior consistent across both products.
## Open Source
This project is licensed under Apache 2.0. See:
- [CONTRIBUTING.md](CONTRIBUTING.md) for development workflow and contribution guidance.
- [SECURITY.md](SECURITY.md) for vulnerability reporting and security scope.
- [CHANGELOG.md](CHANGELOG.md) for release notes.
- [CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md) for community expectations.
## Local Setup
```bash
git config core.hooksPath .githooks
```
## Building
```bash
cargo build -p lens-sandbox-core
cargo test -p lens-sandbox-core
```
Integration tests requiring Linux + nftables + `CAP_NET_ADMIN` are `#[ignore]`-gated. Run them with:
```bash
cargo test -p lens-sandbox-core -- --ignored
```
## Policy Schema
The canonical policy schema lives in `schemas/policy.schema.json`. Regenerate it with:
```bash
cargo run --bin generate-policy-schema > schemas/policy.schema.json
```
## License
Apache 2.0 — see [LICENSE](LICENSE).