lucascs@protonmail.com Lucas C.S. Install the ai-jail-chromium wrapper and its desktop entry, which launch www-client/chromium inside the sandbox with an isolated, persistent browser profile akitaonrails/ai-jail https://github.com/akitaonrails/ai-jail/issues https://github.com/akitaonrails/ai-jail/releases ai-jail runs AI coding agents (Claude Code, Codex, Gemini, opencode and others) inside an unprivileged sandbox, so an agent can only reach the files and network the user granted it. On Linux the sandbox is bwrap from sys-apps/bubblewrap; paths are mapped read-only, read-write or copy-on-write, home dotdirs are hidden by default, and individual paths can be masked or denied outright. This package installs the prebuilt x86_64 executable published by upstream on GitHub Releases. It is mutually exclusive with the from-source sys-apps/ai-jail: both install /usr/bin/ai-jail.