lucascs@protonmail.com Lucas C.S. Install the ai-jail-chromium wrapper script and its desktop entry, which start www-client/chromium inside an ai-jail sandbox with an isolated persistent browser profile akitaonrails/ai-jail https://github.com/akitaonrails/ai-jail/issues ai-jail runs AI coding agents inside a restricted sandbox so that an agent can only touch the project directory it was pointed at. On Linux it wraps bubblewrap (bwrap) and additionally applies Landlock and seccomp filters; on macOS it uses sandbox-exec. It is a single static command-line tool with no daemon: you prefix the agent invocation with ai-jail and it sets up the mount, filesystem and syscall restrictions before exec'ing the agent.