appcontainer

Sandboxed, Rust-based, Windows Defender Client

AppJailLauncher in Rust

Moved: https://codeberg.org/koutheir/binary-security-check

Daemon-less OS security boundary & sandbox for AI coding agents (Codex, Claude Code, Cursor, Aider)

Run a command in a sandbox with the same flags on every OS — one capability model compiled to Seatbelt (macOS), gVisor (Linux), and AppContainer (Windows).

Disclosing information from an AppContainer.

Run windows applications in AppContainer sandbox

A music playback app for the Legacy of Kain: Soul Reaver soundtrack.

⚡ Universal organizer for Windows 10 and 11: tray program sets, four-source machine sweep, isolated launch, per-drive Recycle Bin limits, Windows cleanup. Tauri 2 · Svelte 5 · Rust.

No-admin Windows process sandbox library for Rust with AppContainer and Windows Sandbox API backends

Development containers specificationfor developers, designers, data analyst, security agents, etc

Windows process sandboxing via AppContainer + Job Objects. Hard resource limits, process isolation, and a builtin compatibility checker. Zero runtime dependencies

The OS-level confinement layer from Convira: macOS Seatbelt, Linux Landlock/seccomp and Windows AppContainer/Job Objects, with probe-verified capability reporting.

Run Claude Code (or any program) in a real OS-level sandbox on native Windows — no admin rights, no WSL, no Docker. File, network & process allow-lists plus an audit log. CLI for developers, GUI for everyone.

This package contains the interop wrappers for WinRT-APIs, that depend on CoreWindow, and other interop helpers for WinUI Window (e.g. to set an icon). There are also some interop components that may help from inside an AppContainer like when using UWP.

A resident deputy for one seat: the learned side proposes, a deterministic seam alone authors verbs, and a hash-chained tape records every judgment and every hold with its margin. Design of record, 47 falsifiers each with a planted lie, and the AppContainer egress measurement it rests on.

Rust AppContainer and LPAC toolkit for Windows, extended with a security preset for secure MCP server isolation.

A lightweight (less than a megabyte) sandbox for Windows built mainly with Powershell 5 that uses users and AppContainer to isolate user level programs.

a demo/sample for an issue: https://github.com/MicrosoftDocs/msix-docs/issues/456

Give AI a goal. Keep control of the work. A Windows desktop app for approved coding tasks, isolated workspace execution, and recorded results. Powered by Codex.