Show HN: Plimsoll, a self-hosted sandbox for code your AI agent writes

Category: security

Tags: sandbox, security, ai-agents, isolation, code-execution, go

Score: 7.5/10 (Innovation: 7, Technical: 8, Documentation: 8, Utility: 7)

Plimsoll is a self-hosted sandbox for running untrusted code, especially AI-generated code, with explicit isolation tiers (process, container, kernel, VM) and a mechanism to enforce minimum isolation levels. It also provides capability grants that allow sandboxed code to call APIs without exposing credentials, and includes an attestation tool for verifying run records. The project targets AI agent frameworks and offers integrations.

Target audience: backend developers, devops, AI engineers

Repository: https://github.com/plimsollmark/plimsoll · Go · Apache-2.0 · 27 stars

View on Hacker News