Show HN: I built Airlock, to sandbox your AI agent and know what it's doing

Category: security

Tags: sandbox, ai-agents, macos, security, virtualization, code-review

Score: 7.7/10 (Innovation: 8, Technical: 8, Documentation: 7, Utility: 7)

Airlock is a macOS tool that runs AI coding agents like Claude Code and Codex inside a sandboxed virtual machine, isolating them from your real filesystem and network. It provides per-file diff review before changes reach your project, monitors all processes, file touches, and network connections in real time, and supports macOS VMs that reuse your existing Xcode installation. This addresses a critical security gap in agentic coding by preventing agents from accessing sensitive data or making unreviewed changes.

Target audience: developers using AI coding agents, especially those working on sensitive codebases

Repository: https://airlock.sorrel.systems

View on Hacker News