Anthropic Open-Sources sandbox-runtime for OS-Level AI Agent Sandboxing
Anthropic has released sandbox-runtime (srt), an open-source Apache-2.0 npm package and TypeScript library that confines any process using OS isolation primitives instead of containers. It uses macOS Seatbelt, Linux bubblewrap and an alpha Windows mode, with deny-by-default networking routed through a host-side domain allowlist proxy. The tool applies to Claude Code, custom agents, local MCP servers and plain CLI programs, and Anthropic reports an 84% cut in Claude Code permission prompts from i