Sandbox Runtime (srt)

sandbox

Properties

vendor: Anthropic
url: https://github.com/anthropic-experimental/sandbox-runtime
whatItIs: A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
hosting: self-host-only
pricingModel: free (Apache 2.0 open source)
modelProviders: n/a (model-agnostic process sandbox)
stateModel: stateless (wraps processes)
toolModel: CLI wrapper + config; Seatbelt on macOS, bubblewrap on Linux, plus a network-filtering proxy
includesBrowser: false
includesMemory: false
longRunning: bounded by wrapped process
hitlSupport: false
observability: violation logging
maturity: preview
launched: 2025
notes: Research preview, Apache 2.0, 5,000+ GitHub stars. OS-level isolation (no container) developed for Claude Code and open-sourced for the broader ecosystem; complements rather than competes with cloud sandboxes like E2B or Daytona.

sandbox

vendor: Anthropic
url: https://github.com/anthropic-experimental/sandbox-runtime
whatItIs: A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
hosting: self-host-only
pricingModel: free (Apache 2.0 open source)
modelProviders: n/a (model-agnostic process sandbox)
stateModel: stateless (wraps processes)
toolModel: CLI wrapper + config; Seatbelt on macOS, bubblewrap on Linux, plus a network-filtering proxy
includesBrowser: false
includesMemory: false
longRunning: bounded by wrapped process
hitlSupport: false
observability: violation logging
maturity: preview
launched: 2025
notes: Research preview, Apache 2.0, 5,000+ GitHub stars. OS-level isolation (no container) developed for Claude Code and open-sourced for the broader ecosystem; complements rather than competes with cloud sandboxes like E2B or Daytona.