appcontainer

Sandboxed, Rust-based, Windows Defender Client

Windows-first desktop oversight for AI agents: live monitoring, local security reviews, token usage, audit reports and opt-in action policies/MCP gateways. Experimental Hyper-V guest execution; macOS/Linux experimental.

AppJailLauncher in Rust

Moved: https://codeberg.org/koutheir/binary-security-check

Run a command in a sandbox with the same flags on every OS — one capability model compiled to Seatbelt (macOS), gVisor (Linux), and AppContainer (Windows).

Disclosing information from an AppContainer.

Unofficial, local-first Windows desktop client for Xiaomi Mi Home accounts

Run windows applications in AppContainer sandbox

A music playback app for the Legacy of Kain: Soul Reaver soundtrack.

⚡ Universal organizer for Windows 10 and 11: tray program sets, four-source machine sweep, isolated launch, per-drive Recycle Bin limits, Windows cleanup. Tauri 2 · Svelte 5 · Rust.

No-admin Windows process sandbox library for Rust with AppContainer and Windows Sandbox API backends

The OS-level confinement layer from Convira: macOS Seatbelt, Linux Landlock/seccomp and Windows AppContainer/Job Objects, with probe-verified capability reporting.

This package contains the interop wrappers for WinRT-APIs, that depend on CoreWindow, and other interop helpers for WinUI Window (e.g. to set an icon). There are also some interop components that may help from inside an AppContainer like when using UWP.

Dynamic Just-in-Time (JIT) security sandboxing engine for autonomous AI agents. Enforces native OS kernel isolation (macOS Seatbelt, Linux Landlock, Windows AppContainer) via dynamic LLM intents, deterministic Two-Factor Validation (2FV), and active honeypot deception.

Windows photo and video recovery for digital media examination: visual triage, source offsets, SHA-256 and dated findings. Signed releases; free scans and previews.

Run Claude Code (or any program) in a real OS-level sandbox on native Windows — no admin rights, no WSL, no Docker. File, network & process allow-lists plus an audit log. CLI for developers, GUI for everyone.

Development containers specificationfor developers, designers, data analyst, security agents, etc

Windows process sandboxing via AppContainer + Job Objects. Hard resource limits, process isolation, and a builtin compatibility checker. Zero runtime dependencies

Give AI a goal. Keep control of the work. A Windows desktop app for approved coding tasks, isolated workspace execution, and recorded results. Powered by Codex.

Windows-native MCP agent sandbox for Ollama with LPAC, NTFS ACL, Job Objects, and WFP.