Ash, an Agent Sandbox for Mac
Ash is a macOS sandbox that restricts AI coding agents. It limits access to files, networks, processes, IO devices, and environment variables. You can use Ash with any CLI coding agent by wrapping it in a single command: `ash run -- `. I typically use it with Claude to stay safe while avoiding repetitive prompts: `ash run -- claude --dangerously-skip-permissions`. Ash restricts resources via the Endpoint Security and Network Extension frameworks. These frameworks are significantly more powerful than the sandbox-exec tool. Each session is driven by a policy file. Any out-of-policy action is…
Ash, an Agent Sandbox for Mac launched on March 10, 2026 with 16 votes, #953 of 23,380 launches that month and more than 90% of that year's launches.
In plain words
Ash is a macOS sandbox designed to restrict AI coding agents by limiting their access to files, networks, processes, IO devices, and environment variables. Users can wrap any CLI coding agent with a single command to run it safely within Ash's policy framework. The tool uses macOS Endpoint Security and Network Extension frameworks to enforce restrictions, denying any out-of-policy actions by default. It includes a GUI for auditing denied actions and a policy-building tool that lets users observe agent behavior to create appropriate access rules.
written from the facts on this page · September 2026
From the sources
Ash is a macOS sandbox that restricts AI coding agents with system-level security. It limits access to files, networks, processes, IO devices, and environment variables.
In the maker’s words, at launch
Ash is a macOS sandbox that restricts AI coding agents. It limits access to files, networks, processes, IO devices, and environment variables. You can use Ash with any CLI coding agent by wrapping it in a single command: `ash run -- <agent>`. I typically use it with Claude to stay safe while avoiding repetitive…
Does a similar job
all alternatives →
Agent-of-empires: OpenCode and Claude Code session managerJan 2026 · github.com · ▲118Hi! I’m Nathan: an ML Engineer at Mozilla.ai: I built agent-of-empires (aoe): a CLI application to help you manage all of your running Claude Code/Opencode sessions and know when they are waiting for you. - Written in rust and relies on tmux for security and reliability - Monitors state of cli sessions to tell you when an agent is running vs idle vs waiting for your input - Manage sessions by naming them, grouping them, configuring profiles for various settings I'm passionate about getting self-hosted open-weight LLMs to be valid options to compete with proprietary closed models. One…
EphoAug 2026 · epho.io · ▲156Hey folks, Burak here. Epho is an API that allows running Claude Code, Codex or Opencode in a sandbox in the cloud. It abstracts away sandboxes, and allows running coding agents with a single HTTP request. Epho came out of our own struggles with building our own AI analyst: - Sandboxes give you bare machines; you need to configure them for agentic workloads. - Each agent behaves differently, and you need to build integrations with each of them. - Sandbox providers are not very reliable, which means you need to figure out a multi-provider strategy to avoid failures. - Logging, artifacts,…
Yolobox – Run AI coding agents with full sudo without nuking home dirJan 2026 · github.com · ▲122Let your AI go full send. Your home directory stays home. - finbarr/yolobox
Pu.sh – a full coding-agent harness in 400 lines of shellApr 2026 · pu.dev · ▲92I originally was just messing with pi-autoresearch. Gave it a sample task to build the most portable coding agent. First cut was 6 KB of shell. Great for one-shots, unusable interactively. I was shocked it actually worked. Started building up -- adding features — but with a self-imposed rule: no new dependencies, and sub 500 LOC. This thing had to be truly portable. Just sh, curl, awk. System primitives only. Which means I did some genuinely disgusting things in awk, including JSON parsing and the OpenAI Responses tool loop with reasoning items carried across turns. It's now ~400 lines. In…
More ai this month
the category →
Paintings by AI models: programs run through a simulation of oil paint.
AI · 21d ago · stillwet.art
PixVerse R2▲381A real-time world model you can explore and change
AI · 29d ago · world.pixverse.video
Source: Show HN post ↗ · launch text quoted in part
Launched alongside, March 2026
the whole month →
Switch from ChatGPT to Claude with import memory feature
AI · Mar 2026 · claude.com
Littlebird▲709Littlebird remembers everything across your meetings, messages, docs, and apps, then takes action so you can recall any detail and never lose context.
AI · Mar 2026 · littlebird.ai
