Agentbox

Local-first governed runtime for autonomous agents. Intercepts risky host actions (shell, network, credentials, filesystem), routes them through deterministic policy and out-of-band approval, and records auditable execution evidence. Provides an AgentPod contract so agents can run task-scoped cells without unsupervised access to the real machine.