januas

Supervision, containment and approval for AI coding agents. Any vendor, side by side, each one held inside a real sandbox.

In development. Not released, no download, repository private.

What it does

  • containmentKernel sandbox per agent. The rules sit outside every region it can write.
  • networkOne socket out. A local proxy holds the allowlist, per agent.
  • approvalOne queue for every agent. Each verdict written to disk.
  • rewindA contained turn writes in known regions, so it can be put back.
  • vendorsclaude, codex, opencode, gemini, and local models over HTTP.

Reported upstream