januas
Supervision, containment and approval for AI coding agents. Any vendor, side by side, each one held inside a real sandbox.
In development. Not released, no download, repository private.
What it does
- containmentKernel sandbox per agent. The rules sit outside every region it can write.
- networkOne socket out. A local proxy holds the allowlist, per agent.
- approvalOne queue for every agent. Each verdict written to disk.
- rewindA contained turn writes in known regions, so it can be put back.
- vendorsclaude, codex, opencode, gemini, and local models over HTTP.