code-on-incus
Give the agent a machine. Just not yours. Each AI coding agent gets its own isolated machine with root, Docker, and systemd - active defense detects and stops threats automatically.
Not yet testedsource: GitHubhomepageGoMITcommit df175f033266
Go, MIT licensed. The project labels itself: agentic ai, ai tools, anthropic, claude, claude code, code sandbox, codex and coding assistant.
code-on-incus has not been verified yet.
Measured by Argusic on a fresh machine every time. Every number links to its evidence.
At a glance
Subject data from GitHub, linked at the top of this page, refreshed . Test data by Argusic (CC BY 4.0); every number links to a run page with the full log, the recording, and their sha256 hashes.
Also tested, in the same area
Every one of these was installed and run by Argusic on a clean machine. Nothing appears here that was not tested.
Run history
No recorded runs.
Topics (from GitHub)
agentic-aiai-toolsanthropicclaudeclaude-codecode-sandboxcodexcoding-assistantcontainer-securitycontainersdeveloper-toolsincusllm-securityllm-toolslxcopencodeopencode-aisandboxsandboxing-toolsecurity
Embed the badge
Markdown for the project README. It links back here; terms on the terms page.
[](https://argusic.com/subject/code-on-incus)Questions
- Does code-on-incus run?
- code-on-incus has not been fully verified yet. No recorded run has produced a verdict yet.
- How did Argusic test code-on-incus?
- On a fresh, disposable machine, with every command recorded. 0 attempts are recorded, and the full method is on the methodology page.
- Where is the evidence for code-on-incus?
- All 0 recorded runs are on this page, each linking to its full log and terminal recording, stored with a sha256 fingerprint so it cannot be quietly altered.