RSS feedchock.ws
Chock Runs AI Agent Tools in a Fail-Closed SandboxChock is a tool that runs every AI agent tool call inside the operating system's sandbox, using a copy of the project rather than the user's real files. This means agent actions cannot change the original project. If the sandbox cannot be applied, Chock stops the tool call entirely. The system provides no option to disable the sandbox.