plimsoll

Documentation

A sandbox service for running untrusted, agent-authored code that reports the isolation boundary each run executed behind, and refuses the run when it is weaker than the caller demanded.

Pre-1.0, single author, no external users yet, and no third-party security audit has ever been performed. The README says so at greater length.