box

Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon, with Linux support planned.

strands-agents/box

View on GitHub ↗

Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon, with Linux support planned.

box ranks 128th of 320 in Production Serving & Deployment, actively maintained, last commit today.

Star trajectory

16 days tracked
2026-10-10468 stars today2026-10-25
Momentum

- in 30d, below the Production Serving & Deployment median of +1.2%.

Maintenance

Last commit today, fresher than the median of 3d.

How it compares in Production Serving & Deployment

box
468
stars
- 30d
commit today
Production Serving & Deployment median
313
stars
+1.2% 30d
commit ~3d ago
Leader · vllm
95.4k
stars
+3.0% 30d
commit today

Ranked 128th of 320 by stars.

Language
Rust
License
Apache License 2.0
Contributors
9
Forks
33
Watchers
1
Open issues
38
Releases
1
Created
2026-10-02
Stars this week
+36

You've seen where box stands today.

Get the moves before everyone else: the 5 Production Serving & Deployment repos climbing fastest, every Tuesday.

Free weekly digest. Double opt-in, unsubscribe anytime.

Maintain box?

Claim this page to add your own call-to-action.

Claim this page