It's called Spora: https://spora.to/
The current MVP is about 90% vibe-coded while being a fairly sophisticated piece of software.
It supports multiple sandboxing backends such as docker, podman, kata, firecracker, and for Mac seatbelt and tart.
Any agent is in theory supported, but it has specific support for Claude, Gemini, codex, aider, and opencode.
Your workdir is never touched by the AI, nor is your system. It doesn't have access to your secrets (beyond what you've explicitly given), and you can restrict network access.
You move changes back to your workdir using diff and apply, so you choose which changes to keep.
I use it for all my agentic work, and couldn't go back to using Claude without it.
Ha! All jokes aside testing some different local dev workflows, so much cool AI tooling about.
mparas•1h ago
subdomain•46m ago