Repository navigation
Download
Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon, with Linux support planned.
curl -fsSL https://raw.githubusercontent.com/strands-agents/box/main/download.sh | shPin this exact release:
curl -fsSL https://raw.githubusercontent.com/strands-agents/box/main/download.sh | BOX_VERSION=v0.1.0 shAssets
box-v0.1.0-aarch64-apple-darwin.tar.gz unpacks to the ./box-core layout: box beside its helper binaries. SHA256SUMS.txt is the aggregate checksum file the downloader verifies against.