CALF - Coding Agent Loader

Status: Phase 0 (Bootstrap) Complete | Phase 1 (CLI Foundation) In Progress

VM-based sandbox for running AI coding agents (Claude Code, Cursor, opencode) safely in isolated Tart macOS VMs.

Features

• Complete isolation - Agents run in VMs with no host filesystem access
• Network isolation - --no-network / --safe-mode block local network access
• GitHub workflow - Clone → edit → commit → PR, all changes tracked in git
• Multi-agent - Claude Code, Cursor, opencode (with automatic keychain unlock for OAuth)
• Instant rollback - Snapshots recover from any mishap in seconds
• Transparent proxy - Works in corporate environments with network restrictions

Requirements

• macOS 13+ on Apple Silicon
• ~60-100 GB free disk space per VM

Quick Start

# 1. Install Tart (optional - calf-bootstrap will auto-install if not present)
brew install cirruslabs/cli/tart

# 2. Run bootstrap script (creates VMs, installs tools, sets up SSH keys)
./scripts/calf-bootstrap --init

# 3. After manual login setup, start developing
./scripts/calf-bootstrap --run

Note: calf-bootstrap will automatically install Tart via Homebrew if it's not already installed.

See Bootstrap Guide for setup instructions.

Agent Support

Context for AI coding agents is in AGENTS.md with symlinks:

• CLAUDE.md → Claude Code
• .cursorrules → Cursor

Documentation

Quick Start:

• Bootstrap Guide - VM setup and daily workflow
• ADR-002 - Comprehensive operational guide
• No-Network Security Notes - SMB bypass investigation and mitigations

Planning:

• PLAN.md - TODOs and status (source of truth)
• Roadmap - Phase overview

Reference:

• Architecture - System design overview
• CLI - Command reference
• Proxy - Corporate network setup
• VM Detection - Agent environment detection
• SPEC - Technical specification

Historical:

• ADR-001 - Original design decisions (immutable)

License

TBD