Original Summary

<a href="https:&#x2F;&#x2F;github.com&#x2F;freakynit&#x2F;autobox" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;freakynit&#x2F;autobox</a><p>First of all: this is NOT for folks who are already using a sandbox. The guarantees provided by Autobox are weaker. This is rather for folks who &quot;hesitate&quot; to use sandboxes.<p>Autobox is built around two observations I kept making over past one year of seeing sandbox launches and their real-world usage:<p>1. There are many sandboxing options now, and they work well. But leaving a handful few, almost nobody uses them. The blocker isn&#x27;t the technology, it&#x27;s the setup friction — however small it looks on paper, it&#x27;s enough that people skip it entirely.<p>2. LLMs mostly don&#x27;t write harmful code or take destructive steps. They&#x27;re not adversarial by default.<p>Autobox bets on the second observation to remove the first. Instead of asking you to configure a sandbox, it&#x27;s just there: every tool call carries its own permissions, and anything you don&#x27;t explicitly allow is denied.<p>Is it perfect? No - seatbelt filesystem rules are best-effort, and the strong isolation is the V8 path.<p>Is it better than using no sandbox at all? Definitely yes.<p>This is also for M-series Macs only.<p>---<p>Oh, and the best part: &quot;copy_then_sync&quot;:<p>Using APPFS clonefile, Autobox can hand your agent a full, &quot;writable&quot; copy of a repo instantly (1-2 ms). The agent gets something it can freely &quot;destroy&quot;, but, your actual working tree is untouched. Your agent can then verify things, and of all looks okay, in one command sync the changes back to host within milliseconds.

中文概览

中文标题： Show HN: Autobox – 让你的代理自我沙箱

Autobox是一个让AI代理自我沙箱的工具，旨在降低沙箱使用门槛。它基于两个观察：许多沙箱方案因设置摩擦而少人使用；LLM通常不写恶意代码。每个工具调用携带权限，未明确允许则拒绝。仅支持M系列Mac。提供clonefile快速复制仓库。

  • 情报分类：开源项目与落地
  • 分类依据：介绍开源沙箱工具Autobox的项目
  • 信息来源：Hacker News 新项目
  • 发布时间：2026/10/1 18:34:31