Garuda: open-source coding agent with OS-level sandbox
Apache-2.0 terminal/VS Code/Zed agent (ACP) runs commands under Seatbelt/bubblewrap so writes stay in project+temp+caches, network is closed unless allowlisted, edits ask first, team policy can't be loosened by a cloned repo, and an outside hash-chained audit log verifies with /audit verify.