DeltaBox Lite: diff/commit/abort sandbox for coding agents
At a glance
Apache-2.0 agent-native sandbox (Linux FUSE/Landlock, macOS APFS clones+Seatbelt) gives agents a confined FS view with unified text diffs, binary markers, and per-task or per-tool-call commit/abort—optional JSON-RPC adapters for Pi and policy for secrets/network. This workflow is listed under sandbox, coding-agent, agent-governance, devtools, open-source.
Apache-2.0 terminal/VS Code/Zed agent (ACP) runs commands under Seatbelt/bubblewrap so writes stay in project+temp+caches, network is closed unless allowlisted, edits ask first, team policy can't be loosened by a cloned repo, and an outside hash-chained audit log verifies with /audit verify.
AGPL self-hostable workspace runs Claude Code, Codex, OpenCode or Pi in isolated sandboxes; hand off from Slack/web/API, attach playbooks/skills/knowledge, approve sensitive actions, and get PRs or files back—positioned as an open Devin alternative.
MIT Python package signs every policy-gated tool call into a hash-chained .tkb file verifiable offline (Python+TS); works across Claude Code, OpenAI Agents, LangChain/LangGraph, MCP and more—agents can edit their own logs but not hide edits when the signer is out of reach.
LiteLLM open-sourced Moyai—the Devin-like cloud agent they run in production: Slack/browser tasks get isolated cloud workspaces (terminal+FS+browser), run Codex/Claude Agent SDK/Hermes/OpenCode, open PRs, and attribute spend through your LiteLLM gateway (they estimate ~79% lower vs their Devin bill).