Built in, not bolted on
The sandbox is part of the harness itself, not a bwrap wrapper around a harness that was never designed for one. Every tool call the agent can make passes through it, because Chock was built that way from the start.
Product
Chock
A security-first harness for AI agents.
Agents work in a locked-down copy of your project, under a policy that governs what they may read, run, and change. Their work comes back as a commit you choose to keep.
Why it exists
Built for the work we do ourselves
We use LLMs to help with our own work every day, and we wanted their speed without handing them the keys to the repository.
Chock is the harness we built for that. Security comes first, so the sandbox is designed into the harness itself rather than wrapped around it — because sandboxing is something you design a harness around, not something you bolt on afterwards.
How it works
From a task to a commit
Set the policy first
Decide what the agent may read, run, and change before it starts work. The sandbox holds it to that policy for the whole session.
Give it a copy to work in
The agent works in its own locked-down copy of the project. Your checkout stays exactly as you left it.
Keep the commit
Finished work comes back as a commit on top of your project. Read the diff, then keep it — or throw it away.
What's inside
What the harness gives you
Policy decides
What the agent may read, run, and change is written down as policy before the session starts. The sandbox enforces it — it is not a request the agent can argue its way out of.
Room to work
Locked down does not mean helpless. The agent runs builds and tests inside the sandbox, reads its own output, and fixes what it broke before handing work back.
A commit you choose to keep
Nothing touches your project until you have read the diff. Keep the commit, or drop it and start fresh.
Also from Lilith Semi
One workflow, start to finish
Chock, Harbor, and Forge — one for the agent that writes your code, one for the libraries it builds with, one for the board it runs on.
Putting agents to work on your code?
Tell us what your agents work on today and what you want fenced off from them. We will come back with questions and next steps.