🛡️ Code on Incus: Isolated Sandboxes for AI Agents

This project provides each AI agent with its own isolated machine, complete with root access, Docker, and systemd. Built around Incus, it includes active defense mechanisms to automatically detect and stop potential threats. It is more like an exploration into how to safely grant autonomy to coding assistants like Claude Code. Instead of heavily restricting the agent's actions, it provides a full sandbox where the agent can execute complex tasks without compromising the host system.