Sandcastle on a Mac
Orchestrate sandboxed coding agents (isolated containers) · Agent Platforms
Sandcastle runs AI coding agents inside isolated sandboxes; each agent gets its own Docker/Podman (or Vercel) container with full isolation, and commits made in the sandbox are patched back to the host automatically. Provider-agnostic (Claude Code, Codex, OpenCode…), local/offline, MIT-licensed; orchestrate runs in TypeScript with a single sandcastle.run(). A safe way to let agents execute untrusted code without touching your machine.
Run Sandcastle with FrontierStack
Install or connect Sandcastle; then check its status, ports and certificate from FrontierStack. The same screen links to firewall checks, Malware Audit and backups where they apply.
Run it from your Mac.
FrontierStack installs, monitors and secures services on this Mac and on linked servers.
Download FrontierStackApple notarized · Safe & secure · macOS 13 Ventura+