Top AI Repos — open-source AI, indexed and scored
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Multi-OS sandbox to run AI agents with better constraints (it is not 100% secure, but enough)
| Date | Stars |
|---|---|
| 2026-07-31 | 1018 |
| 2026-08-02 | 1030 |
| 2026-08-06 | 1030 |
Today
— stars today
This week
— stars this week
This month
— stars this month
Momentum
60.0
growth rate 0.00%/day
# ai-jail A sandbox wrapper for AI coding agents (Linux: `bwrap`, macOS: `sandbox-exec`). Run Claude Code, GPT Codex, OpenCode, Crush, and similar tools with access only to the paths you allow. ## Install ### Homebrew (macOS / Linux) ```bash brew tap akitaonrails/tap && brew install ai-jail ``` ### Arch Linux (AUR) Two project-maintained AUR packages are available. Pick one: ```bash yay -S ai-jail-bin # prebuilt Linux x86_64 binary from GitHub Releases yay -S ai-jail # builds from source with your local Rust toolchain ``` The `-bin` variant is fastest and installs the same Linux x86_64 binary built by CI. The source variant compiles locally and is the right choice for Arch Linux ARM/aarch64. Both packages depend on `bubblewrap` and install the `ai-jail` binary to `/usr/bin/`. The project owns the AUR package bases, and packaging is tracked in `packaging/aur/`. ### cargo install ```bash cargo install ai-jail ``` ### mise ```bash # Install the latest release globally mise use -g github:akitaonrails/ai-jail # Pin an exact release globally mise use -g github:akitaonrails/[email protected] ``` Use the version as mise reports it (`1.4.0`), not the Git tag shorthand (`v1.4`). If a just-published release does not appear yet, clear mise's GitHub release cache first: ```bash mise cache clear mise ls-remote github:akitaonrails/ai-jail mise use -g github:akitaonrails/[email protected] ``` ### Nix (flake) ```bash # Run directly without installing nix run github:akitaonrails/ai-jail # Install to your profile nix profile install github:akitaonrails/ai-jail ``` ### GitHub Releases Download prebuilt binaries from the [Releases](https://github.com/akitaonrails/ai-jail/releases) page: ```bash # Linux x86_64 curl -fsSL https://github.com/akitaonrails/ai-jail/releases/latest/download/ai-jail-linux-x86_64.tar.gz | tar xz sudo mv ai-jail /usr/local/bin/ # macOS ARM (Apple Silicon) curl -fsSL https://github.com/akitaonrails/ai-jail/releases/latest/download/ai-jail-macos-aarch64.tar.gz | tar xz sudo mv ai-jail /usr/local/bin/ ``` ### From source ```bash cargo build --release cp target/release/ai-jail ~/.local/bin/ ``` ### Dependencies - Linux: [bubblewrap](https://github.com/containers/bubblewrap) (`bwrap`) must be installed: - Arch: `pacman -S bubblewrap` - Debian/Ubuntu: `apt install bubblewrap` - Fedora: `dnf install bubblewrap` - If `bwrap` is in a non-standard location (e.g. Nix store), set `BWRAP_BIN=/absolute/path/to/bwrap`. - The Nix flake package already sets `BWRAP_BIN` automatically. - macOS: `/usr/bin/sandbox-exec` is used (legacy/deprecated Apple interface). #### Ubuntu 24.04+ / Debian 13+ users These distros ship an AppArmor policy that denies unprivileged user namespace creation, which is how `bwrap` isolates the sandbox. If `ai-jail` fails with `bwrap: setting up uid map: Permission denied`, you need to either relax the system-wide restriction or install a local AppArmor profile for `bwrap`. This affects every tool that uses rootless user namespaces (Distrobox, rootless Podman, Flatpak from non-standard paths, etc.), not just ai-jail. Option A — relax the restriction system-wide (simplest): ```bash echo 'kernel.apparmor_restrict_unprivileged_userns=0' \ | sudo tee /etc/sysctl.d/60-userns.conf sudo sysctl --system ``` Option B — install an unconfined profile for `bwrap` only (keeps the rest of the policy intact): ```bash sudo tee /etc/apparmor.d/bwrap >/dev/null <<'EOF' abi <abi/4.0>, include <tunables/global> profile bwrap /usr/bin/bwrap flags=(unconfined) { userns, include if exists <local/bwrap> } EOF sudo systemctl reload apparmor ``` Pick whichever matches your threat model. We don't ship a profile with ai-jail itself because the profile has to apply to `bwrap`, which is system-owned. ## Upgrade ```bash # Homebrew brew update && brew upgrade ai-jail # cargo install cargo install ai-jail --force # mise mise cache clear mise upgrade github:akitaonrails/ai-jail # or pin a specific
Excerpt of 49,772 characters
Read on GitHubWould you bet a product on this? Bounded 0–100 and slow moving.
matched fp:847ad86111166c96, desc:ai agents
