ironclaw

Our take

Sandboxed shell execution for agents: each command runs in an ephemeral gVisor container, and the project's supply-chain hygiene (cosign-signed releases, SLSA provenance, SBOMs, OpenSSF scorecard) is unusually serious for a month-old repo. The catch is right in the install string — the control plane needs your host Docker socket mounted, which is root-equivalent access to the machine; the vendor discloses this candidly in the registry args. Alpha software from a brand-new org with no community yet, so treat it as promising rather than proven.

reviewed by hand · 2026-07-06

Something wrong or dead here? Report it

Verification record

last verified

6 days ago

github stars

19

last commit

8 days ago

archived

no

license

AGPL-3.0

in registry since

2026-07-07

github.com/IronSecCo/ironclaw