ShieldedShell

Run coding agents in a bounded workspace. Orchestrate developer and auditor loops with reconciler gates.

Public beta (0.1.0). APIs may change before 1.0. Feedback welcome on GitHub Issues.

What it does

ShieldedShell wraps terminal agent workflows with:

Workspace sandbox — overlay filesystem, blocked secret paths, network off by default
Intercept log — every read, exec, and policy decision is visible in the terminal
Dual-agent loop — developer and auditor agents with JSON buffers, phase locks, and a reconciler gate
Engine profiles — one data-driven integration path for Claude, Cline, Aider, OpenHands, OpenCode, Copilot, Cursor, and more

npm install -g @shieldedshell/cli@beta
shieldedshell init
shieldedshell doctor