Fence

Command-line sandbox that blocks network access and limits filesystem writes for any command. It can also contain AI coding agents such as Claude Code, with import of existing Claude permissions.