appcontainer

Sandboxed, Rust-based, Windows Defender Client

Windows-first desktop oversight for AI agents: live monitoring, local security reviews, token usage, audit reports and opt-in action policies/MCP gateways. Experimental Hyper-V guest execution; macOS/Linux experimental.

AppJailLauncher in Rust

Moved: https://codeberg.org/koutheir/binary-security-check

Run a command in a sandbox with the same flags on every OS — one capability model compiled to Seatbelt (macOS), gVisor (Linux), and AppContainer (Windows).

Disclosing information from an AppContainer.

Run windows applications in AppContainer sandbox

A music playback app for the Legacy of Kain: Soul Reaver soundtrack.

⚡ Universal organizer for Windows 10 and 11: tray program sets, four-source machine sweep, isolated launch, per-drive Recycle Bin limits, Windows cleanup. Tauri 2 · Svelte 5 · Rust.

No-admin Windows process sandbox library for Rust with AppContainer and Windows Sandbox API backends

Development containers specificationfor developers, designers, data analyst, security agents, etc

Run Claude Code (or any program) in a real OS-level sandbox on native Windows — no admin rights, no WSL, no Docker. File, network & process allow-lists plus an audit log. CLI for developers, GUI for everyone.

Windows photo and video recovery for digital media examination: visual triage, source offsets, SHA-256 and dated findings. Signed releases; free scans and previews.

Dynamic Just-in-Time (JIT) security sandboxing engine for autonomous AI agents. Enforces native OS kernel isolation (macOS Seatbelt, Linux Landlock, Windows AppContainer) via dynamic LLM intents, deterministic Two-Factor Validation (2FV), and active honeypot deception.

This package contains the interop wrappers for WinRT-APIs, that depend on CoreWindow, and other interop helpers for WinUI Window (e.g. to set an icon). There are also some interop components that may help from inside an AppContainer like when using UWP.

The OS-level confinement layer from Convira: macOS Seatbelt, Linux Landlock/seccomp and Windows AppContainer/Job Objects, with probe-verified capability reporting.

Windows process sandboxing via AppContainer + Job Objects. Hard resource limits, process isolation, and a builtin compatibility checker. Zero runtime dependencies

Rust AppContainer and LPAC toolkit for Windows, extended with a security preset for secure MCP server isolation.

A lightweight (less than a megabyte) sandbox for Windows built mainly with Powershell 5 that uses users and AppContainer to isolate user level programs.

WinUI 3 (Windows App SDK) running in a UWP container via the hidden EnableUWPWindow registry switch - one exe, two activation contracts: UWP (CoreWindow + AppContainer + PLM) and classic Win32, with live runtime-contract inspection.