Is this the right tool for me?

[nidomiro]

I'm currently searching for a good sandbox for an cli agent like pi or claude code.
As of now I use fence. It works but I also want to be able to let the agent execute functional tests, which need testcontainers and therefore a docker socket. Giving the agent the docker socket with fence would eliminate the sandbox fence created for the agent.

Can I use your tool for this usecase?

To be clear again, my usecase is:

• hinder the agent on reading, deleting and modifying any file it feels like on my PC
  • I see the config has a readonly prop. Does this mean everything, as in every file in any path, is writeable by default?
  • Can I add relative paths there? I have a worktree setup, where the content of the .git folder actually resides in ../.bare.
  • Can I add absolute paths there? Like referencing some files in my home directory?
• let the agent execute docker commands, also have access to an docker socket, without breaking the sandbox.
• not needed as of now, but maybe in the future: let the proxy add auth to requests, so the agent does not see the secrets.
• should work on linux and macOs

Thanks for your answer in advance