Lightweight and declarative sandboxing for AI agents on Linux and macOS using Nix. - View it on GitHub