Warning
Cage is pre-alpha, experimental, and not production ready. There is no release or package publication yet. Do not rely on Cage as a security boundary.
Cage is an experimental sandbox CLI for running AI coding agents in isolated containers. The project is still establishing its implementation, security controls, and regression test suite.
Cage is being developed in public, but it is not ready for real workloads. Interfaces, configuration, and security behavior may change without notice. No version is currently supported, and no binaries, packages, or container images are published by this project.
The repository currently contains design and implementation-planning material. Code and security controls will be introduced incrementally and reviewed through pull requests.
This repository, Saber5656/cage, is the canonical public source and working
repository for Cage. See the migration inventory
for the staged migration scope from the legacy cage-demo project.
Please do not open public issues for suspected vulnerabilities. Follow the private reporting instructions in SECURITY.md.
See CONTRIBUTING.md before opening an issue or pull request.
Cage is licensed under either the Apache License, Version 2.0 or the MIT license, at your option. See LICENSE for details.