penberg/agentutils: UNIX tools for running untrusted coding agents in directory forks

Agentutils is a collection of small UNIX tools designed to let coding agents like Claude Code work within a directory without being trusted with full file system access. The suite provides copy-on-write directory cloning via fsfork, command sandboxing via confine using macOS Seatbelt or Linux Landlock, and change tracking via fsdiff. Together, these utilities allow developers to run untrusted AI agents safely side by side and review their changes before applying them. Open article →