hexproofdev/oring

Unprivileged, self-applied Landlock + seccomp confinement wrapper — no root, no daemon, one static binary. It restricts itself, then execve()s your command; the child inherits every restriction irrevocably.

2Stars on the repository
1Mods indexed here, across every type
1mo agoLast push, which is what freshness is scored on
BSD-3-ClauseLicence, which decides whether bodies are shown

oring CLAUDE.md

01

hexproofdev/oring

Instructions file

Instructions for hexproofdev/oring, covering claude.md, the discipline, hard constraints and standing rejections.

2 1mo ago A 1,181 tokens original BSD-3-Clause