Open source security for AI agents: an OS-enforced egress wall on macOS, and on Ubuntu 24.04 x86-64 via a separate package; keys only the operator holds; a hash-chained audit record. One command wraps Claude Code, Cursor, Hermes, OpenClaw or Cline on tested config paths. No vendor in the path. Claims trace to the Assurance Matrix.
Latest release v1.8.4 · 6 Sept 2026
2 files for Codex, OpenCode and Claude Code: sanctuary-framework AGENTS.md, sanctuary-framework CLAUDE.md — 6,599 tokens loaded in every session.
AGENTS.md A 6,258 tok CLAUDE.md A 341 tok These files are eriknewton/sanctuary-framework's own configuration — they tell Codex, OpenCode and Claude Code how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.