Unprivileged, self-applied Landlock + seccomp confinement wrapper — no root, no daemon, one static binary. It restricts itself, then execve()s your command; the child inherits every restriction irrevocably.
1 file for Claude Code: oring CLAUDE.md — 1,181 tokens loaded in every session.
CLAUDE.md A 1,181 tok These files are hexproofdev/oring's own configuration — they tell Claude Code how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.