brig v0.4.0 limits where your coding agent can send your code and credentials. This release brings egress policy enforcement on Linux! If brig cannot enforce the policy, then the run is refused. Allow the services you need for the job. Then brig enforces your network policy outside the sandbox, so the rules also apply to the scripts and dependencies the agent runs. In this demo, an example domain works. Requests to Github API and a direct connection to 1.1.1.1 are blocked, even from a root shell inside the sandbox. #OpenSource #Sandboxing

In San Francisco this Friday for #sftechweek? Join our CTO, Panagiotis Moustafellos and DevRel Artemis Leonardou, for a private roundtable on AI, security and production reliability. October 9 · 8–11 PM PT · San Francisco #SFTechWeek #SRE