My vision a lightweight, permission-headache-free Docker setup for running OpenCode, uv, and untrusted Python code without risking your host OS.
When contributing to unfamiliar open-source projects or letting AI coding agents (like OpenCode) run terminal commands, there's always a slight hesitation.
What if a build script touches my system Python, or a rogue command wipes host files?
To solve this, I built saferun a zero-trust, disposable Docker sandbox designed specifically for Python developers and AI agent workflows on macOS and Linux.
Here’s how it works, the permission nightmares I had to solve, and how you can set it up in under two minutes.
