Show HN: Fence – Sandbox CLI commands with network/filesystem restrictions
Summary
Fence is an open-source, lightweight sandbox for CLI commands that blocks network access by default and enforces configurable filesystem and command policies. It targets semi-trusted code, CI jobs, and AI tooling by providing a permission-based layer to limit side effects, with cross-platform support (macOS and Linux) and several installation options, templates, and monitoring features.