Garuda: open-source coding agent with an OS sandbox (Seatbelt / bubblewrap)

Madhusudhan Vasanth Kumar’s Apache-2.0 terminal, VS Code, and Zed agent runs commands in Seatbelt (macOS) or bubblewrap (Linux) so they write only in the project, temp folders, and package caches, with home secrets unreadable and no network by default; edits show a diff first, and a hash-chained audit log records every permission decision. Install with npm install -g @garuda-agent/garuda; it works with Claude, OpenRouter, and local OpenAI-compatible models.