# landjail jail type

<Callout type="info" title="Note">
  Agent Firewall is part of [AI Governance](/beta-docs/@main/ai-coder/ai-governance/), which is included with a Premium license.
</Callout>

landjail is Agent Firewall's alternative jail type that uses Landlock V4 for network isolation.

## Overview [#overview]

Agent Firewall uses Landlock V4 to enforce network restrictions:

* All `bind` syscalls are forbidden
* All `connect` syscalls are forbidden except to the port that is used by http proxy

This provides network isolation without requiring network namespace capabilities or special Docker permissions.