123.9K
Skip to main content
HomeRun AI Coding Agents in CoderAI GovernanceAgent FirewallLandJail

LandJail

Note

Agent Firewall is part of AI Governance, which is included with a Premium license.

landjail is Agent Firewall's alternative jail type that uses Landlock V4 for network isolation.

Overview

Agent Firewall uses Landlock V4 to enforce network restrictions:

  • All bind syscalls are forbidden
  • All connect syscalls are forbidden except to the port that is used by http proxy

This provides network isolation without requiring network namespace capabilities or special Docker permissions.