Fetching from the wire…
01
02
03
04
05
06
07
08
Tools2026-07-14 · source-backed
It mounts your repo into a throwaway Apple-silicon Linux VM, restricts outbound traffic to an allow-list, and forwards your SSH agent, so agents can install packages and run code without touching your files, keychain, or host (GitHub). The design choice worth noting: hypervisor-level isolation over process sandboxing, which is a real blast-radius difference when the thing running is an autonomous agent executing README-suggested scripts (see the Friendly Fire finding above). It's 422 stars and pre-1.0 Go, so early, but it's part of a fast-forming pattern. Give the agent a cage, not your machine.
Each link below shares sources, entities, or timing with this story.
Apple partners with Google / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Apple partners with Google); both cover GitHub, README; reported by the same outlet (github.com).
Apple supports Claude / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Apple supports Claude); both cover Apple, GitHub; reported by the same outlet (github.com).
Apple uses Gemini / Shared entity: GitHub / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Apple uses Gemini); both cover GitHub; reported by the same outlet (github.com).
Apple supports Claude / Shared entity: GitHub / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Apple supports Claude); both cover GitHub; reported by the same outlet (github.com).
Apple uses Gemini / Shared entity: GitHub / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Apple uses Gemini); both cover GitHub; reported by the same outlet (github.com).
Apple supports Claude / Shared entity: GitHub / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Apple supports Claude); both cover GitHub; reported by the same outlet (github.com).
Linked by a graph relationship (Apple supports Claude); both cover GitHub; reported by the same outlet (github.com).
Apple supports Claude / Shared entity: GitHub / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Apple supports Claude); both cover GitHub; reported by the same outlet (github.com).