[Feature]: Network sandbox

[basil]

Feature Description

Very cool project! It is still a bit scary that the container can make any network calls. This opens the user up to exfiltration attacks. What I want ideally is:

• An HTTP(S) proxy server that filters by an allowed domain list and rejects all other domains.
• A DNS proxy that similarly filters by an allowed domain list and rejects all other queries.
• My agent running in a sandboxed container that has no network connectivity other than the abovementioned proxies.

[homanp]

Thank you! Proxy is due to be released next week, after which we can add this type of safety in the sandbox.

[basil]

@homanp Is this still under development?

[homanp]

@basil Had some other stuff come up, would you be up for making a PR?