Agent Safehouse

Agent Safehouse

Agent Safehouse is a macOS Seatbelt wrapper with deny-first, composable profiles for coding agents. It hardens filesystem access; it does not broker credentials.

Install

brew install eugene1g/safehouse/agent-safehouse

Launch with proxy env

Seatbelt shares the host network, so host loopback from proxy env works:

eval "$(varlock proxy env)"
safehouse claude --dangerously-skip-permissions

Or a shell alias that always sources the proxy session first:

~/.zshrc

safe-claude() {
  eval "$(varlock proxy env)"
  safehouse claude --dangerously-skip-permissions "$@"
}

Tune profiles with --add-dirs-ro, --append-profile, and the Safehouse docs so the agent can only read what it needs; keep real secrets out of those paths when they are proxied via varlock.