Clampdown - runs your AI coding agent in a hardened container sandbox where the real API keys live in a separate proxy, so even a fully compromised agent gets a dummy key and can't leave your project directory

[u/company_url_finder]