Kule sandboxes AI agents in a copy-on-write folder

Developer Selçuk released Kule 0.2.0-preview.1, an open-source tool that runs AI agents (Claude Code, Codex, Gemini via ACP) inside a copy-on-write copy of a folder in an OS sandbox. Changes reach the real folder only after a Cedar policy or the user approves them, and every commit can be undone.

• Sandbox uses Seatbelt on macOS and Landlock+seccomp on Linux, no fallback
• Cedar policy passes code edits but holds manifests and denies git hooks
• Secrets are replaced with placeholders; network goes through a logged proxy
• macOS 13+ and Linux x86_64 only; Windows is planned but not started