opencode-sandbox

Launch opencode inside a nearly instant microsandbox VM with your project mounted at /workspace. Unleash your agents’ full permissions in a disposable cage, so they can do their best work without ever roaming your host or ever learning your secrets.