StuntDouble

Running autonomous coding agents locally is terrifying. One hallucination and they can delete your database or overwrite critical files. StuntDouble wraps any AI agent (like Aider or Claude Code) in a hardware-isolated Docker MicroVM. It injects eBPF C-code into your Linux kernel to silently drop destructive outbound network packets, and uses Git plumbing to allow instant, zero-copy filesystem rewinds if the AI deletes your code.