Tool · October 2026
Cordon
A policy-driven Go runtime for safely executing AI-agent tool calls with explicit filesystem, network, and resource policies.
About this project
- Runs allowlisted commands through a Go shell interpreter without falling back to host binaries or the host PATH.
- Provides a capability-bound virtual filesystem with path rules, quotas, and shared access for commands and custom tools.
- Enforces per-call timeouts, output limits, and command-count budgets, with network access controlled by policy.
Technologies
Go · Bash · Virtual Filesystem · AI Agents