Jozu just launched Agent Guard → a zero-trust runtime for AI coding agents and MCP (Claude Code, etc).
Most agent guardrails today run in user-space.
So if the agent can access the same host processes/filesystem, a bypass is always on the table.
@Jozu_AI Agent Guard 👉 hypervisor isolation policy enforcement at runtime.
What that means in practice:
→ agent runs in a hypervisor-isolated container
→ it only sees the workspace you explicitly share
→ host FS, processes, SSH keys, creds stay inaccessible
→ only supply-chain-verified artifacts get in
→ policies are tamper-evident enforced on every action
→ policy server runs as PID 1 (agent can’t kill it)
If your agent touches real credentials or prod-adjacent workflows, this is worth a look.
I'll explore it in more details soon!