augur
Sandboxed macOS virtual machines with a full Xcode toolchain for AI coding agents, plus a lighter Linux container mode, keeping the host machine out of reach.
augur runs Claude Code inside an isolated macOS guest booted on Apple's Virtualization.framework, with Xcode, xcodebuild and the iOS Simulator preinstalled, so the agent can build, run and test Apple-platform code without touching the host; only the project's current directory is exposed, and network egress is limited to a host-enforced allowlist.
The base VM is built with auto-login and a virtual display so that xcodebuild test, which normally needs a GUI login session, works headless over SSH, and on a macOS 27 host and guest it provisions the VM account with no Setup Assistant to click through and a randomized admin password per build.
The base VM is built only from Apple-signed assets, an Apple IPSW and an Xcode XIP, with no third-party VM images; each project gets its own thin clone of the base VM or its own container, seeing only its own workspace and its own Claude history.