How is this different from docker sbx or microsandbox.dev? Not saying we don't need more alternatives, just asking to see if there is a reason to switch.

Oh awesome, I just started building something like this but nice to use something off the shelf for once.

I used a project called toolgate to autoapprove "safe" tool calls but request permission on riskier calls declaratively. But there's so many unnecessary tool permission requests

Personally I am using Eclipse Enclave to sandbox my agents. Good to see another fully open source solution in Coop.

I use coop daily and found it super convenient for my use case (ie letting agents go on with no access to my other projects or personal files)

I would recommend anyone that has desire to provide stricter boundaries to agents to give it a try - while remembering that a motivated agent would probably be able to escape it :)

sidenote: coop is also a large swedish grocery chain, pronounced the same way :)

https://www.coop.se/