VibeBox runs the agent inside a fully isolated Linux VM via Apple’s Virtualization Framework, so the host stays sealed off while the agent can work without permission spam.

GitHub: https://github.com/robcholz/vibebox

What it does:

> One command drops you into a Debian VM that mounts your project read-write

> Configuration is simple: vibebox.toml sets CPU/RAM/disk and mounts.

> Warm startup is typically < 6 seconds on my M3, so jumping in/out is fast.