This looks like a neat project that could be useful as part of an AI security stack in particular.
By sandboxing binaries with an allow list of syscalls, you greatly reduce the attack surface for untrusted code/commands.
Been working on building out a new sandbox, definitely will check this out!
Another similar tool that’s actually used in Claude Cowork’s VM for sandboxing commands: