agents do the work.you keep the veto.
fluidbox runs your ai agents in disposable sandboxes, checks every action against your rules, and keeps a complete record of every run — so you can hand them real work without holding your breath.
Routine work flows. Risky calls stop.
Every action an agent takes is checked first — against your spending limits, your rules, and your list of things that need a human. A denial is safe: the agent simply hears "no" and keeps working.
Autonomous runs follow the same rules. Nothing bypasses the gate.
How decisions are made ›Watch it decide — then keep the receipts.
Every run ends with a diff, a cost, and a timeline of every decision — what was allowed, what was denied, and who approved what. When someone asks what the agent did, you have the answer.
The jobs teams hand it first.
Six shipped capabilities, not a roadmap — every card links to the documentation that proves it.
Review every pull request
A governed run per PR, results posted back as one tidy comment and a check. Fork PRs are read-only, always.
Maintenance on a schedule
Dependency bumps, triage sweeps, weekly reports — fired exactly once per tick, with receipts.
You approve the risky steps
The run pauses on the call you'd want to see and resumes on your decision. No answer means no.
Autonomy, with rails
No one watching? The rules still apply, budgets still stop runaways, and every decision is still recorded.
Your tools, without handing over keys
Agents use Linear, Jira, or GitHub through fluidbox — your tokens never enter the sandbox.
A spending cap on every run
Set a ceiling in dollars, tokens, or minutes. The worst case is a number you chose.
Free, open, and tested like infrastructure.
MIT-licensed, all of it — the whole product, not a limited edition. You can read every line that governs your agents, and the test suites that prove it behaves.
Your first governed run in about five minutes.
Run it on your own machine with Docker, or on your cluster with the Helm chart. Your code and your credentials never leave your infrastructure.