The fastest way to ship with AI securely.
Sandbox AI coding agents in hardware-isolated Linux VMs on macOS and Linux.
Full network control, HTTPS inspection, MCP tool routing, and per-session telemetry.
Capsem 0.6 is undergoing release qualification. Installation instructions, downloadable packages, and detailed documentation are intentionally unavailable until the public release, planned for Summer 2026.
The current documentation status is at docs.capsem.org.
| System | Versions supported | Hardware |
|---|---|---|
| macOS | 14 (Sonoma) or later | Apple Silicon (M1 or newer) |
| Ubuntu | 24.04 or later | x86_64 or arm64, KVM capable |
| Debian | 13 or later | x86_64 or arm64, KVM capable |
Capsem aims to run on every currently supported version of these operating systems. Not covered yet: Ubuntu 22.04 and Debian 12 (#181), Alpine (#182).
Every release above is proved each gate run — the package is unpacked and run on each one, and must be refused on the rest.
This project is not an official Google project. It is not supported by Google and Google specifically disclaims all warranties as to its quality, merchantability, or fitness for a particular purpose.
See LICENSE.