Airlock v0.3.0: command modules are now opt-in.

Airlock already shipped hardened deny rules per tool and scoped each container via profiles. Now there's a third layer: no command loads unless the operator enables it.

SSH is worth calling out. It's remote code execution with real keys. If you enable it, 13 deny rules lock it to single-hop, one-off commands. No tunneling, no forwarding, no credential passthrough.

https://github.com/calebfaruki/airlock

#infosec #docker #opensourcesecurity #aiagents #owasp #ai