Yeah, my grandmother also did something on this https://github.com/nillebco/varda

Essentially there is no out of the box solution about orchestrating agents and increasing LLMs sandboxing. That's why everyone and their grandmother are re-inventing the wheel.

At the same time, it's an incredibly complicated problem, with a variable perimeter (OS support, sandboxing primitives support).

I am quite happy about my own solution (because it supports my use case!) but I hope something with a decent dev UX will appear one day. AX definitely is NOT.