Tilde

About Tilde

Tilde is a sandbox runtime that makes it safe to point autonomous agents at real production data by turning every agent run into a transaction you can roll back. Code from GitHub, objects from S3, and documents from Google Drive are mounted as a single versioned POSIX filesystem at ~/sandbox — a real filesystem, so any tool in any language works without an SDK — and every file is versioned from the first commit, meaning any run can be reverted with one command instead of restored from a backup. Each run executes in a fresh isolated container: on a clean exit changes commit atomically, and on failure nothing changes at all, so there is no half-written state to clean up. Network egress is default-deny and policy-checked per request, with cloud metadata endpoints and private ranges blocked outright, which closes off the data-exfiltration and prompt-injected-callout failure modes directly rather than hoping the model behaves; every allowed and denied request is logged against the agent that made it. On top of that sits a time-travel audit trail showing exactly what changed, who did it, and when, down to the individual file, plus per-action policies and human approval gates for operations you want a person to sign off on. It integrates with Claude, LangGraph, Hugging Face, S3, and Google Drive.

Key Features

Tags