First Launch
Wrap your first AI coding session in a Levee sandbox.
Demo content. This page is a template placeholder - the real Levee documentation will replace it.
Once the agent is running, you launch any tool through Levee so its filesystem and network access are mediated by policy.
Launch a sandboxed session
levee run --policy default -- claude
Levee starts the tool inside an AppContainer and applies the named policy. Everything the tool reads, writes, or connects to is checked against the rules.
Watch what the agent does
levee logs --follow
| Column | Meaning |
|---|---|
FS | File access (allow / deny) |
NET | Outbound connection attempt |
POL | Policy rule that matched |
Next steps
- Define your own rules in Policies.
- Restrict egress in Network control.