Glove

Glove contains an LLM agent in an OS-enforced sandbox. It denies files, environment, network, and tool access unless an operator grants them explicitly.

Status: research prototype. Remote Sage launch remains disabled until its lifecycle, approval, and resource-enforcement contracts are complete.

Start here

./setup.sh

For development:

cmake --preset dev
cmake --build --preset dev
ctest --preset dev

Use docs/build.md for prerequisites, controlled/offline builds, and Linux runtime requirements. Use docs/host-setup.md to plan and apply owner-local managed session setup.

Why Glove

Glove is a containment boundary, not a prompt-injection detector or a complete host-security boundary. The motivation, trust boundaries, and residual risks are in docs/architecture.md and docs/threat-model.md.

Documentation

• docs/build.md — build and validation
• docs/host-setup.md — owner-local machine setup
• docs/session-policy.md — managed-session policy contract
• docs/hostile-content-analysis.md — offline hostile-content profile
• docs/quickstart.md — local containment commands
• docs/future-work.md — unsupported and planned work

License

Glove is licensed under GPL-3.0-only. See CREDITS.md for dependency licenses and research references.