enzarb

Every project boots a pod with a real terminal and a Claude agent speaking ACP. It edits files, runs your test suite and reads the output in the same place you do.

Projects and Environments are CRDs. An operator reconciles them into sandbox pods, routes and a Postgres cluster it manages for you — on your cluster, not ours.

Sandboxes run under gVisor. Tenant code talks to runsc rather than your node's kernel, so isolation is the runtime's job and not a flag someone has to remember.

git and gh reach GitHub through a credential-injecting egress proxy that adds the token on the way past. A compromised agent has nothing portable to steal.

Deploy an Environment and it comes up on its own hostname under your environment domain, ready to hand to somebody else.

Issue, pull request and push events from the GitHub App start agent runs on their own. Come back to a branch and a pull request.