• v0.2.0 6e9e4a11c9

    v0.2.0 Stable

    dev released this 2026-11-07 23:34:51 +00:00 | 0 commits to main since this release

    • Optional LAN access, strict by default: --allow-subnet lets a lane reach chosen IPv4 subnets through the host's own route, and --allow-host-port opens chosen ports on the host itself, also reachable at localhost inside the lane; every other host address and port stays blocked
    • --deny-subnet, --deny-host-port, --strict and an interactive --access prompt change allowances later; status and --status --json report them
    • Terminal interface: LAN Access action, and per-assignment access that is reapplied when a lane is recreated
    • Lanes are always exclusive; apps started with --run or --shell run inside the lane as the invoking user
    • Accept rules other tools insert into a lane's firewall table can no longer open its NIC to host traffic, and unsolicited traffic into a lane is dropped
    • Breaking: --sharing shared and --as-root are no longer accepted; release a shared lane and recreate it
    Downloads
  • v0.1.0 e37683b21e

    v0.1.0 Stable

    dev released this 2026-10-22 19:21:04 +00:00 | 2 commits to main since this release

    • Terminal interface for NIC, Wi-Fi and browser profile isolation: main and sandboxed NIC detection, Wi-Fi scanning and connection, and Open Browser on the selected profile, assignment or browser
    • Browser lanes for Chromium- and Firefox-family browsers and forks, with exclusive or shared NIC access, a kill switch and DNS confined to the lane
    • Optional Google Chrome and Microsoft Edge installation on Linux amd64
    • Safer state handling and cleanup: state files parsed as validated data, exact process matching, no root access to user-controlled paths
    • Source archive and static Linux amd64 bundle with manifests and SHA-256 checksums
    Downloads