Running autonomous coding agents locally is terrifying. One hallucination and they can delete your database or overwrite critical files. StuntDouble wraps any AI agent (like Aider or Claude Code) in a hardware-isolated Docker MicroVM. It injects eBPF C-code into your Linux kernel to silently drop destructive outbound network packets, and uses Git plumbing to allow instant, zero-copy filesystem rewinds if the AI deletes your code.
