AgentShield is an air-gapped, zero-telemetry runtime defense mesh for autonomous coding agents. Stop prompt injections, sandbox shell commands via eBPF/Landlock in 0.18ms, and protect .env keys with synthetic decoy canaries. 100% local-first and open source.