AI agents run on your machine, with your credentials, making network requests you never see. Greywall puts a deny-by-default layer in front of any CLI agent. Run greywall -- claude and it restricts file access, blocks outbound connections, and shows you a live dashboard of what the agent is trying to reach. You decide what to allow. Nothing is containerized. Your workflow stays the same but safer. It runs on Linux and macOS and costs nothing.